From 4e238e4aa894a139332b3d496a54f35a71180d5c Mon Sep 17 00:00:00 2001
From: Marek Fajkus <marek.faj@gmail.com>
Date: Fri, 6 Jun 2025 12:48:37 +0200
Subject: [PATCH] elmPackages.elm: Fix runtime TLS connection to
 package.elm-lang.org

Resolves #414208 by downgrading version of TLS library
used to compile executables.

See upstream issue for more context https://github.com/elm/compiler/pull/2325
---
 .../compilers/elm/packages/ghc9_6/default.nix |  4 +
 .../elm/packages/ghc9_6/tls-1.9.0.nix         | 79 +++++++++++++++++++
 2 files changed, 83 insertions(+)
 create mode 100644 pkgs/development/compilers/elm/packages/ghc9_6/tls-1.9.0.nix

diff --git a/pkgs/development/compilers/elm/packages/ghc9_6/default.nix b/pkgs/development/compilers/elm/packages/ghc9_6/default.nix
index c9ad34e70a811..e3e030c7610d7 100644
--- a/pkgs/development/compilers/elm/packages/ghc9_6/default.nix
+++ b/pkgs/development/compilers/elm/packages/ghc9_6/default.nix
@@ -38,6 +38,10 @@ pkgs.haskell.packages.ghc96.override {
 
         inherit fetchElmDeps;
         elmVersion = elmPkgs.elm.version;
+
+        # Fix TLS issues
+        # see https://github.com/elm/compiler/pull/2325
+        tls = self.callPackage ./tls-1.9.0.nix { };
       };
     in
     elmPkgs
diff --git a/pkgs/development/compilers/elm/packages/ghc9_6/tls-1.9.0.nix b/pkgs/development/compilers/elm/packages/ghc9_6/tls-1.9.0.nix
new file mode 100644
index 0000000000000..e7d5acd58026f
--- /dev/null
+++ b/pkgs/development/compilers/elm/packages/ghc9_6/tls-1.9.0.nix
@@ -0,0 +1,79 @@
+{
+  mkDerivation,
+  asn1-encoding,
+  asn1-types,
+  async,
+  base,
+  bytestring,
+  cereal,
+  crypton,
+  crypton-x509,
+  crypton-x509-store,
+  crypton-x509-validation,
+  data-default-class,
+  gauge,
+  hourglass,
+  lib,
+  memory,
+  mtl,
+  network,
+  QuickCheck,
+  tasty,
+  tasty-quickcheck,
+  transformers,
+  unix-time,
+}:
+mkDerivation {
+  pname = "tls";
+  version = "1.9.0";
+  sha256 = "5605b9cbe0903b100e9de72800641453f74bf5dade6176dbe10b34ac9353433e";
+  libraryHaskellDepends = [
+    asn1-encoding
+    asn1-types
+    async
+    base
+    bytestring
+    cereal
+    crypton
+    crypton-x509
+    crypton-x509-store
+    crypton-x509-validation
+    data-default-class
+    memory
+    mtl
+    network
+    transformers
+    unix-time
+  ];
+  testHaskellDepends = [
+    asn1-types
+    async
+    base
+    bytestring
+    crypton
+    crypton-x509
+    crypton-x509-validation
+    data-default-class
+    hourglass
+    QuickCheck
+    tasty
+    tasty-quickcheck
+  ];
+  benchmarkHaskellDepends = [
+    asn1-types
+    async
+    base
+    bytestring
+    crypton
+    crypton-x509
+    crypton-x509-validation
+    data-default-class
+    gauge
+    hourglass
+    QuickCheck
+    tasty-quickcheck
+  ];
+  homepage = "https://github.com/haskell-tls/hs-tls";
+  description = "TLS/SSL protocol native implementation (Server and Client)";
+  license = lib.licenses.bsd3;
+}