certmgr: move selfsigned patch into a separate attribute

pkgs/tools/security/certmgr/default.nix

@@ -1,6 +1,8 @@
 { stdenv, buildGoPackage, fetchFromGitHub, fetchpatch }:
 
-buildGoPackage rec {
+let
+  generic = { patches ? [] }:
+    buildGoPackage rec {
       version = "1.6.1";
       name = "certmgr-${version}";
 
@@ -13,6 +15,21 @@ buildGoPackage rec {
         sha256 = "1ky2pw1wxrb2fxfygg50h0mid5l023x6xz9zj5754a023d01qqr2";
       };
 
+      inherit patches;
+
+      meta = with stdenv.lib; {
+        homepage = https://cfssl.org/;
+        description = "Cloudflare's certificate manager";
+        platforms = platforms.linux;
+        license = licenses.bsd2;
+        maintainers = with maintainers; [ johanot srhb ];
+      };
+    };
+in
+{
+  certmgr = generic {};
+
+  certmgr-selfsigned = generic {
     # The following patch makes it possible to use a self-signed x509 cert
     # for the cfssl apiserver.
     # TODO: remove patch when PR is merged.
@@ -22,12 +39,5 @@ buildGoPackage rec {
         sha256 = "0jhsw159d2mgybvbbn6pmvj4yqr5cwcal5fjwkcn9m4f4zlb6qrs";
       })
     ];
-
-  meta = with stdenv.lib; {
-    homepage = https://cfssl.org/;
-    description = "Cloudflare's certificate manager";
-    platforms = platforms.linux;
-    license = licenses.bsd2;
-    maintainers = with maintainers; [ johanot srhb ];
   };
 }

pkgs/top-level/all-packages.nix

@@ -1877,7 +1877,8 @@ in
   };
   ceph-dev = ceph;
 
-  certmgr = callPackage ../tools/security/certmgr { };
+  inherit (callPackages ../tools/security/certmgr { })
+    certmgr certmgr-selfsigned;
 
   cfdg = callPackage ../tools/graphics/cfdg {
     ffmpeg = ffmpeg_2;