test.sh

#!/usr/bin/env nix-shell                                                                                                                                                                                                                               
#!nix-shell -i bash -p nix

set -ex

BASEDIR="$(dirname "$0")/../../../.."

CURRENT_PATH=$(nix-build --no-out-link -A cacert.out)
PATCHED_PATH=$(nix-build --no-out-link -E 'with import ./. {}; (cacert.overrideAttrs (_: { inherit (nss) src version; })).out')

CURRENT_HASH=$(nix-hash "$CURRENT_PATH")
PATCHED_HASH=$(nix-hash "$PATCHED_PATH")

if [[ "$CURRENT_HASH" !=  "$PATCHED_HASH" ]]; then
    echo "mismatch, consider updating"
fi

wtf.log

+ PATCHED_PATH=/nix/store/29rr6xgb01x8bkvkb0cm2607v47r4psj-nss-cacert-3.59
++ nix-hash /nix/store/nnxw9qs41sqisby749k54ip0iv28pdr1-nss-cacert-3.57
+ CURRENT_HASH=f0e1d3def8380727bd3aae08a2c3e361
++ nix-hash /nix/store/29rr6xgb01x8bkvkb0cm2607v47r4psj-nss-cacert-3.59
+ PATCHED_HASH=6f7a9321311c444a81ced36bb0e53a43
+ [[ f0e1d3def8380727bd3aae08a2c3e361 != \6\f\7\a\9\3\2\1\3\1\1\c\4\4\4\a\8\1\c\e\d\3\6\b\b\0\e\5\3\a\4\3 ]]