Update ci.yml

Author: CryptoLover705

.github/workflows/ci.yml

@@ -391,36 +391,44 @@ jobs:
         if: matrix.name != 'x86_64-macos'
         run: make $MAKEJOBS -C depends HOST=${{ matrix.host }} ${{ matrix.dep-opts }}
 
-      - name: Stealth patch OpenSSL (macOS only)
+      - name: Stealth patch OpenSSL (macOS)
         if: matrix.name == 'x86_64-macos'
-        shell: bash
         run: |
-          echo "🔧 Stealth patch: Configure, domd, mk1mf (clang → ccmac)…"
+          echo "🔧 Stealth-patching OpenSSL (Configure + domd + mk1mf + CC override)…"
 
-          # 1. Patch Configure (THIS is the missing patch)
+          # --- Patch Configure ---
           find depends -path "*/openssl*/Configure" \
             -exec sed -i 's/clang/ccmac/g' {} \; || true
 
-          # 2. Patch domd
-          find depends -path "*/openssl*/util/domd" \
-            -exec sed -i 's/clang/ccmac/g' {} \; || true
-
-          # 3. Patch mk1mf
+          # --- Patch mk1mf ---
           find depends -path "*/openssl*/util/mk1mf.pl" \
             -exec sed -i 's/"clang"/"ccmac"/g' {} \; || true
 
+          # --- Patch domd in both source + build trees ---
+          find depends -path "*/openssl*/util/domd" -exec sed -i \
+            -e "s/CC=.*/CC=ccmac/" \
+            -e "s/clang/ccmac/g" \
+            -e "s/:=\s*clang/:= ccmac/g" \
+            -e "s/clang\$/ccmac/g" \
+          {} \; || true
+
+          find depends/work -path "*/openssl*/util/domd" -exec sed -i \
+            -e "s/CC=.*/CC=ccmac/" \
+            -e "s/clang/ccmac/g" \
+          {} \; || true
+
           echo "🔧 Creating fake compiler alias 'ccmac' → x86_64 clang"
           mkdir -p fakebin
 
           cat <<'EOF' > fakebin/ccmac
           #!/bin/bash
           exec x86_64-apple-darwin11-clang "$@"
           EOF
-
           chmod +x fakebin/ccmac
 
           echo "PATH=$(pwd)/fakebin:$PATH" >> $GITHUB_ENV
-          echo "🆗 Stealth patch applied (Configure + domd + mk1mf masked)"
+
+          echo "🆗 OpenSSL stealth patch fully applied"
 
       - name: Build depends (macOS)
         if: matrix.name == 'x86_64-macos'