mirror of
https://github.com/LnL7/nix-darwin.git
synced 2024-12-14 11:57:34 +00:00
25 lines
705 B
Nix
25 lines
705 B
Nix
|
{ config, pkgs, ... }:
|
||
|
|
|
||
|
|
{
|
||
|
|
security.pki.certificates = [
|
||
|
|
''
|
||
|
|
Fake Root CA
|
||
|
|
------------
|
||
|
|
''
|
||
|
|
];
|
||
|
|
|
||
|
|
test = ''
|
||
|
|
echo "checking for ca-certificates.crt in /etc" >&2
|
||
|
|
test -e ${config.out}/etc/ssl/certs/ca-certificates.crt
|
||
|
|
|
||
|
|
echo "checking NIX_SSL_CERT_FILE in set-environment" >&2
|
||
|
|
grep 'NIX_SSL_CERT_FILE="/etc/ssl/certs/ca-certificates.crt"' ${config.system.build.setEnvironment}
|
||
|
|
|
||
|
|
echo "checking for certificates in ca-certificates.crt" >&2
|
||
|
|
grep -q 'BEGIN CERTIFICATE' ${config.out}/etc/ssl/certs/ca-certificates.crt
|
||
|
|
|
||
|
|
echo "checking for extra certificate in ca-certificates.crt" >&2
|
||
|
|
grep 'Fake Root CA' ${config.out}/etc/ssl/certs/ca-certificates.crt
|
||
|
|
'';
|
||
|
|
}
|