nixpkgs/nixos/modules/security/ca.nix

27 lines
604 B
Nix

{ config, pkgs, ... }:
with pkgs.lib;
{
config = {
environment.etc =
[ { source = "${pkgs.cacert}/etc/ca-bundle.crt";
target = "ssl/certs/ca-bundle.crt";
}
# Backward compatibility; may remove at some point.
{ source = "${pkgs.cacert}/etc/ca-bundle.crt";
target = "ca-bundle.crt";
}
];
environment.variables.OPENSSL_X509_CERT_FILE = "/etc/ssl/certs/ca-bundle.crt";
environment.variables.CURL_CA_BUNDLE = "/etc/ssl/certs/ca-bundle.crt";
environment.variables.GIT_SSL_CAINFO = "/etc/ssl/certs/ca-bundle.crt";
};
}