[Nix-dev] How to add (self-signed) SSL certificate to NixOS?

Bjørn Forsman bjorn.forsman at gmail.com
Mon Feb 2 21:06:25 CET 2015


On 2 February 2015 at 17:43, Eelco Dolstra <eelco.dolstra at logicblox.com> wrote:
> A better way (not tested):
>
>   environment.etc."ssl/certs/ca-bundle.crt".source =
>     pkgs.runCommand "my-ca-bundle.crt" { }
>       ''
>         cat ${pkgs.cacert}/etc/ca-bundle.crt ${./my-certificate.crt} > $out
>       '';

That works! Thank you.

> An even better solution is for NixOS to switch from $SSL_CERT_FILE to
> $SSL_CERT_DIR so you can just add extra certificate files.

+1 (That's what I was initially hoping would work; I think it works
like that in e.g. Ubuntu.)

- Bjørn


More information about the nix-dev mailing list