[Nix-dev] How to add (self-signed) SSL certificate to NixOS?

Bjørn Forsman bjorn.forsman at gmail.com
Fri Feb 6 16:47:20 CET 2015


On 5 February 2015 at 18:11, Eelco Dolstra <eelco.dolstra at logicblox.com> wrote:
> Hi,
>
> On 04/02/15 23:18, Bjørn Forsman wrote:
>
>>> The following should work:
>>>
>>>   environment.etc."ssl/certs/ca-bundle.crt".source = lib.mkForce ...;
>>
>> Unfortunately it does not. That also results in "mismatched duplicate
>> entry ..." error.
>
> I've added an option ‘security.pki.certificateFiles’. You should now be able to say:
>
>   security.pki.certificateFiles = [ ./my-certificate.crt ];

Thank you! Just what I wanted :-)

Can we cherry-pick this to the release-14.12 branch? (I tested it
locally on that branch today.)

- Bjørn


More information about the nix-dev mailing list