29 lines
606 B
Nix
29 lines
606 B
Nix
|
{ stdenv, fetchurl }:
|
||
|
|
|
||
|
|
let
|
||
|
|
url = "https://letsencrypt.org/certs/letsencryptauthorityx3.pem.txt";
|
||
|
|
sha256 = "b6dd03f7fb8508e4f7ffe82ca8a3f98dde163e0bd44897e112a0850a5b606acf";
|
||
|
|
|
||
|
|
in stdenv.mkDerivation {
|
||
|
|
|
||
|
|
name = "letsencrypt-ca";
|
||
|
|
|
||
|
|
src = fetchurl {
|
||
|
|
name = "isrgrootx1.pem.txt";
|
||
|
|
url = url;
|
||
|
|
sha256 = sha256;
|
||
|
|
};
|
||
|
|
|
||
|
|
phases = [ "installPhase" ];
|
||
|
|
|
||
|
|
installPhase = ''
|
||
|
|
mkdir -pv $out/etc/ssl/letsencrypt
|
||
|
|
cp -v $src $out/etc/ssl/letsencrypt/ca.pem
|
||
|
|
'';
|
||
|
|
|
||
|
|
meta = {
|
||
|
|
homepage = https://letsencrypt.com;
|
||
|
|
description = "Certificate Authority (CA) certificate for LetsEncrypt";
|
||
|
|
};
|
||
|
|
}
|