public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #123272 from kini/nixos/security.pki/pems-without-final-newline

Browse Source 
nixos/security.pki: handle PEMs w/o a final newline
This commit is contained in:
Eelco Dolstra 2021-05-17 11:14:03 +02:00 committed by GitHub
commit c3b27282d7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
nixos/modules/security/ca.nix
View File

@ -10,15 +10,10 @@ let
blacklist = cfg.caCertificateBlacklist; blacklist = cfg.caCertificateBlacklist;
}; };
caCertificates = pkgs.runCommand "ca-certificates.crt" caCertificates = pkgs.runCommand "ca-certificates.crt" {
{ files = files = cfg.certificateFiles ++ [ (builtins.toFile "extra.crt" (concatStringsSep "\n" cfg.certificates)) ];
cfg.certificateFiles ++ preferLocalBuild = true;
[ (builtins.toFile "extra.crt" (concatStringsSep "\n" cfg.certificates)) ]; } "awk 1 $files > $out"; # awk ensures a newline between each pair of consecutive files
preferLocalBuild = true;
}
''
cat $files > $out
'';
in in