openssl: default to default profile CA on darwin
This commit is contained in:
parent
8ecb94bb97
commit
c86f05e7ce
@ -20,7 +20,8 @@ let
|
|||||||
patches =
|
patches =
|
||||||
(args.patches or [])
|
(args.patches or [])
|
||||||
++ [ ./nix-ssl-cert-file.patch ]
|
++ [ ./nix-ssl-cert-file.patch ]
|
||||||
++ optional (versionOlder version "1.1.0") ./use-etc-ssl-certs.patch
|
++ optional (versionOlder version "1.1.0")
|
||||||
|
(if stdenv.isDarwin then ./use-etc-ssl-certs-darwin.patch else ./use-etc-ssl-certs.patch)
|
||||||
++ optional stdenv.isCygwin ./1.0.1-cygwin64.patch
|
++ optional stdenv.isCygwin ./1.0.1-cygwin64.patch
|
||||||
++ optional
|
++ optional
|
||||||
(versionOlder version "1.0.2" && (stdenv.isDarwin || (stdenv ? cross && stdenv.cross.libc == "libSystem")))
|
(versionOlder version "1.0.2" && (stdenv.isDarwin || (stdenv ? cross && stdenv.cross.libc == "libSystem")))
|
||||||
|
@ -0,0 +1,13 @@
|
|||||||
|
diff -ru -x '*~' openssl-1.0.1r-orig/crypto/cryptlib.h openssl-1.0.1r/crypto/cryptlib.h
|
||||||
|
--- openssl-1.0.1r-orig/crypto/cryptlib.h 2016-01-28 14:38:30.000000000 +0100
|
||||||
|
+++ openssl-1.0.1r/crypto/cryptlib.h 2016-02-03 12:54:29.193165176 +0100
|
||||||
|
@@ -81,8 +81,8 @@
|
||||||
|
|
||||||
|
# ifndef OPENSSL_SYS_VMS
|
||||||
|
# define X509_CERT_AREA OPENSSLDIR
|
||||||
|
# define X509_CERT_DIR OPENSSLDIR "/certs"
|
||||||
|
-# define X509_CERT_FILE OPENSSLDIR "/cert.pem"
|
||||||
|
+# define X509_CERT_FILE "/nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt"
|
||||||
|
# define X509_PRIVATE_DIR OPENSSLDIR "/private"
|
||||||
|
# else
|
||||||
|
# define X509_CERT_AREA "SSLROOT:[000000]"
|
Loading…
x
Reference in New Issue
Block a user