cacert: add output "unbundled"
which contains all certs, each in a separate file. This output is not installed by default.
This commit is contained in:
parent
0479e91309
commit
c9a1639e20
@ -20,6 +20,8 @@ stdenv.mkDerivation rec {
|
|||||||
|
|
||||||
src = nss.src;
|
src = nss.src;
|
||||||
|
|
||||||
|
outputs = [ "out" "unbundled" ];
|
||||||
|
|
||||||
nativeBuildInputs = [ python ];
|
nativeBuildInputs = [ python ];
|
||||||
|
|
||||||
configurePhase = ''
|
configurePhase = ''
|
||||||
@ -50,6 +52,10 @@ stdenv.mkDerivation rec {
|
|||||||
installPhase = ''
|
installPhase = ''
|
||||||
mkdir -pv $out/etc/ssl/certs
|
mkdir -pv $out/etc/ssl/certs
|
||||||
cp -v ca-bundle.crt $out/etc/ssl/certs
|
cp -v ca-bundle.crt $out/etc/ssl/certs
|
||||||
|
# install individual certs in unbundled output
|
||||||
|
mkdir -pv $unbundled/etc/ssl/certs
|
||||||
|
cp -v *.crt $unbundled/etc/ssl/certs
|
||||||
|
rm -f $unbundled/etc/ssl/certs/ca-bundle.crt # not wanted in unbundled
|
||||||
'';
|
'';
|
||||||
|
|
||||||
setupHook = ./setup-hook.sh;
|
setupHook = ./setup-hook.sh;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user