Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[WIP] also detect certificate bundles on opensuse #11603

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Mic92
Copy link
Member

@Mic92 Mic92 commented Sep 27, 2024

Now that we require valid certificates in builtins:fetchurl, we also need to support standard locations for certificate authorities on various platforms.

I haven't validated yet, this works.

Motivation

Context

Priorities and Process

Add 👍 to pull requests you find important.

The Nix maintainer team uses a GitHub project board to schedule and track reviews.

Now that we require valid certificates in builtins:fetchurl,
we also need to support standard locations for certificate authorities
on various platforms.
@Mic92 Mic92 marked this pull request as draft September 27, 2024 09:57
@edolstra
Copy link
Member

BTW our profile scripts have this:

    elif [ -e /etc/ssl/ca-bundle.pem ]; then # openSUSE Tumbleweed
        export NIX_SSL_CERT_FILE=/etc/ssl/ca-bundle.pem

Maybe those should also check for /var/lib/ca-certificates/ca-bundle.pem?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants