forked from mirrors/nixpkgs
16 lines
636 B
Diff
16 lines
636 B
Diff
|
Go comes with hardcoded cacert. We add the usual in NixOS,
|
||
|
|
for easier NixOS life.
|
||
|
|
|
||
|
|
diff --git a/src/pkg/crypto/x509/root_unix.go b/src/pkg/crypto/x509/root_unix.go
|
||
|
|
index 76e79f4..6ef1dd3 100644
|
||
|
|
--- a/src/pkg/crypto/x509/root_unix.go
|
||
|
|
+++ b/src/pkg/crypto/x509/root_unix.go
|
||
|
|
@@ -15,6 +15,7 @@ var certFiles = []string{
|
||
|
|
"/etc/ssl/ca-bundle.pem", // OpenSUSE
|
||
|
|
"/etc/ssl/cert.pem", // OpenBSD
|
||
|
|
"/usr/local/share/certs/ca-root-nss.crt", // FreeBSD
|
||
|
|
+ "/etc/ssl/certs/ca-bundle.crt", // NixOS
|
||
|
|
}
|
||
|
|
|
||
|
|
func (c *Certificate) systemVerify(opts *VerifyOptions) (chains [][]*Certificate, err error) {
|