3
0
Fork 0
forked from mirrors/nixpkgs

Merge pull request #35588 from xeji/cacert-unbundled

cacert: add output "unbundled" for individual certificates
This commit is contained in:
Michael Raskin 2018-03-11 10:08:07 +00:00 committed by GitHub
commit bf41b468ad
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -20,6 +20,8 @@ stdenv.mkDerivation rec {
src = nss.src;
outputs = [ "out" "unbundled" ];
nativeBuildInputs = [ python ];
configurePhase = ''
@ -50,6 +52,10 @@ stdenv.mkDerivation rec {
installPhase = ''
mkdir -pv $out/etc/ssl/certs
cp -v ca-bundle.crt $out/etc/ssl/certs
# install individual certs in unbundled output
mkdir -pv $unbundled/etc/ssl/certs
cp -v *.crt $unbundled/etc/ssl/certs
rm -f $unbundled/etc/ssl/certs/ca-bundle.crt # not wanted in unbundled
'';
setupHook = ./setup-hook.sh;