fetchgit: Handle https.

svn path=/nixpkgs/trunk/; revision=28857

pkgs/build-support/fetchgit/default.nix

@@ -1,4 +1,4 @@
-{stdenv, git}:
+{stdenv, git, cacert}:
 {url, rev ? "HEAD", md5 ? "", sha256 ? "", leaveDotGit ? false }:
 
 /* NOTE:
@@ -35,6 +35,8 @@ stdenv.mkDerivation {
 
   inherit url rev leaveDotGit;
 
+  GIT_SSL_CAINFO = "${cacert}/etc/ca-bundle.crt";
+
   impureEnvVars = [
     # We borrow these environment variables from the caller to allow
     # easy proxy configuration.  This is impure, but a fixed-output

pkgs/top-level/all-packages.nix

@@ -261,7 +261,7 @@ let
   };
 
   fetchgit = import ../build-support/fetchgit {
-    inherit stdenv git;
+    inherit stdenv git cacert;
   };
 
   fetchgitrevision = import ../build-support/fetchgitrevision runCommand git;