summary refs log tree commit diff
path: root/pkgs/development/libraries/openssl/default.nix
diff options
context:
space:
mode:
authorGuillaume Maudoux <layus.on@gmail.com>2016-02-01 10:18:31 +0100
committerEelco Dolstra <eelco.dolstra@logicblox.com>2016-02-03 12:42:01 +0100
commit9f358f809d1db46f3206d4a09a5366f13c93e777 (patch)
treedfa95476fff3c1e9d77d79608b744ba29596ae07 /pkgs/development/libraries/openssl/default.nix
parent0876a44169b64d4108fc5b5bd3c96843f94a4990 (diff)
downloadnixpkgs-9f358f809d1db46f3206d4a09a5366f13c93e777.tar
nixpkgs-9f358f809d1db46f3206d4a09a5366f13c93e777.tar.gz
nixpkgs-9f358f809d1db46f3206d4a09a5366f13c93e777.tar.bz2
nixpkgs-9f358f809d1db46f3206d4a09a5366f13c93e777.tar.lz
nixpkgs-9f358f809d1db46f3206d4a09a5366f13c93e777.tar.xz
nixpkgs-9f358f809d1db46f3206d4a09a5366f13c93e777.tar.zst
nixpkgs-9f358f809d1db46f3206d4a09a5366f13c93e777.zip
Configure a default trust store for openssl
Diffstat (limited to 'pkgs/development/libraries/openssl/default.nix')
-rw-r--r--pkgs/development/libraries/openssl/default.nix6
1 files changed, 5 insertions, 1 deletions
diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix
index 4e009e5306d..be224fd54eb 100644
--- a/pkgs/development/libraries/openssl/default.nix
+++ b/pkgs/development/libraries/openssl/default.nix
@@ -1,5 +1,6 @@
 { stdenv, fetchurl, perl
-, withCryptodev ? false, cryptodevHeaders }:
+, withCryptodev ? false, cryptodevHeaders
+, defaultCertificate ? "/etc/ssl/certs/ca-certificates.crt" }:
 
 with stdenv.lib;
 let
@@ -58,6 +59,9 @@ stdenv.mkDerivation rec {
 
     # remove dependency on Perl at runtime
     rm -r $out/etc/ssl/misc $out/bin/c_rehash
+
+    # configure the default trust store
+    ${optionalString (defaultCertificate != null) "ln -s ${defaultCertificate} $out/etc/ssl/cert.pem"}
   '';
 
   postFixup = ''