summary refs log tree commit diff
path: root/pkgs/tools/security/certmgr
diff options
context:
space:
mode:
authorJohan Thomsen <jth@dbc.dk>2018-08-24 11:54:21 +0200
committerFranz Pletz <fpletz@fnordicwalking.de>2019-01-24 11:55:49 +0100
commit72eb82b6872a135673aae5fc0cd2359e67687165 (patch)
treea8993494ff61f3880203bd487f09b725a56cefb2 /pkgs/tools/security/certmgr
parentee82616089ff920792b6c265068902c4fa3d4f7f (diff)
downloadnixpkgs-72eb82b6872a135673aae5fc0cd2359e67687165.tar
nixpkgs-72eb82b6872a135673aae5fc0cd2359e67687165.tar.gz
nixpkgs-72eb82b6872a135673aae5fc0cd2359e67687165.tar.bz2
nixpkgs-72eb82b6872a135673aae5fc0cd2359e67687165.tar.lz
nixpkgs-72eb82b6872a135673aae5fc0cd2359e67687165.tar.xz
nixpkgs-72eb82b6872a135673aae5fc0cd2359e67687165.tar.zst
nixpkgs-72eb82b6872a135673aae5fc0cd2359e67687165.zip
certmgr: Add patch for optional trust of self-signed certificates at remote cfssl apiserver
Diffstat (limited to 'pkgs/tools/security/certmgr')
-rw-r--r--pkgs/tools/security/certmgr/default.nix12
1 files changed, 11 insertions, 1 deletions
diff --git a/pkgs/tools/security/certmgr/default.nix b/pkgs/tools/security/certmgr/default.nix
index fa3076e8b59..28cdcfdad08 100644
--- a/pkgs/tools/security/certmgr/default.nix
+++ b/pkgs/tools/security/certmgr/default.nix
@@ -1,4 +1,4 @@
-{ stdenv, buildGoPackage, fetchFromGitHub }:
+{ stdenv, buildGoPackage, fetchFromGitHub, fetchpatch }:
 
 buildGoPackage rec {
   version = "1.6.1";
@@ -13,6 +13,16 @@ buildGoPackage rec {
     sha256 = "1ky2pw1wxrb2fxfygg50h0mid5l023x6xz9zj5754a023d01qqr2";
   };
 
+  # The following patch makes it possible to use a self-signed x509 cert
+  # for the cfssl apiserver.
+  # TODO: remove patch when PR is merged.
+  patches = [
+    (fetchpatch {
+      url    = "https://github.com/cloudflare/certmgr/pull/51.patch";
+      sha256 = "0jhsw159d2mgybvbbn6pmvj4yqr5cwcal5fjwkcn9m4f4zlb6qrs";
+    })
+  ];
+
   meta = with stdenv.lib; {
     homepage = https://cfssl.org/;
     description = "Cloudflare's certificate manager";