Branch: refs/heads/master Home: https://github.com/NixOS/nixpkgs Commit: 0d59fc1169654fa1f77e17ad73099895af7bba4d https://github.com/NixOS/nixpkgs/commit/0d59fc1169654fa1f77e17ad73099895af7bba4d Author: Franz Pletz <fpl...@fnordicwalking.de> Date: 2016-10-09 (Sun, 09 Oct 2016)
Changed paths: M nixos/modules/security/ca.nix M pkgs/data/misc/cacert/default.nix Log Message: ----------- cacerts: refactor, add blacklist option Previously, the list of CA certificates was generated with a perl script which is included in curl. As this script is not very flexible, this commit refactors the expression to use the python script that Debian uses to generate their CA certificates from Mozilla's trust store in NSS. Additionally, an option was added to the cacerts derivation and the `security.pki` module to blacklist specific CAs.
_______________________________________________ nix-commits mailing list nix-comm...@lists.science.uu.nl http://lists.science.uu.nl/mailman/listinfo/nix-commits