NixOS/nix
NixOS/nix
1
0
Fork 0
mirror of https://github.com/NixOS/nix synced 2024-10-18 00:16:11 -04:00
Code Activity

also detect certificate bundles on opensuse

Browse source 
Now that we require valid certificates in builtins:fetchurl,
we also need to support standard locations for certificate authorities
on various platforms.
This commit is contained in:
Jörg Thalheim 2024-09-27 11:55:00 +02:00
parent 0ed67e5b7e
commit 19fc159f96
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
src/libstore/globals.cc
View file

@ -238,7 +238,13 @@ bool Settings::isWSL1()
Path Settings::getDefaultSSLCertFile()
{
for (auto & fn : {"/etc/ssl/certs/ca-certificates.crt", "/nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt"})
for (auto & fn : {
// NixOS, fedora, debian, ubuntu
"/etc/ssl/certs/ca-certificates.crt",
// openSUSE
"/var/lib/ca-certificates/ca-bundle.pem",
"/nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt"
})
if (pathAccessible(fn)) return fn;
return "";
}