1
1
mirror of https://github.com/LnL7/nix-darwin.git synced 2024-09-11 12:49:18 +03:00
nix-darwin/tests/security-pki.nix
2019-01-15 22:14:56 +01:00

25 lines
705 B
Nix

{ config, pkgs, ... }:
{
security.pki.certificates = [
''
Fake Root CA
------------
''
];
test = ''
echo "checking for ca-certificates.crt in /etc" >&2
test -e ${config.out}/etc/ssl/certs/ca-certificates.crt
echo "checking NIX_SSL_CERT_FILE in set-environment" >&2
grep 'NIX_SSL_CERT_FILE="/etc/ssl/certs/ca-certificates.crt"' ${config.system.build.setEnvironment}
echo "checking for certificates in ca-certificates.crt" >&2
grep -q 'BEGIN CERTIFICATE' ${config.out}/etc/ssl/certs/ca-certificates.crt
echo "checking for extra certificate in ca-certificates.crt" >&2
grep 'Fake Root CA' ${config.out}/etc/ssl/certs/ca-certificates.crt
'';
}