go: patching it to get the nixos cacert bundle taken just fine

This commit is contained in:
Lluís Batlle i Rossell 2012-08-03 22:55:10 +02:00
parent 3d2e1508ee
commit 6655bc783e
2 changed files with 16 additions and 0 deletions

View File

@ -0,0 +1,15 @@
Go comes with hardcoded cacert. We add the usual in NixOS,
for easier NixOS life.
diff --git a/src/pkg/crypto/x509/root_unix.go b/src/pkg/crypto/x509/root_unix.go
index 76e79f4..6ef1dd3 100644
--- a/src/pkg/crypto/x509/root_unix.go
+++ b/src/pkg/crypto/x509/root_unix.go
@@ -15,6 +15,7 @@ var certFiles = []string{
"/etc/ssl/ca-bundle.pem", // OpenSUSE
"/etc/ssl/cert.pem", // OpenBSD
"/usr/local/share/certs/ca-root-nss.crt", // FreeBSD
+ "/etc/ssl/certs/ca-bundle.crt", // NixOS
}
func (c *Certificate) systemVerify(opts *VerifyOptions) (chains [][]*Certificate, err error) {

View File

@ -44,6 +44,7 @@ stdenv.mkDerivation {
sed -i '/TestHostname/areturn' src/pkg/os/os_test.go
'';
patches = [ ./cacert.patch ];
GOOS = "linux";
GOARCH = if (stdenv.system == "i686-linux") then "386"