certmgr: Add patch for optional trust of self-signed certificates at remote cfssl apiserver

This commit is contained in:
Johan Thomsen 2018-08-24 11:54:21 +02:00 committed by Franz Pletz
parent ee82616089
commit 72eb82b687
No known key found for this signature in database
GPG Key ID: 846FDED7792617B4

View File

@ -1,4 +1,4 @@
{ stdenv, buildGoPackage, fetchFromGitHub }: { stdenv, buildGoPackage, fetchFromGitHub, fetchpatch }:
buildGoPackage rec { buildGoPackage rec {
version = "1.6.1"; version = "1.6.1";
@ -13,6 +13,16 @@ buildGoPackage rec {
sha256 = "1ky2pw1wxrb2fxfygg50h0mid5l023x6xz9zj5754a023d01qqr2"; sha256 = "1ky2pw1wxrb2fxfygg50h0mid5l023x6xz9zj5754a023d01qqr2";
}; };
# The following patch makes it possible to use a self-signed x509 cert
# for the cfssl apiserver.
# TODO: remove patch when PR is merged.
patches = [
(fetchpatch {
url = "https://github.com/cloudflare/certmgr/pull/51.patch";
sha256 = "0jhsw159d2mgybvbbn6pmvj4yqr5cwcal5fjwkcn9m4f4zlb6qrs";
})
];
meta = with stdenv.lib; { meta = with stdenv.lib; {
homepage = https://cfssl.org/; homepage = https://cfssl.org/;
description = "Cloudflare's certificate manager"; description = "Cloudflare's certificate manager";