nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-25 16:33:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
nixos-24.11-small
nixpkgs/nixos/tests/common/acme/server
History
ThinkChaos b432e86caf
nixos/acme: remove unused binding in tests
2024-11-07 20:19:12 -05:00
..
acme.test.cert.pem nixos/tests/acme/server: generate certs with longer validity 2022-11-21 18:18:17 +01:00
acme.test.key.pem nixos/tests/acme/server: generate certs with longer validity 2022-11-21 18:18:17 +01:00
ca.cert.pem nixos/tests/acme/server: generate certs with longer validity 2022-11-21 18:18:17 +01:00
ca.key.pem nixos/tests/acme/server: generate certs with longer validity 2022-11-21 18:18:17 +01:00
default.nix nixos/acme: remove unused binding in tests 2024-11-07 20:19:12 -05:00
generate-certs.nix nixos/tests/acme/generate-certs: deprecate phases 2023-01-12 22:56:46 +01:00
README.md
snakeoil-certs.nix

README.md

Fake Certificate Authority for ACME testing

This will set up a test node running pebble to serve ACME certificate requests.

"Snake oil" certs

The snake oil certs are hard coded into the repo for reasons explained here. The root of the issue is that Nix will hash the derivation based on the arguments to mkDerivation, not the output. Minica will always generate a random certificate even if the arguments are unchanged. As a result, it's possible to end up in a situation where the cached and local generated certs mismatch and cause issues with testing.

To generate new certificates, run the following commands:

nix-build generate-certs.nix
cp result/* .
rm result