mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-12-06 13:53:05 +00:00
6afb255d97
these changes were generated with nixq 0.0.2, by running nixq ">> lib.mdDoc[remove] Argument[keep]" --batchmode nixos/**.nix nixq ">> mdDoc[remove] Argument[keep]" --batchmode nixos/**.nix nixq ">> Inherit >> mdDoc[remove]" --batchmode nixos/**.nix two mentions of the mdDoc function remain in nixos/, both of which are inside of comments. Since lib.mdDoc is already defined as just id, this commit is a no-op as far as Nix (and the built manual) is concerned. |
||
|---|---|---|
| .. | ||
| acme.test.cert.pem | ||
| acme.test.key.pem | ||
| ca.cert.pem | ||
| ca.key.pem | ||
| default.nix | ||
| generate-certs.nix | ||
| README.md | ||
| snakeoil-certs.nix | ||
Fake Certificate Authority for ACME testing
This will set up a test node running pebble to serve ACME certificate requests.
"Snake oil" certs
The snake oil certs are hard coded into the repo for reasons explained here. The root of the issue is that Nix will hash the derivation based on the arguments to mkDerivation, not the output. Minica will always generate a random certificate even if the arguments are unchanged. As a result, it's possible to end up in a situation where the cached and local generated certs mismatch and cause issues with testing.
To generate new certificates, run the following commands:
nix-build generate-certs.nix
cp result/* .
rm result