Clone of https://github.com/NixOS/nixpkgs.git (to stress-test knotserver)
1{ 2 lib, 3 buildDunePackage, 4 fetchurl, 5 digestif, 6 mirage-ptime, 7 x509, 8 logs, 9 fmt, 10 bos, 11 cmdliner, 12 alcotest, 13}: 14 15buildDunePackage rec { 16 pname = "ca-certs-nss"; 17 version = "3.114"; 18 19 minimalOCamlVersion = "4.13"; 20 21 src = fetchurl { 22 url = "https://github.com/mirage/ca-certs-nss/releases/download/v${version}/ca-certs-nss-${version}.tbz"; 23 hash = "sha256-FvoT5uEZDFlUJcgg+0vjylSYd/HPXbaQ/oXaFRUveSo="; 24 }; 25 26 propagatedBuildInputs = [ 27 mirage-ptime 28 x509 29 digestif 30 ]; 31 32 buildInputs = [ 33 logs 34 fmt 35 bos 36 cmdliner 37 ]; 38 39 doCheck = true; 40 checkInputs = [ alcotest ]; 41 42 meta = with lib; { 43 description = "X.509 trust anchors extracted from Mozilla's NSS"; 44 homepage = "https://github.com/mirage/ca-certs-nss"; 45 license = licenses.isc; 46 maintainers = [ maintainers.sternenseemann ]; 47 mainProgram = "extract-from-certdata"; 48 }; 49}