1export NIX_SSL_CERT_FILE="${NIX_SSL_CERT_FILE:-@out@/etc/ssl/certs/ca-bundle.crt}"
2if test ! -r "$NIX_SSL_CERT_FILE"; then
3 # If we inherited an unreadable cert file path, just use the bundled one
4 # TODO: This is just a workaround, the proper solution should be made on the Nix side
5 # Issue: https://github.com/NixOS/nix/issues/12698
6 export NIX_SSL_CERT_FILE="@out@/etc/ssl/certs/ca-bundle.crt"
7fi
8
9# compatibility
10# - openssl
11export SSL_CERT_FILE=$NIX_SSL_CERT_FILE
12# - Haskell x509-system
13export SYSTEM_CERTIFICATE_PATH=$NIX_SSL_CERT_FILE