tjh.dev
nixpkgs mirror (for testing)
github.com/NixOS/nixpkgs
nix
1{
2 lib,
3 buildDunePackage,
4 fetchurl,
5 digestif,
6 mirage-ptime,
7 x509,
8 logs,
9 fmt,
10 bos,
11 cmdliner,
12 alcotest,
13}:
14
15buildDunePackage (finalAttrs: {
16 pname = "ca-certs-nss";
17 version = "3.118";
18
19 minimalOCamlVersion = "4.13";
20
21 src = fetchurl {
22 url = "https://github.com/mirage/ca-certs-nss/releases/download/v${finalAttrs.version}/ca-certs-nss-${finalAttrs.version}.tbz";
23 hash = "sha256-BthKUUeuf3jFRmQzw0U9SEbvRqcVc1UKHmb4+YePRio=";
24 };
25
26 propagatedBuildInputs = [
27 mirage-ptime
28 x509
29 digestif
30 ];
31
32 buildInputs = [
33 logs
34 fmt
35 bos
36 cmdliner
37 ];
38
39 doCheck = true;
40 checkInputs = [ alcotest ];
41
42 meta = {
43 description = "X.509 trust anchors extracted from Mozilla's NSS";
44 homepage = "https://github.com/mirage/ca-certs-nss";
45 license = lib.licenses.isc;
46 maintainers = [ lib.maintainers.sternenseemann ];
47 mainProgram = "extract-from-certdata";
48 };
49})