summary refs log tree commit diff
path: root/nixos/modules/system/activation
diff options
context:
space:
mode:
authorNikolay Amiantov <ab@fmap.me>2018-04-03 12:09:45 +0300
committerNikolay Amiantov <ab@fmap.me>2018-04-17 12:53:29 +0300
commit4fc0b4edca7e48755538d4436b98baff5901a752 (patch)
treeb53043a738ae276e005cc5f0e699983a4df7059d /nixos/modules/system/activation
parentd91caac6c3e58b8a5f4721c0a6cc8f0dc3b93fd3 (diff)
downloadnixlib-4fc0b4edca7e48755538d4436b98baff5901a752.tar
nixlib-4fc0b4edca7e48755538d4436b98baff5901a752.tar.gz
nixlib-4fc0b4edca7e48755538d4436b98baff5901a752.tar.bz2
nixlib-4fc0b4edca7e48755538d4436b98baff5901a752.tar.lz
nixlib-4fc0b4edca7e48755538d4436b98baff5901a752.tar.xz
nixlib-4fc0b4edca7e48755538d4436b98baff5901a752.tar.zst
nixlib-4fc0b4edca7e48755538d4436b98baff5901a752.zip
acme service: generate a CA for self-signed certificate
This is needed because simp_le expects two certificates in fullchain.pem, leading to error:

> Not enough PEM encoded messages were found in fullchain.pem; at least 2 were expected, found 1.

We now create a CA and sign the key with it instead, providing correct fullchain.pem.

Also cleanup service a bit -- use PATH and a private temporary directory (which
is more suitable).
Diffstat (limited to 'nixos/modules/system/activation')
0 files changed, 0 insertions, 0 deletions