about summary refs log tree commit diff
path: root/pkgs/stdenv/generic/setup.sh
diff options
context:
space:
mode:
authorEelco Dolstra <eelco.dolstra@logicblox.com>2016-02-03 13:59:10 +0100
committerEelco Dolstra <eelco.dolstra@logicblox.com>2016-02-03 13:59:10 +0100
commit917ca8920da46b94867a01590423f66390a152c0 (patch)
tree61064f761e764d79a9df1b7c434634584c139db3 /pkgs/stdenv/generic/setup.sh
parentcc2cec63007f6974130a7ba8a491761be5887528 (diff)
downloadnixlib-917ca8920da46b94867a01590423f66390a152c0.tar
nixlib-917ca8920da46b94867a01590423f66390a152c0.tar.gz
nixlib-917ca8920da46b94867a01590423f66390a152c0.tar.bz2
nixlib-917ca8920da46b94867a01590423f66390a152c0.tar.lz
nixlib-917ca8920da46b94867a01590423f66390a152c0.tar.xz
nixlib-917ca8920da46b94867a01590423f66390a152c0.tar.zst
nixlib-917ca8920da46b94867a01590423f66390a152c0.zip
Move setting $SSL_CERT_FILE to stdenv
Doing it in an openssl setup hook only works if packages have openssl
as a build input - it doesn't work if they're using a program linked
against openssl.
Diffstat (limited to 'pkgs/stdenv/generic/setup.sh')
-rw-r--r--pkgs/stdenv/generic/setup.sh5
1 files changed, 5 insertions, 0 deletions
diff --git a/pkgs/stdenv/generic/setup.sh b/pkgs/stdenv/generic/setup.sh
index 102a8f2f71c5..dc6c765353f7 100644
--- a/pkgs/stdenv/generic/setup.sh
+++ b/pkgs/stdenv/generic/setup.sh
@@ -371,6 +371,11 @@ export NIX_BUILD_CORES
 paxmark() { true; }
 
 
+# Prevent OpenSSL-based applications from using certificates in
+# /etc/ssl.
+export SSL_CERT_FILE=/no-cert-file.crt
+
+
 ######################################################################
 # Textual substitution functions.