movefasta/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-06-13 05:05:29 +03:00
Code Issues Projects Releases Packages Wiki Activity
nixpkgs/nixos/tests/common/acme/server
History
pennae ef176dcf7e nixos/*: automatically convert option descriptions 
conversions were done using https://github.com/pennae/nix-doc-munge
using (probably) rev f34e145 running

    nix-doc-munge nixos/**/*.nix
    nix-doc-munge --import nixos/**/*.nix

the tool ensures that only changes that could affect the generated
manual *but don't* are committed, other changes require manual review
and are discarded.
2022-08-31 16:32:53 +02:00
..
acme.test.cert.pem nixos/tests/acme: Hard code test certificates 2020-10-22 14:06:19 +01:00
acme.test.key.pem nixos/tests/acme: Hard code test certificates 2020-10-22 14:06:19 +01:00
ca.cert.pem nixos/tests/acme: Hard code test certificates 2020-10-22 14:06:19 +01:00
ca.key.pem nixos/tests/acme: Hard code test certificates 2020-10-22 14:06:19 +01:00
default.nix nixos/*: automatically convert option descriptions 2022-08-31 16:32:53 +02:00
generate-certs.nix nixos/tests/acme: Hard code test certificates 2020-10-22 14:06:19 +01:00
README.md nixos/tests/acme: Hard code test certificates 2020-10-22 14:06:19 +01:00
snakeoil-certs.nix nixos/tests/acme: Hard code test certificates 2020-10-22 14:06:19 +01:00

README.md

Fake Certificate Authority for ACME testing

This will set up a test node running pebble to serve ACME certificate requests.

"Snake oil" certs

The snake oil certs are hard coded into the repo for reasons explained here. The root of the issue is that Nix will hash the derivation based on the arguments to mkDerivation, not the output. Minica will always generate a random certificate even if the arguments are unchanged. As a result, it's possible to end up in a situation where the cached and local generated certs mismatch and cause issues with testing.

To generate new certificates, run the following commands:

nix-build generate-certs.nix
cp result/* .
rm result