Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: 98869352a902
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: c49c0928ed02
Choose a head ref
  • 3 commits
  • 3 files changed
  • 2 contributors

Commits on Jan 24, 2021

  1. nss: add option to use p11-kit 

    This commit adds an option to replace libnssckbi with the
p11-kit-trust[1] module. It makes all NSS application (like Firefox,
Chromium, etc.) use the system trust store (/etc/ssl/certs/ in NixOS)
and other PKCS#11 modules without ad-hoc configuration.

This approach was first implemented in Fedora[2] and other distributions
like Arch Linux, later.
[1]: https://p11-glue.github.io/p11-glue/p11-kit/manual/trust-nss.html

[2]: https://fedoraproject.org/wiki/Features/SharedSystemCertificates
    @rnhmjoj
    rnhmjoj committed Jan 24, 2021
    2
    Copy the full SHA
    b9bb98c View commit details
    Browse the repository at this point in the history

  2. nixos/tests/custom-ca: init 

    This is a NixOS test for the security.pki options.
    @rnhmjoj
    rnhmjoj committed Jan 24, 2021
    Copy the full SHA
    cc8a422 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #96763 from rnhmjoj/p11kit 

    nss: add option to use p11-kit
    @rnhmjoj
    rnhmjoj committed Jan 24, 2021
    Copy the full SHA
    c49c092 View commit details
    Browse the repository at this point in the history