From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tonton Subject: Re: root certificate Date: Tue, 12 Jun 2018 11:29:40 +0200 Message-ID: <20180612112940.02e9fff0@merlin.browniehive.net> References: <87y3flo3rc.fsf@santanas.co.za> <878t7ls1hw.fsf@fastmail.com> <87vaapdy02.fsf@g1.i-did-not-set--mail-host-address--so-tickle-me> <87tvq8o4yh.fsf@santanas.co.za> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; boundary="Sig_/lXdiYg3fRpyaWw9=8qWXSiV"; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:34386) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fSfcx-0007b8-Up for help-guix@gnu.org; Tue, 12 Jun 2018 05:30:12 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fSfcs-0006H3-0C for help-guix@gnu.org; Tue, 12 Jun 2018 05:30:11 -0400 Received: from mx1.riseup.net ([198.252.153.129]:57985) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1fSfcr-0006Er-PY for help-guix@gnu.org; Tue, 12 Jun 2018 05:30:05 -0400 In-Reply-To: <87tvq8o4yh.fsf@santanas.co.za> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Divan Santana Cc: myglc2@gmail.com, help-guix@gnu.org, Joshua Branson --Sig_/lXdiYg3fRpyaWw9=8qWXSiV Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable I would look at the nss-certs package and make a package definition using nss-certs as a template or even inheriting from it. I have now had a quick look at nss-certs and it is too complex for me to change without sitting down with it for a while. So I think I would then go on to use the simple build system or what it is called. Because what you need is basically copy a file to somewhere your browsers c= an see it? To learn those paths I'd still look at nss-certs. I see (let ((certsdir (string-append %output "/etc/ssl/certs/"= )) in there. That's probably your path. To use this definition with guix: put it in for example /home/username/guix-modules/certs.scm and then add this directory to your $GUIX_PACKAGE_PATH. I do the following in my .profile export GUIX_PACKAGE_PATH=3D"$HOME/guix-modules:$GUIX_PACKAGE_PATH" I'm traveling and so might not respond quickly. HTH Tonton --Sig_/lXdiYg3fRpyaWw9=8qWXSiV Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJpQ8ER/dPhCuYhy5z+UMpbuBoZAFAlsfkoQACgkQz+UMpbuB oZBgsxAAk6AuFe0CFWKFyZ7PbOs041P0UfQ/UqQ+wXEk6m0IEf3idztyBKVxZTZk I0MZgxTpXBOyELEDL6u0zFb4DLsR7fKeU8yZAxtbP8Hj8Sz430vW+UoLJ7dpsjYw fz9DyW2Sm1cY1r/KXlBxSgN0p2wbWyIF1IdkIitkfMtJoroWd//ccsyY/gGm0pa8 +3mmrIETHExVkbiPLmW6N8dMKJJlEzyCi42hF9OxOTM1nbDUkmnlKLhyAtWXV+jK Nzs2GFnrZm0i7s3wB5TBkHXZ79jnnSWBlTIbJU4JQigeomFehmG9eXqYIBAJin8+ Bpssagt0GMMBH+HYCoUisA/djj5xm72s7PUmKBI7OIIAFPjH72UFaHjfF/tY3WzK NA288VpL8c/e6NHG9QFIPORFYD/0AmnZEyHseyitwkdWnTgD3g6MzLckynhKAFpq ZUXCZHJlgyd52NdRhO+4hnFuKBagS6eaal5ANargh+ClXsgAwwEDDSJbk0sPXSYG s7Oh5cInljgWeEjPPSIhsHJ019tIt1oo4bPL+4WC/5L5eaIsqfsB/V6rvPUoxOt9 XR+b2pxA4uH93tmYm7JLuiqfcjezNJ1lMPx0k4Se+Z9xASmTnDfjsJGjyVNnVsX4 CZ0MGmR3+4gJ2sn/0ar5bEL5OcnY6yhuU4E7pBOn67DIVrZmtE8= =gZ/N -----END PGP SIGNATURE----- --Sig_/lXdiYg3fRpyaWw9=8qWXSiV--