Don't statically depend on cacert for certificates
This reverts commit cd52c04456 and
others.
Managing certificates (including revoking certificates and adding
custom certificates) becomes extremely painful if every package in the
system potentially depends on a different copy of cacert. Also, it
makes updating cacert rather expensive.
This commit is contained in:
@@ -1,5 +1,4 @@
|
||||
{ stdenv, fetchurl, fetchgit, curl, scrot, imagemagick, xawtv, inetutils
|
||||
, makeWrapper, coreutils, cacert
|
||||
{ stdenv, fetchurl, fetchgit, curl, scrot, imagemagick, xawtv, inetutils, makeWrapper, coreutils
|
||||
, apiKey ? ""
|
||||
, deviceKey ? "" }:
|
||||
|
||||
@@ -36,7 +35,7 @@ in stdenv.mkDerivation rec {
|
||||
cp -R ${modulesSrc}/* $out/modules/
|
||||
wrapProgram "$out/prey.sh" \
|
||||
--prefix PATH ":" "${xawtv}/bin:${imagemagick}/bin:${curl}/bin:${scrot}/bin:${inetutils}/bin:${coreutils}/bin" \
|
||||
--set CURL_CA_BUNDLE "${cacert}/etc/ssl/certs/ca-bundle.crt"
|
||||
--set CURL_CA_BUNDLE "/etc/ssl/certs/ca-certificates.crt"
|
||||
'';
|
||||
|
||||
meta = with stdenv.lib; {
|
||||
|
||||
Reference in New Issue
Block a user