diff options
| author | Emily <vcs@emily.moe> | 2020-02-23 03:46:35 +0000 |
|---|---|---|
| committer | Emily <vcs@emily.moe> | 2020-02-23 04:10:34 +0000 |
| commit | 8ecbd97f82997063192cd97188422b93b90b95ca (patch) | |
| tree | 427d0e2c403e0ad0ca9d2d358dfc91c8bdfea53b /pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch | |
| parent | ea79a830dcf9c0059656da7f52835d2663d5c436 (diff) | |
nixos/acme: move the crt to fullchain.pem
lego already bundles the chain with the certificate,[1] so the current
code, designed for simp_le, was resulting in duplicate certificate
chains, manifesting as "Chain issues: Incorrect order, Extra certs" on
the Qualys SSL Server Test.
cert.pem stays around as a symlink for backwards compatibility.
[1] https://github.com/go-acme/lego/blob/5cdc0002e9abb2463fffc962dadc3479f72d7486/acme/api/certificate.go#L40-L44
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch')
0 files changed, 0 insertions, 0 deletions