diff options
| author | Florian Klink <flokli@flokli.de> | 2025-08-27 16:51:24 +0300 |
|---|---|---|
| committer | Florian Klink <flokli@flokli.de> | 2025-09-17 16:14:30 +0300 |
| commit | 55ef7dad4220c0c77c089eed79200dd52e52a4f7 (patch) | |
| tree | ba3e3cb13f401669145628985422594c4bf2d35d /pkgs/development/python-modules/python-openstackclient/git@git.tavy.me:nixos | |
| parent | 8a1999ecbe03b7a745018d35edecd1394e6cd724 (diff) | |
buildMavenPackage: use generate-cacerts.pl to populate trust store
In some cases, NIX_SSL_CERT_FILE may point to variation of cacerts,
see https://github.com/NixOS/nixpkgs/issues/435467 for examples.
`keytool` is not happy with all certs in there, and requires some
special care.
Re-use the tooling we have to populate openjdk 8 with its
trust store, instead of our naïve approach.
The nixpkgs linter doesn't allow us to simply refer to the .pl file from
inside the openjdk directory, and re-exposing it only from the openjdk8
derivation as a passthru is also a bit annoying.
As suggested in PR review, expose the perl script via pkgs and use it
both for build-maven-package and the openjdk8 build.
Fixes #435467.
Diffstat (limited to 'pkgs/development/python-modules/python-openstackclient/git@git.tavy.me:nixos')
0 files changed, 0 insertions, 0 deletions