p11-kit: add trust paths

Fixes #82422
2020-04-25 12:27:34 -04:00 · 2020-04-25 12:27:34 -04:00 · 4c40b43a7c
commit 4c40b43a7c
parent 7fb1ff9003
1 changed files with 5 additions and 3 deletions
--- a/pkgs/development/libraries/p11-kit/default.nix
+++ b/pkgs/development/libraries/p11-kit/default.nix
@ -26,14 +26,16 @@ stdenv.mkDerivation rec {
  configureFlags = [
    "--sysconfdir=/etc"
    "--localstatedir=/var"
-    "--without-trust-paths"
-  ]; # TODO: store trust anchors in a directory common to Nix and NixOS
+    "--with-trust-paths=/etc/ssl/certs/ca-certificates.crt"
+  ];

  enableParallelBuilding = true;

  doCheck = !stdenv.isDarwin;

-  installFlags = [ "exampledir=\${out}/etc/pkcs11" ];
+  installFlags = [
+    "exampledir=${placeholder "out"}/etc/pkcs11"
+  ];

  meta = with stdenv.lib; {
    description = "Library for loading and sharing PKCS#11 modules";