infra/pki/default.nix
Raito Bezarius 1bb6e8a681 feat: sign the ICA1 CSR
This introduces a bunch of facilities for PKI manipulations.

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2024-12-31 17:50:23 +01:00

23 lines
537 B
Nix

{ flake ? import ../., nixpkgs ? flake.inputs.nixpkgs, pkgs ? import nixpkgs { } }:
{
shell = pkgs.mkShell {
buildInputs = [
pkgs.openssl
];
OPENSSL_CONF = pkgs.writeText "openssl-pkcs11.conf" ''
openssl_conf = openssl_def
[openssl_def]
engines = engine_section
[engine_section]
pkcs11 = pkcs11_section
[pkcs11_section]
engine_id = pkcs11
dynamic_path = ${pkgs.libp11}/lib/engines/libpkcs11.so
MODULE_PATH = ${pkgs.opensc}/lib/opensc-pkcs11.so
'';
};
}