Hello, Maxim Cournoyer <[email protected]> skribis:
>> I'm trying to verify the nss-mozilla-ca-policy certificate attribute for >> the system certificates, but I can't seem to find the p11-kit trust >> store. For instance, ArchLinux keeps the store at: >> >> /usr/share/ca-certificates/trust-source/mozilla.trust.p11-kit >> >> while NixOS at: >> >> /etc/ssl/trust-source/ca-bundle.trust.p11-kit [...] > There is a PR to make user-configuration of p11-kit in Guix easier, see > <https://codeberg.org/guix/guix/pulls/10199>. Code like (guix build download) reads /etc/ssl/certs/*.crt and IIUC some distros are no longer shipping these files. I wonder whether/how we should update our code so that it does the right thing on those systems as well. Thoughts? Ludo’.
