From eea29aa201d3172e32471a28332e5129dc684a7e Mon Sep 17 00:00:00 2001 From: Kabbone Date: Sat, 5 Nov 2022 16:57:18 +0100 Subject: [PATCH] ssl: add own rootCA --- hosts/configuration.nix | 4 ++++ hosts/rootCA.pem | 34 ++++++++++++++++++++++++++++++++++ 2 files changed, 38 insertions(+) create mode 100644 hosts/rootCA.pem diff --git a/hosts/configuration.nix b/hosts/configuration.nix index 48bda5a..adb6cf6 100644 --- a/hosts/configuration.nix +++ b/hosts/configuration.nix @@ -48,6 +48,10 @@ }; security.rtkit.enable = true; + security.pki.certificateFiles = [ + ./rootCA.pem + ]; + sound = { # ALSA sound enable enable = true; mediaKeys = { # Keyboard Media Keys (for minimal desktop) enable = true; diff --git a/hosts/rootCA.pem b/hosts/rootCA.pem new file mode 100644 index 0000000..a9f0256 --- /dev/null +++ b/hosts/rootCA.pem @@ -0,0 +1,34 @@ +-----BEGIN CERTIFICATE----- +MIIF6zCCA9OgAwIBAgIUXEzaXA18SwNTuJd+hQwsBB7PwRUwDQYJKoZIhvcNAQEL +BQAwgYQxCzAJBgNVBAYTAkRFMRMwEQYDVQQIDApTb21lLVN0YXRlMQwwCgYDVQQH +DANNdWMxFDASBgNVBAoMC09wZWwtT25saW5lMRcwFQYDVQQDDA5vcGVsLW9ubGlu +ZS5kZTEjMCEGCSqGSIb3DQEJARYUYWRtaW5Ab3BlbC1vbmxpbmUuZGUwHhcNMjAw +MTIxMjAyNTIxWhcNMzAwMTE4MjAyNTIxWjCBhDELMAkGA1UEBhMCREUxEzARBgNV +BAgMClNvbWUtU3RhdGUxDDAKBgNVBAcMA011YzEUMBIGA1UECgwLT3BlbC1Pbmxp +bmUxFzAVBgNVBAMMDm9wZWwtb25saW5lLmRlMSMwIQYJKoZIhvcNAQkBFhRhZG1p +bkBvcGVsLW9ubGluZS5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB +AN+GTa+iva9wO8a3RcPNEhF0PBF2NmWKZynzH82oi2MT8jDhAWzQ2IY0Gi9imkOM +dMdeCsk7/exj8V6RPZ8NEsTkTlLK+YNunebPOAWvjO0HN9NMeWyCgv14Cfa2QgO7 +3OlQOVn+A1mjOGSvrvkgelMhYEVdabiJ9Z+eCtaLglrv3EosKSEwh/8OtTDQDuHW +7BiUXAaXfTrdVbKSmZwaIS5aYOffIUwJYQYj32XVGsP3JtnoJ2JNb0PW6u0xbHki +ERG2Z9cYO0JtDUKSFHBQQHb95B/ulocABoTBEOu0os7q21Kjs/cjgh+h1THZqXEb +T/dqLvhcKWTVRSNpXPPHBZmqYblIYswAvNINpJmFQbSPdzYkzUtefuwPyGgM2YCH +Q3T+7ZjgtdEoJrt50Mh+R+05QCaUwHzOETOaFK6c7E5oqddBJNMZE0gvDEruPzPJ +FXcNLglkB8Cm/THMHec+SH1jpTzbx4oQlBAL9Q/3WqThghnUpWfqoqDApINsDgEY +Gfsx8mVk5pa9HacQ/kPyBiKY13jb6gThAv8vCe972vcbS1fm1Wexlb2dBoG9gFgr +U96wUcD7quSYOTTGQ0gUkzxRWVCA0K8dRQTsqmoU+iTpGdD+aMPGuAkejnt1jUQX +NjrYrPSqjwHDDBNgVxr6e5eeKY5mtYT2vfdvR+vGaSp1AgMBAAGjUzBRMB0GA1Ud +DgQWBBS5TNjLJJ3r9t/MwmWAeuFtf70bijAfBgNVHSMEGDAWgBS5TNjLJJ3r9t/M +wmWAeuFtf70bijAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4ICAQAm +K50BmImbi70ZOaFTUQX9HvtLbhKUQOZYuU+vW3t0fucw2fc83pssZXc+jYp7L0VI +WqAR1Ngc1nRbDDWoxCqcD94PbUqO32z/nqndWWi7J6bHegqy7F4wfxhPbLW6QfUu +B7JXerNLSh4xiTBCCcrChS6f6T7FeVIeRx3I4Zy25z8NVdPqa/KuiYfY92B1yjlH +VEOuOttttErswAFNPwBjcxvBQGHHUkmNuMhrdhqzV0fXn43/vQWN07ywOEKOFYLH +1YQMNN+8bOq3jhNQKwQBEHCf9oS/XN1tizZu7Hcl1ioEa/cu5hv6AddPHciJZqU1 +t0STLWl/0PZoT6uHkbMX6MIn7qlxYudeFguWDhkZQitciA7CC7KXiuasrGsoK/E5 +U7H2OPAPZegYpQH/B7y3pL/p3CdShrDXA4oYBZb0+b08+gM3yFlBIFpS0dhFmxUK +hMyJIrtOR4I7Bu2gqEpSQMy3EHC1Qly1eEzqA31eRXzVpS9b2RN5TBfSVkt1HcgS +bRAoKN9XHz8MdRJN7DRIyOZ+WIxd4IqbJP+P0SIA2BLBIARICP7K87r9JZn56IRE +I+z/CyLCuylzAY5gmrbKOUTvLGqbY0rjeG8wUpCjL8aicknyUTbTYHS2V+3BlE1R +m9d9FWvkHMuPsKyD6+fdQiS/fDCU5ePxwaK2ZeBYqw== +-----END CERTIFICATE-----