nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-30 16:10:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

taplo: use native-tls to trust the system CA store

Browse Source 
taplo built with the default rustls-tls feature. reqwest then embeds the
webpki-roots trust store, which still contains emSign ECC Root CA - G3.
A cacert update did not change the roots that taplo trusts.

Build with native-tls instead. reqwest then uses OpenSSL on Linux and
Security.framework on Darwin, which read the system CA store.

See #576544.

Assisted-by: Claude Code (claude-opus-5)
This commit is contained in:
zimbatm
2026-10-20 22:04:18 +00:00
parent 965f876a78
commit 05df0b283b
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
pkgs/by-name/ta/taplo/package.nix
View File

@@ -46,7 +46,14 @@ rustPlatform.buildRustPackage (finalAttrs: {
buildInputs = [ openssl ];
buildFeatures = lib.optional withLsp "lsp";
buildNoDefaultFeatures = true;
buildFeatures = [
"completions"
"lint"
"native-tls"
"toml-test"
]
++ lib.optional withLsp "lsp";
postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
installShellCompletion --cmd taplo \