nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-16 17:20:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
430,257 Commits 263 Branches 81 Tags
ca45b69b5d1291cb889b455e42401bbbb66fac71
Commit Graph

2 Commits

Author SHA1 Message Date
Martin Weinelt
05e059adc5 python3Packages.certifi: Ignore /no-cert-file.crt in NIX_SSL_CERT_FILE 
(cherry picked from commit 92f67f68b3)
 2022-12-11 20:06:54 +01:00
Martin Weinelt
b4af8cc297 python3Packages.certifi: use system ca-bundle 
We update that one more reliably and it allows ties in with module based
configuration applied through `security.pki`.

Also allow overwriting the CA bundle used through `NIX_SSL_CERT_FILE`
as is common throughout nixpkgs.

Fixes: CVE-2022-23491
(cherry picked from commit 8d7cc9cac9)
 2022-12-08 21:48:20 +00:00