···

       
18
       
 
       
    crlTemplate = pkgs.writeText "snakeoil-crl.template" ''

     

       
19
       
 
       
      expiration_days = -1

     

       
20
       
 
       
    '';

     

       
21
       
-
       
    userCertTemplace = pkgs.writeText "snakoil-user-cert.template" ''

     

       
22
       
 
       
      organization = snakeoil

     

       
23
       
 
       
      cn = server

     

       
24
       
 
       
      expiration_days = -1

     
···

       
49
       
 
       
    certtool -p --bits 4096 | sed -n \

     

       
50
       
 
       
      -e '/^----* *BEGIN/,/^----* *END/p' > "$out/alice.key"

     

       
51
       
 
       


     

       
52
       
-
       
    certtool -c --template "$userCertTemplace" \

     

       
53
       
 
       
                --load-privkey "$out/alice.key" \

     

       
54
       
 
       
                --load-ca-privkey ca.key \

     

       
55
       
 
       
                --load-ca-certificate "$cacert" \

     

···

       
18
       
 
       
    crlTemplate = pkgs.writeText "snakeoil-crl.template" ''

     

       
19
       
 
       
      expiration_days = -1

     

       
20
       
 
       
    '';

     

       
21
       
+
       
    userCertTemplate = pkgs.writeText "snakeoil-user-cert.template" ''

     

       
22
       
 
       
      organization = snakeoil

     

       
23
       
 
       
      cn = server

     

       
24
       
 
       
      expiration_days = -1

     
···

       
49
       
 
       
    certtool -p --bits 4096 | sed -n \

     

       
50
       
 
       
      -e '/^----* *BEGIN/,/^----* *END/p' > "$out/alice.key"

     

       
51
       
 
       


     

       
52
       
+
       
    certtool -c --template "$userCertTemplate" \

     

       
53
       
 
       
                --load-privkey "$out/alice.key" \

     

       
54
       
 
       
                --load-ca-privkey ca.key \

     

       
55
       
 
       
                --load-ca-certificate "$cacert" \