commit 7b87554ca16bc60527f14e1837792170360cf6be · pyrox.dev/nixpkgs

+1 -1

nixos/tests/acme.nix

···

       29
        
         name = "acme";

     

       30
        
       

     

       31
        
         nodes = {

     

       32
       -
           letsencrypt = ./common/letsencrypt.nix;

     

       33
        
       

     

       34
        
           webserver = { config, pkgs, ... }: {

     

       35
        
             imports = [ commonConfig ];

···

       29
        
         name = "acme";

     

       30
        
       

     

       31
        
         nodes = {

     

       32
       +
           letsencrypt = ./common/letsencrypt;

     

       33
        
       

     

       34
        
           webserver = { config, pkgs, ... }: {

     

       35
        
             imports = [ commonConfig ];

+12 -50

nixos/tests/common/letsencrypt.nix nixos/tests/common/letsencrypt/default.nix

···

       17
        
       # A configuration example of a full node setup using this would be this:

     

       18
        
       #

     

       19
        
       # {

     

       20
       -
       #   letsencrypt = import ./common/letsencrypt.nix;

     

       21
        
       #

     

       22
        
       #   example = { nodes, ... }: {

     

       23
        
       #     networking.nameservers = [

     
···

       30
        
       # }

     

       31
        
       #

     

       32
        
       # By default, this module runs a local resolver, generated using resolver.nix

     

       33
       -
       # from the same directory to automatically discover all zones in the network.

     

       34
        
       #

     

       35
        
       # If you do not want this and want to use your own resolver, you can just

     

       36
        
       # override networking.nameservers like this:

     

       37
        
       #

     

       38
        
       # {

     

       39
        
       #   letsencrypt = { nodes, ... }: {

     

       40
       -
       #     imports = [ ./common/letsencrypt.nix ];

     

       41
        
       #     networking.nameservers = [

     

       42
        
       #       nodes.myresolver.config.networking.primaryIPAddress

     

       43
        
       #     ];

     
···

       164
        
               -e 's,exec \./bin/,,' \

     

       165
        
               test/startservers.py

     

       166
        
       

     

       167
       -
             cat "${snakeOilCa}/ca.key" > test/test-ca.key

     

       168
       -
             cat "${snakeOilCa}/ca.pem" > test/test-ca.pem

     

       169
        
           '';

     

       170
        
       

     

       171
        
           # Until vendored pkcs11 is go 1.9 compatible

     
···

       206
        
           1:/var/lib/softhsm/slot1.db

     

       207
        
         '';

     

       208
        
       

     

       209
       -
         snakeOilCa = pkgs.runCommand "snakeoil-ca" {

     

       210
       -
           buildInputs = [ pkgs.openssl ];

     

       211
       -
           allowSubstitutes = false;

     

       212
       -
         } ''

     

       213
       -
           mkdir "$out"

     

       214
       -
           openssl req -newkey rsa:4096 -x509 -sha256 -days 36500 \

     

       215
       -
             -subj '/CN=Snakeoil CA' -nodes \

     

       216
       -
             -out "$out/ca.pem" -keyout "$out/ca.key"

     

       217
       -
         '';

     

       218
       -
       

     

       219
       -
         createAndSignCert = fqdn: let

     

       220
       -
           snakeoilCertConf = pkgs.writeText "snakeoil.cnf" ''

     

       221
       -
             [req]

     

       222
       -
             default_bits = 4096

     

       223
       -
             prompt = no

     

       224
       -
             default_md = sha256

     

       225
       -
             req_extensions = req_ext

     

       226
       -
             distinguished_name = dn

     

       227
       -
             [dn]

     

       228
       -
             CN = ${fqdn}

     

       229
       -
             [req_ext]

     

       230
       -
             subjectAltName = DNS:${fqdn}

     

       231
       -
           '';

     

       232
       -
         in pkgs.runCommand "snakeoil-certs-${fqdn}" {

     

       233
       -
           buildInputs = [ pkgs.openssl ];

     

       234
       -
           allowSubstitutes = false;

     

       235
       -
         } ''

     

       236
       -
           mkdir "$out"

     

       237
       -
           openssl genrsa -out "$out/snakeoil.key" 4096

     

       238
       -
           openssl req -new -key "$out/snakeoil.key" \

     

       239
       -
             -config ${lib.escapeShellArg snakeoilCertConf} \

     

       240
       -
             -out snakeoil.csr

     

       241
       -
           openssl x509 -req -in snakeoil.csr -sha256 -set_serial 666 \

     

       242
       -
             -CA "${snakeOilCa}/ca.pem" -CAkey "${snakeOilCa}/ca.key" \

     

       243
       -
             -extfile ${lib.escapeShellArg snakeoilCertConf} \

     

       244
       -
             -out "$out/snakeoil.pem" -days 36500

     

       245
       -
         '';

     

       246
        
       

     

       247
       -
         wfeCerts = createAndSignCert wfeDomain;

     

       248
        
         wfeDomain = "acme-v01.api.letsencrypt.org";

     

       249
       -
         wfeCertFile = "${wfeCerts}/snakeoil.pem";

     

       250
       -
         wfeKeyFile = "${wfeCerts}/snakeoil.key";

     

       251
        
       

     

       252
       -
         siteCerts = createAndSignCert siteDomain;

     

       253
        
         siteDomain = "letsencrypt.org";

     

       254
       -
         siteCertFile = "${siteCerts}/snakeoil.pem";

     

       255
       -
         siteKeyFile = "${siteCerts}/snakeoil.key";

     

       256
        
       

     

       257
        
         # Retrieved via:

     

       258
        
         # curl -s -I https://acme-v01.api.letsencrypt.org/terms \

     
···

       365
        
         }) components;

     

       366
        
       

     

       367
        
       in {

     

       368
       -
         imports = [ ./resolver.nix ];

     

       369
        
       

     

       370
        
         options.test-support.letsencrypt.caCert = lib.mkOption {

     

       371
        
           type = lib.types.path;

     
···

       381
        
             resolver.enable = let

     

       382
        
               isLocalResolver = config.networking.nameservers == [ "127.0.0.1" ];

     

       383
        
             in lib.mkOverride 900 isLocalResolver;

     

       384
       -
             letsencrypt.caCert = "${snakeOilCa}/ca.pem";

     

       385
        
           };

     

       386
        
       

     

       387
        
           # This has priority 140, because modules/testing/test-instrumentation.nix

···

       17
        
       # A configuration example of a full node setup using this would be this:

     

       18
        
       #

     

       19
        
       # {

     

       20
       +
       #   letsencrypt = import ./common/letsencrypt;

     

       21
        
       #

     

       22
        
       #   example = { nodes, ... }: {

     

       23
        
       #     networking.nameservers = [

     
···

       30
        
       # }

     

       31
        
       #

     

       32
        
       # By default, this module runs a local resolver, generated using resolver.nix

     

       33
       +
       # from the parent directory to automatically discover all zones in the network.

     

       34
        
       #

     

       35
        
       # If you do not want this and want to use your own resolver, you can just

     

       36
        
       # override networking.nameservers like this:

     

       37
        
       #

     

       38
        
       # {

     

       39
        
       #   letsencrypt = { nodes, ... }: {

     

       40
       +
       #     imports = [ ./common/letsencrypt ];

     

       41
        
       #     networking.nameservers = [

     

       42
        
       #       nodes.myresolver.config.networking.primaryIPAddress

     

       43
        
       #     ];

     
···

       164
        
               -e 's,exec \./bin/,,' \

     

       165
        
               test/startservers.py

     

       166
        
       

     

       167
       +
             cat ${lib.escapeShellArg snakeOilCerts.ca.key} > test/test-ca.key

     

       168
       +
             cat ${lib.escapeShellArg snakeOilCerts.ca.cert} > test/test-ca.pem

     

       169
        
           '';

     

       170
        
       

     

       171
        
           # Until vendored pkcs11 is go 1.9 compatible

     
···

       206
        
           1:/var/lib/softhsm/slot1.db

     

       207
        
         '';

     

       208
        
       

     

       209
       +
         snakeOilCerts = import ./snakeoil-certs.nix;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       210
        
       

     

       0
        
       
     

       211
        
         wfeDomain = "acme-v01.api.letsencrypt.org";

     

       212
       +
         wfeCertFile = snakeOilCerts.${wfeDomain}.cert;

     

       213
       +
         wfeKeyFile = snakeOilCerts.${wfeDomain}.key;

     

       214
        
       

     

       0
        
       
     

       215
        
         siteDomain = "letsencrypt.org";

     

       216
       +
         siteCertFile = snakeOilCerts.${siteDomain}.cert;

     

       217
       +
         siteKeyFile = snakeOilCerts.${siteDomain}.key;

     

       218
        
       

     

       219
        
         # Retrieved via:

     

       220
        
         # curl -s -I https://acme-v01.api.letsencrypt.org/terms \

     
···

       327
        
         }) components;

     

       328
        
       

     

       329
        
       in {

     

       330
       +
         imports = [ ../resolver.nix ];

     

       331
        
       

     

       332
        
         options.test-support.letsencrypt.caCert = lib.mkOption {

     

       333
        
           type = lib.types.path;

     
···

       343
        
             resolver.enable = let

     

       344
        
               isLocalResolver = config.networking.nameservers == [ "127.0.0.1" ];

     

       345
        
             in lib.mkOverride 900 isLocalResolver;

     

       346
       +
             letsencrypt.caCert = snakeOilCerts.ca.cert;

     

       347
        
           };

     

       348
        
       

     

       349
        
           # This has priority 140, because modules/testing/test-instrumentation.nix

+69

nixos/tests/common/letsencrypt/mkcerts.nix

···

       1
       +
       { pkgs ? import <nixpkgs> {}

     

       2
       +
       , lib ? pkgs.lib

     

       3
       +
       

     

       4
       +
       , domains ? [ "acme-v01.api.letsencrypt.org" "letsencrypt.org" ]

     

       5
       +
       }:

     

       6
       +
       

     

       7
       +
       pkgs.runCommand "letsencrypt-snakeoil-ca" {

     

       8
       +
         nativeBuildInputs = [ pkgs.openssl ];

     

       9
       +
       } ''

     

       10
       +
         addpem() {

     

       11
       +
           local file="$1"; shift

     

       12
       +
           local storeFileName="$(IFS=.; echo "$*")"

     

       13
       +
       

     

       14
       +
           echo -n "  " >> "$out"

     

       15
       +
       

     

       16
       +
           # Every following argument is an attribute, so let's recurse and check

     

       17
       +
           # every attribute whether it must be quoted and write it into $out.

     

       18
       +
           while [ -n "$1" ]; do

     

       19
       +
             if expr match "$1" '^[a-zA-Z][a-zA-Z0-9]*$' > /dev/null; then

     

       20
       +
               echo -n "$1" >> "$out"

     

       21
       +
             else

     

       22
       +
               echo -n '"' >> "$out"

     

       23
       +
               echo -n "$1" | sed -e 's/["$]/\\&/g' >> "$out"

     

       24
       +
               echo -n '"' >> "$out"

     

       25
       +
             fi

     

       26
       +
             shift

     

       27
       +
             [ -z "$1" ] || echo -n . >> "$out"

     

       28
       +
           done

     

       29
       +
       

     

       30
       +
           echo " = builtins.toFile \"$storeFileName\" '''" >> "$out"

     

       31
       +
           sed -e 's/^/    /' "$file" >> "$out"

     

       32
       +
       

     

       33
       +
           echo "  ''';" >> "$out"

     

       34
       +
         }

     

       35
       +
       

     

       36
       +
         echo '# Generated via mkcert.sh in the same directory.' > "$out"

     

       37
       +
         echo '{' >> "$out"

     

       38
       +
       

     

       39
       +
         openssl req -newkey rsa:4096 -x509 -sha256 -days 36500 \

     

       40
       +
           -subj '/CN=Snakeoil CA' -nodes -out ca.pem -keyout ca.key

     

       41
       +
       

     

       42
       +
         addpem ca.key ca key

     

       43
       +
         addpem ca.pem ca cert

     

       44
       +
       

     

       45
       +
         ${lib.concatMapStrings (fqdn: let

     

       46
       +
           opensslConfig = pkgs.writeText "snakeoil.cnf" ''

     

       47
       +
             [req]

     

       48
       +
             default_bits = 4096

     

       49
       +
             prompt = no

     

       50
       +
             default_md = sha256

     

       51
       +
             req_extensions = req_ext

     

       52
       +
             distinguished_name = dn

     

       53
       +
             [dn]

     

       54
       +
             CN = ${fqdn}

     

       55
       +
             [req_ext]

     

       56
       +
             subjectAltName = DNS:${fqdn}

     

       57
       +
           '';

     

       58
       +
         in ''

     

       59
       +
           export OPENSSL_CONF=${lib.escapeShellArg opensslConfig}

     

       60
       +
           openssl genrsa -out snakeoil.key 4096

     

       61
       +
           openssl req -new -key snakeoil.key -out snakeoil.csr

     

       62
       +
           openssl x509 -req -in snakeoil.csr -sha256 -set_serial 666 \

     

       63
       +
             -CA ca.pem -CAkey ca.key -out snakeoil.pem -days 36500

     

       64
       +
           addpem snakeoil.key ${lib.escapeShellArg fqdn} key

     

       65
       +
           addpem snakeoil.pem ${lib.escapeShellArg fqdn} cert

     

       66
       +
         '') domains}

     

       67
       +
       

     

       68
       +
         echo '}' >> "$out"

     

       69
       +
       ''

nixos/tests/common/letsencrypt/mkcerts.sh

···

       1
       +
       #!/usr/bin/env nix-shell

     

       2
       +
       #!nix-shell -p nix bash -i bash

     

       3
       +
       set -e

     

       4
       +
       cd "$(dirname "$0")"

     

       5
       +
       storepath="$(nix-build --no-out-link mkcerts.nix)"

     

       6
       +
       cat "$storepath" > snakeoil-certs.nix

+253

nixos/tests/common/letsencrypt/snakeoil-certs.nix

···

       1
       +
       # Generated via mkcert.sh in the same directory.

     

       2
       +
       {

     

       3
       +
         ca.key = builtins.toFile "ca.key" ''

     

       4
       +
           -----BEGIN PRIVATE KEY-----

     

       5
       +
           MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQDfdVxC/4HwhuzD

     

       6
       +
           9or9CDDu3TBQE5lirJI5KYmfMZtfgdzEjgOzmR9AVSkn2rQeCqzM5m+YCzPO+2y7

     

       7
       +
           0Fdk7vDORi1OdhYfUQIW6/TZ27xEjx4t82j9i705yUqTJZKjMbD830geXImJ6VGj

     

       8
       +
           Nv/WisTHmwBspWKefYQPN68ZvYNCn0d5rYJg9uROZPJHSI0MYj9iERWIPN+xhZoS

     

       9
       +
           xN74ILJ0rEOQfx2GHDhTr99vZYAFqbAIfh35fYulRWarUSekI+rDxa83FD8q9cMg

     

       10
       +
           OP84KkLep2dRXXTbUWErGUOpHP55M9M7ws0RVNdl9PUSbDgChl7yYlHCde3261q/

     

       11
       +
           zGp5dMV/t/jXXNUgRurvXc4gUKKjS4Sffvg0XVnPs3sMlZ4JNmycK9klgISVmbTK

     

       12
       +
           VcjRRJv8Bva2NQVsJ9TIryV0QEk94DucgsC3LbhQfQdmnWVcEdzwrZHNpk9az5mn

     

       13
       +
           w42RuvZW9L19T7xpIrdLSHaOis4VEquZjkWIhfIz0DVMeXtYEQmwqFG23Ww0utcp

     

       14
       +
           mCW4FPvpyYs5GAPmGWfrlMxsLD/7eteot3AheC+56ZBoVBnI8FFvIX2qci+gfVDu

     

       15
       +
           CjvDmbyS/0NvxLGqvSC1GUPmWP3TR5Fb1H8Rp+39zJHRmH+qYWlhcv6p7FlY2/6d

     

       16
       +
           9Rkw8WKRTSCB7yeUdNNPiPopk6N4NwIDAQABAoICAQCzV0ei5dntpvwjEp3eElLj

     

       17
       +
           glYiDnjOPt5kTjgLsg6XCmyau7ewzrXMNgz/1YE1ky+4i0EI8AS2nAdafQ2HDlXp

     

       18
       +
           11zJWfDLVYKtztYGe1qQU6TPEEo1I4/M7waRLliP7XO0n6cL5wzjyIQi0CNolprz

     

       19
       +
           8CzZBasutGHmrLQ1nmnYcGk2+NBo7f2yBUaFe27of3mLRVbYrrKBkU5kveiNkABp

     

       20
       +
           r0/SipKxbbivQbm7d+TVpqiHSGDaOa54CEksOcfs7n6efOvw8qj326KtG9GJzDE6

     

       21
       +
           7XP4U19UHe40XuR0t7Zso/FmRyO6QzNUutJt5LjXHezZ75razTcdMyr0QCU8MUHH

     

       22
       +
           jXZxQCsbt+9AmdxUMBm1SMNVBdHYM8oiNHynlgsEj9eM6jxDEss/Uc3FeKoHl+XL

     

       23
       +
           L6m28guIB8NivqjVzZcwhxvdiQCzYxjyqMC+/eX7aaK4NIlX2QRMoDL6mJ58Bz/8

     

       24
       +
           V2Qxp2UNVwKJFWAmpgXC+sq6XV/TP3HkOvd0OK82Nid2QxEvfE/EmOhU63qAjgUR

     

       25
       +
           QnteLEcJ3MkGGurs05pYBDE7ejKVz6uu2tHahFMOv+yanGP2gfivnT9a323/nTqH

     

       26
       +
           oR5ffMEI1u/ufpWU7sWXZfL/mH1L47x87k+9wwXHCPeSigcy+hFI7t1+rYsdCmz9

     

       27
       +
           V6QtmxZHMLanwzh5R0ipcQKCAQEA8kuZIz9JyYP6L+5qmIUxiWESihVlRCSKIqLB

     

       28
       +
           fJ5sQ06aDBV2sqS4XnoWsHuJWUd39rulks8cg8WIQu8oJwVkFI9EpARt/+a1fRP0

     

       29
       +
           Ncc9qiBdP6VctQGgKfe5KyOfMzIBUl3zj2cAmU6q+CW1OgdhnEl4QhgBe5XQGquZ

     

       30
       +
           Alrd2P2jhJbMO3sNFgzTy7xPEr3KqUy+L4gtRnGOegKIh8EllmsyMRO4eIrZV2z3

     

       31
       +
           XI+S2ZLyUn3WHYkaJqvUFrbfekgBBmbk5Ead6ImlsLsBla6MolKrVYV1kN6KT+Y+

     

       32
       +
           plcxNpWY8bnWfw5058OWPLPa9LPfReu9rxAeGT2ZLmAhSkjGxQKCAQEA7BkBzT3m

     

       33
       +
           SIzop9RKl5VzYbVysCYDjFU9KYMW5kBIw5ghSMnRmU7kXIZUkc6C1L/v9cTNFFLw

     

       34
       +
           ZSF4vCHLdYLmDysW2d4DU8fS4qdlDlco5A00g8T1FS7nD9CzdkVN/oix6ujw7RuI

     

       35
       +
           7pE1K3JELUYFBc8AZ7mIGGbddeCwnM+NdPIlhWzk5s4x4/r31cdk0gzor0kE4e+d

     

       36
       +
           5m0s1T4O/Iak6rc0MGDeTejZQg04p1eAJFYQ6OY23tJhH/kO8CMYnQ4fidfCkf8v

     

       37
       +
           85v4EC1MCorFR7J65uSj8MiaL7LTXPvLAkgFls1c3ijQ2tJ8qXvqmfo0by33T1OF

     

       38
       +
           ZGyaOP9/1WQSywKCAQB47m6CfyYO5EZNAgxGD8SHsuGT9dXTSwF/BAjacB/NAEA2

     

       39
       +
           48eYpko3LWyBrUcCPn+LsGCVg7XRtxepgMBjqXcoI9G4o1VbsgTHZtwus0D91qV0

     

       40
       +
           DM7WsPcFu1S6SU8+OCkcuTPFUT2lRvRiYj+vtNttK+ZP5rdmvYFermLyH/Q2R3ID

     

       41
       +
           zVgmH+aKKODVASneSsgJ8/nAs5EVZbwc/YKzbx2Zk+s7P4KE95g+4G4dzrMW0RcN

     

       42
       +
           QS1LFJDu2DhFFgU4fRO15Ek9/lj2JS2DpfLGiJY8tlI5nyDsq4YRFvQSBdbUTZpG

     

       43
       +
           m+CJDegffSlRJtuT4ur/dQf5hmvfYTVBRk2XS/eZAoIBAB143a22PWnvFRfmO02C

     

       44
       +
           3X1j/iYZCLZa6aCl+ZTSj4LDGdyRPPXrUDxwlFwDMHfIYfcHEyanV9T4Aa9SdKh9

     

       45
       +
           p6RbF6YovbeWqS+b/9RzcupM77JHQuTbDwL9ZXmtGxhcDgGqBHFEz6ogPEfpIrOY

     

       46
       +
           GwZnmcBY+7E4HgsZ+lII4rqng6GNP2HEeZvg91Eba+2AqQdAkTh3Bfn+xOr1rT8+

     

       47
       +
           u5WFOyGS5g1JtN0280yIcrmWeNPp8Q2Nq4wnNgMqDmeEnNFDOsmo1l6NqMC0NtrW

     

       48
       +
           CdxyXj82aXSkRgMQSqw/zk7BmNkDV8VvyOqX/fHWQynnfuYmEco4Pd2UZQgadOW5

     

       49
       +
           cVMCggEBANGz1fC+QQaangUzsVNOJwg2+CsUFYlAKYA3pRKZPIyMob2CBXk3Oln/

     

       50
       +
           YqOq6j373kG2AX74EZT07JFn28F27JF3r+zpyS/TYrfZyO1lz/5ZejPtDTmqBiVd

     

       51
       +
           qa2coaPKwCOz64s77A9KSPyvpvyuTfRVa8UoArHcrQsPXMHgEhnFRsbxgmdP582A

     

       52
       +
           kfYfoJBSse6dQtS9ZnREJtyWJlBNIBvsuKwzicuIgtE3oCBcIUZpEa6rBSN7Om2d

     

       53
       +
           ex8ejCcS7qpHeULYspXbm5ZcwE4glKlQbJDTKaJ9mjiMdvuNFUZnv1BdMQ3Tb8zf

     

       54
       +
           Gvfq54FbDuB10XP8JdLrsy9Z6GEsmoE=

     

       55
       +
           -----END PRIVATE KEY-----

     

       56
       +
         '';

     

       57
       +
         ca.cert = builtins.toFile "ca.cert" ''

     

       58
       +
           -----BEGIN CERTIFICATE-----

     

       59
       +
           MIIFATCCAumgAwIBAgIJANydi4uFZr0LMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNV

     

       60
       +
           BAMMC1NuYWtlb2lsIENBMCAXDTE4MDcxMjAwMjIxNloYDzIxMTgwNjE4MDAyMjE2

     

       61
       +
           WjAWMRQwEgYDVQQDDAtTbmFrZW9pbCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIP

     

       62
       +
           ADCCAgoCggIBAN91XEL/gfCG7MP2iv0IMO7dMFATmWKskjkpiZ8xm1+B3MSOA7OZ

     

       63
       +
           H0BVKSfatB4KrMzmb5gLM877bLvQV2Tu8M5GLU52Fh9RAhbr9NnbvESPHi3zaP2L

     

       64
       +
           vTnJSpMlkqMxsPzfSB5ciYnpUaM2/9aKxMebAGylYp59hA83rxm9g0KfR3mtgmD2

     

       65
       +
           5E5k8kdIjQxiP2IRFYg837GFmhLE3vggsnSsQ5B/HYYcOFOv329lgAWpsAh+Hfl9

     

       66
       +
           i6VFZqtRJ6Qj6sPFrzcUPyr1wyA4/zgqQt6nZ1FddNtRYSsZQ6kc/nkz0zvCzRFU

     

       67
       +
           12X09RJsOAKGXvJiUcJ17fbrWr/Manl0xX+3+Ndc1SBG6u9dziBQoqNLhJ9++DRd

     

       68
       +
           Wc+zewyVngk2bJwr2SWAhJWZtMpVyNFEm/wG9rY1BWwn1MivJXRAST3gO5yCwLct

     

       69
       +
           uFB9B2adZVwR3PCtkc2mT1rPmafDjZG69lb0vX1PvGkit0tIdo6KzhUSq5mORYiF

     

       70
       +
           8jPQNUx5e1gRCbCoUbbdbDS61ymYJbgU++nJizkYA+YZZ+uUzGwsP/t616i3cCF4

     

       71
       +
           L7npkGhUGcjwUW8hfapyL6B9UO4KO8OZvJL/Q2/Esaq9ILUZQ+ZY/dNHkVvUfxGn

     

       72
       +
           7f3MkdGYf6phaWFy/qnsWVjb/p31GTDxYpFNIIHvJ5R000+I+imTo3g3AgMBAAGj

     

       73
       +
           UDBOMB0GA1UdDgQWBBQ3vPWzjLmu5krbSpfhBAht9KL3czAfBgNVHSMEGDAWgBQ3

     

       74
       +
           vPWzjLmu5krbSpfhBAht9KL3czAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUA

     

       75
       +
           A4ICAQDF9HyC1ZFN3Ob+JA9Dj5+Rcobi7JIA5F8uW3Q92LfPoVaUGEkBrwJSiTFX

     

       76
       +
           47zvP/ySBJIpZ9rzHMbJ+1L+eJgczF1uQ91inthCKo1THTPo5TgBrpJj0YAIunsj

     

       77
       +
           9eH1tBnfWFYdVIDZoTSiwPtgIvglpyuK/eJXEe+FRzubhtdc9w1Hlzox1sd0TQuy

     

       78
       +
           Pl9KFHg7BlFZfCPig1mkB8pfwjBDgVhv5DKJ9cJXh3R5zSoiyuS2b+qYSvw8YTHq

     

       79
       +
           0WNKWUthb7BVAYE3OmcbOHgUAUjtJ6EIGIB9z/SoLe90CofXLXFR5dppuVLKCMBA

     

       80
       +
           kgL4luBIu7t8mcnN2yzobvcGHy8RVY6F5abCCy6gackLzjOzvH1SYOxP8yN74aKB

     

       81
       +
           ANgcqdWspb8JYoU8lEbA8dhBVrsgBf7XeJlrZvMdcUENlJ2PI0JWr9WvlRAM9rYY

     

       82
       +
           EY1alJqBCp6530Ggd6/f0V64cEqptejUdmN9L0zboxKjQf4LjpUNraGvg8tw/xkY

     

       83
       +
           4dT1U2HlVnhOyBVkx/tE6zIK/RU16oMqwpjCdfbK/TuWCNc/emJz5PMlp81zm83+

     

       84
       +
           dExpWwuV4rt6OQbZ/GSatNLJXOw+pkLjaEhnHgrsgI+HqAUXg3ByKol+1e76wN51

     

       85
       +
           k1ZKpB6mk4kejySGPYBHiJwED0IyXu9gUfalSczXFO4ySAvhCg==

     

       86
       +
           -----END CERTIFICATE-----

     

       87
       +
         '';

     

       88
       +
         "acme-v01.api.letsencrypt.org".key = builtins.toFile "acme-v01.api.letsencrypt.org.key" ''

     

       89
       +
           -----BEGIN RSA PRIVATE KEY-----

     

       90
       +
           MIIJKQIBAAKCAgEAvG+sL4q0VkgSClBTn4NkPiUrtXx5oLyZ+CCM1jrQx/xotUt5

     

       91
       +
           X2S4/7vMnAK/yRLsR7R2PhXO8CZPqJ7B6OfAgaDTgvipJkZYPZQSMP3KOinM3WJL

     

       92
       +
           ssqKh7/HOxZIf0iyUXewrnX5eTAo/CLsUnhBjBD7E99nmQz/leLWSl82sSYDkO3n

     

       93
       +
           Uk3/1qJZA8iddb4uH0IEQWcNKev3WoQQzwiVrXBiftlRQOJy5JJXm5m8229MCpMA

     

       94
       +
           1AUWmpdu6sl3/gFFdsDhUFq/a7LFrVyaUCMRIHg9szAB7ZFkixr9umQs8jKwuo98

     

       95
       +
           3JHB11h2SirwgfIzHHmyhaWhCt22ucTwEXGhq63LtrzZvLsfP8Ql5S+AuqGTH0v8

     

       96
       +
           meuc784leAjulBZjkpuIFwDnVv9+YeUEbqJeo1hSHrILddora3nkH4E2dJWmLpqp

     

       97
       +
           iPr++GRi+BNgYKW/BQLTJ7C6v+vUs+kdPgYJH5z7oP6f0YZkT0Wkubp/UEz7UV2d

     

       98
       +
           fjz57d77DYx5rFWGYzJriWR/xltgL1zDpjwjwG1FDpRqwlyYbBFpjQhxI+X0aT98

     

       99
       +
           m6fCzBDQHDb/+JgvsjTHh6OZatahFAwzFIEfrceDv1BG8sBWIaZGhLzYiWQxafl8

     

       100
       +
           oXbWv1T6I1jpsTlCdCSkWzaJb4ZjxI9Ga1ynVu8F16+GR2a71wKWu7UbZQsCAwEA

     

       101
       +
           AQKCAgBYvrs4FLoD3KNqahRIDqhaQEVKjtn1Yn2dBy9tAXwsg2qI34fE7nnWLwsY

     

       102
       +
           +o56U0gmKQ57BOhV36Uqg8JNP0BBjI2wpA19simCrsa2fgAMznzmUpHWHV+KuT5K

     

       103
       +
           TJ9OGt2oUpdKQtOASLc0r/neiTZNkf29iTyQLzf7zj4f/qGSYpXRXsnP0F5KJmGH

     

       104
       +
           z6agujWckQnSB4eCk9gFsCb+akubyE8K8Kw8w6lajrVl2czBB7SnUj5UnCTeH62k

     

       105
       +
           M8goP08Is6QppON8BFDm6bLfRPSe9yIPzu9JhGz2unp+mwkz872Zz1P9yUOieM4U

     

       106
       +
           9g4ZFQkPQx1ZpfynUm3pJZ/uhzadBabnIvMe/1qwDAEDifh/WzEM76/2kBpQkHtS

     

       107
       +
           qcjwjAElfWnP8aBr1Pj42/cVJy3dbDqb0OawFHx/8xSO2CkY4Gq2h3OYv1XpPv3g

     

       108
       +
           S9qqKhvuaT+aD0YjKhP4FYc2vvQSJwdZL8vqOyma8JGmc+r7jakIPCyOx3oPVqnS

     

       109
       +
           L2P7DuJ1FcGIZyYOU3UUSzKndDU9fVC8YoLWvHDlwm4RK9UPtdsBY8mEu6BlaAwL

     

       110
       +
           zEQG+fbcFnEkHPiJeAohYUCHiqCihLt0pqGwZi+QrudPQE6C47YijGZWJu4VVLjB

     

       111
       +
           B2L9iDQKsN4FnBJ9egJIwWBLX3XXQfjC43UGm1A5sBvD+ScsCQKCAQEA7GxU7/SW

     

       112
       +
           4YJ+wBXrp7Z3vzlc5mTT5U4L2muWZLhIjT/jmpHpZ4c9a5DY/K9OYcu8XJ+7kx2B

     

       113
       +
           N40cU3ZkT2ZbB5/BUCEmi3Wzy3R/KZshHDzvvSZHcXJqVBtv+HGJgR5ssFqAw8c6

     

       114
       +
           gJtDls+JE9Sz+nhLk0ZZ4658vbTQfG1lmtzrbC3Kz2xK8RPTdOU5Or7fayeaEKEW

     

       115
       +
           ECBJPE41ME2UTdB/E85vyYoee0MBijjAs19QKqvoNbyrsZ5bihcIDYsrvjCmkdW1

     

       116
       +
           20IUrSF3ZYJ9bb+CxHeRyNqwvRxPYSkzdMjZHx+xEAvJgw51QqmIi2QQf/qB+ych

     

       117
       +
           cSbE/0Jhx4QbDQKCAQEAzAoenEOgmZvUegFUu8C6gWeibMjl3Y9SikQ4CoQO/zWr

     

       118
       +
           aoCr5BpbzbtOffwnPfgk9wCGvXf6smOdrLUP1K2QAhBr/vJh7ih2MonvpYr5HPP7

     

       119
       +
           maVARR66IgtxXP2ER2I9+9p2OQdecGRP2fUn2KCDQIASHSSY/VjBb8LLJgryC/DS

     

       120
       +
           r2b0+m1e2qXfNWt/BYTQZhD/8B/jl/2pl/jI2ne3rkeiwEm7lqZaDt3Q8gC+qoP5

     

       121
       +
           /IdG1Gob7UTMCbICWy1aGuzRYUmbpg0Vq4DAV1RtgBySB5oNq5PMBHYpOxedM2nM

     

       122
       +
           NxHvf0u6wsxVULwQ4IfWUqUTspjxDmIgogSzmOGadwKCAQEA558if4tynjBImUtg

     

       123
       +
           egirvG4oc5doeQhDWJN63eYlPizPgUleD41RQSbBTp04/1qoiV38WJ7ZT2Ex1Rry

     

       124
       +
           H0+58vgyXZx8tLh1kufpBQv0HkQc44SzDZP4U7olspMZEaSK+yNPb36p9AEo8IEW

     

       125
       +
           XJVQVhywffK4cfUqRHj2oFBU8KlrA6rBPQFtUk4IJkfED6ecHtDHgW8vvFDFLw23

     

       126
       +
           0kDPAIU5WmAu6JYmUsBMq+v57kF8urF8Z9kVpIfuSpVR0GL+UfA74DgtWEefFhbp

     

       127
       +
           cEutMm4jYPN7ofmOmVc49Yl13f4/qNxVjdDedUUe4FZTbax09cyotzOY8c/3w9R3

     

       128
       +
           Ew57qQKCAQAa5jqi30eM+L5KV2KUXhQ4ezEupk2np/15vQSmXkKb4rd2kwAWUmNH

     

       129
       +
           /Cmc8mE6CjzVU3xv/iFO41MmMbikkT0rCH80XUAL5cmvX//4ExpEduX0m5SdiC+B

     

       130
       +
           zYBkggeuYYVKbsKnQhFxP8hHM8rNBFxJZJj+vpRs0gaudT/TBB5k9JrSBQDHAyQ+

     

       131
       +
           Lx/+Ku3UDG5tBlC3l3ypzQdOwb25D49nqooKT64rbkLxMs0ZGoAIet26LRtpZZPI

     

       132
       +
           9AjyPkWRP6lhY1c3PD0I5zC0K4Uv/jFxclLOLcEfnZyH+gv1fmd7H7eMixDH93Pn

     

       133
       +
           uoiE3EZdU4st2hV+tisRel5S/cuvnA6BAoIBAQDJISK8H0hwYp+J4/WUv/WLtrm4

     

       134
       +
           Mhmn8ItdEPAyCljycU6oLHJy4fgmmfRHeoO1i3jb87ks2GghegFBbJNzugfoGxIM

     

       135
       +
           dLWIV+uFXWs24fMJ/J6lqN1JtAj7HjvqkXp061X+MdIJ0DsACygzFfJOjv+Ij77Q

     

       136
       +
           Q1OBTSPfb0EWFNOuIJr9i2TwdN9eW/2ZMo1bPuwe4ttPEIBssfIC02dn2KD1RTqM

     

       137
       +
           1l+L97vVFk7CoSJZf5rLeysLVyUeGdDcoEcRA6fKhfB/55h+iqrZNvySX1HrR6on

     

       138
       +
           PQcxDRPJD7f9rMsTzVl3DOxzvXAU3lIcZtPZps97IwXceAAh2e1kZNNv/cxj

     

       139
       +
           -----END RSA PRIVATE KEY-----

     

       140
       +
         '';

     

       141
       +
         "acme-v01.api.letsencrypt.org".cert = builtins.toFile "acme-v01.api.letsencrypt.org.cert" ''

     

       142
       +
           -----BEGIN CERTIFICATE-----

     

       143
       +
           MIIEtDCCApwCAgKaMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNVBAMMC1NuYWtlb2ls

     

       144
       +
           IENBMCAXDTE4MDcxMjAwMjIxN1oYDzIxMTgwNjE4MDAyMjE3WjAnMSUwIwYDVQQD

     

       145
       +
           DBxhY21lLXYwMS5hcGkubGV0c2VuY3J5cHQub3JnMIICIjANBgkqhkiG9w0BAQEF

     

       146
       +
           AAOCAg8AMIICCgKCAgEAvG+sL4q0VkgSClBTn4NkPiUrtXx5oLyZ+CCM1jrQx/xo

     

       147
       +
           tUt5X2S4/7vMnAK/yRLsR7R2PhXO8CZPqJ7B6OfAgaDTgvipJkZYPZQSMP3KOinM

     

       148
       +
           3WJLssqKh7/HOxZIf0iyUXewrnX5eTAo/CLsUnhBjBD7E99nmQz/leLWSl82sSYD

     

       149
       +
           kO3nUk3/1qJZA8iddb4uH0IEQWcNKev3WoQQzwiVrXBiftlRQOJy5JJXm5m8229M

     

       150
       +
           CpMA1AUWmpdu6sl3/gFFdsDhUFq/a7LFrVyaUCMRIHg9szAB7ZFkixr9umQs8jKw

     

       151
       +
           uo983JHB11h2SirwgfIzHHmyhaWhCt22ucTwEXGhq63LtrzZvLsfP8Ql5S+AuqGT

     

       152
       +
           H0v8meuc784leAjulBZjkpuIFwDnVv9+YeUEbqJeo1hSHrILddora3nkH4E2dJWm

     

       153
       +
           LpqpiPr++GRi+BNgYKW/BQLTJ7C6v+vUs+kdPgYJH5z7oP6f0YZkT0Wkubp/UEz7

     

       154
       +
           UV2dfjz57d77DYx5rFWGYzJriWR/xltgL1zDpjwjwG1FDpRqwlyYbBFpjQhxI+X0

     

       155
       +
           aT98m6fCzBDQHDb/+JgvsjTHh6OZatahFAwzFIEfrceDv1BG8sBWIaZGhLzYiWQx

     

       156
       +
           afl8oXbWv1T6I1jpsTlCdCSkWzaJb4ZjxI9Ga1ynVu8F16+GR2a71wKWu7UbZQsC

     

       157
       +
           AwEAATANBgkqhkiG9w0BAQsFAAOCAgEAzeGlFMz1Bo+bbpZDQ60HLdw7qDp3SPJi

     

       158
       +
           x5LYG860yzbh9ghvyc59MIm5E6vB140LRJAs+Xo6VdVSTC4jUA2kI9k1BQsbZKds

     

       159
       +
           XT0RqA7HkqcLS3t3JWFkkKbCshMGZTSZ//hpbaUG1qEAfUfmZw1lAxqSa0kqavbP

     

       160
       +
           awf7k8qHbqcj7WORCdH7fjKAjntEQwIpl1GEkAdCSghOJz2/o9aWmiGZt27OM/sG

     

       161
       +
           MLSrcmL3QBElCjOxg14P8rnsmZ+VEp6MO93otoJ4dJL7fN7vTIh5ThbS384at/4l

     

       162
       +
           4KK/y7XctUzAtWzhnodjk/NSgrrGX2kseOGOWEM1sZc9xtinHH2tpOMqtLVOkgHD

     

       163
       +
           Lul+TArqgqeoOdEM/9OL64kgOrO/JzxBq+egLUi4wgAul2wmtecKZK1dkwYZHeqW

     

       164
       +
           74i55yeBp+TTomnPr0ZBns6xKFYldJVzC34OB+2YVDxe8y9XtWtuQOxFw0LQHhNb

     

       165
       +
           zy5aBverWzZFwiIIjJoVHTQq848uKBJec0YILfMinS1Wjif4xqW/IMfi+GFS0oka

     

       166
       +
           sKCGNE/8ur9u/Jm6cbto3f2dtV8/vkhiITQgwzM2jalyuVJ9jyPxG7EvbTvZORgw

     

       167
       +
           pRvBRTd4/eE7I1L+UDe6x8EjR/MrqfF9FWVGOZo4vPTyNbrSWYBh6s9kYy56ds1l

     

       168
       +
           IRxst1BXEfI=

     

       169
       +
           -----END CERTIFICATE-----

     

       170
       +
         '';

     

       171
       +
         "letsencrypt.org".key = builtins.toFile "letsencrypt.org.key" ''

     

       172
       +
           -----BEGIN RSA PRIVATE KEY-----

     

       173
       +
           MIIJKAIBAAKCAgEAwPvhlwemgPi6919sSD7Pz6l6CRfU1G/fDc0AvsMN/nTmiGND

     

       174
       +
           pqn9ef1CA+RtLtOuPc1LLyEovcfu75/V+6KSgO4k19E2CrFCFwjEOWDGF4DgclT3

     

       175
       +
           751WGmFJgzPEfZfhbOrmQfQau86KxAtNZVp9FxcKbuLyQ/sNNxfNMB+7IHbVhwvz

     

       176
       +
           VcndHpYZEP6kdnwvNLP22bouX5q3avxWStln01uZ0BfUm4XwxaUNIU7t0Dv56FK9

     

       177
       +
           C9hW9AZae0do0BJBWRF7xSwLeDJqn9uZz+sX0X/tIaaSQSBuZySj0He5ZKzdUO0t

     

       178
       +
           px2xTS2Brl3Y2BOJaOE98HubWvdKoslLt4X2rVrMxGa86SmFzcyDL1RSowcP/ruy

     

       179
       +
           y555l7pepL5s4cmMgRBBXj5tXhqUTVOn5WO+JClLk+rtvtAT4rogJmMqEKmMw2t7

     

       180
       +
           LNy1W9ri/378QG/i3AGaLIL/7GsPbuRO51Sdti4QMVe2zNFze72mzNmj1SXokWy7

     

       181
       +
           +ZvjUMp55oEjRRsTPUZdNOEHJWy6Os2znuqL7ZpIHCxBG8FKnkCViXRJqAA8bzcE

     

       182
       +
           hR+pLamLIOHlv4kdzJ6phHkSvK68qvbRReUmOjJgSupVBI9jhK+fHay/UWR4zfJQ

     

       183
       +
           ed99H8ZOoiXlrLCVs+VPDynUUKrzF1nYyolNzi/NS4e4AbnfWgyC5JKRpjUCAwEA

     

       184
       +
           AQKCAgB0fNYL+zM3MGxy+2d6KGf6GnuuV3NBlBGY3ACyJT0iNmAdPYXNaVi2tPeP

     

       185
       +
           L+fz1xSa+3uBhEt6Wt/QRrO8g8JZDuawWvl69MpG6yS+2bpY35MbkExkl50sqULd

     

       186
       +
           bncRtIb+3r+EWht099RtR8E9B6TwNhk3G8hO3pB4i+ZwQQcMLo7vSHhmdUYCu2mA

     

       187
       +
           B6UwW/+GmYbMoARz8wj6DDzuS1LPksBCis/r3KqcMue9Dk6gXkOYR7ETIFBEVj1x

     

       188
       +
           ooYS6qIFaHdEajS2JgCUY9LxXR/wdn6lzE0GANSDb+tt34bJzUp+Gdxvvo2SX4Ci

     

       189
       +
           xsUokIpmA2gG7CW3gAPORSFuMu/VYZtvt+owNYlODXRPuGi/eLDknFRB/S4Nx0J0

     

       190
       +
           WZZq5uTgJdQainyKYtDZALia5X4cc5I2hNetCorG9jNZIsSunbIAG+htx2FI3eqK

     

       191
       +
           jwOUiHE8SCZ6YdXoDQjg2w+g8jeB23eqkPyzunpZphYiKay7VFeLwQEMC2a791ln

     

       192
       +
           +MbHhhpRAc1uAoU2reB2fxKyaPlOfAWVMgUOGlgpVOuEVeMoc1CwjajaFztGG7fI

     

       193
       +
           8EHNoyAftCdXnTaLZk2KZnnIDHHzFXR62TE1GJFD1fdI1pHAloCbgA4h+Dtwm1Uu

     

       194
       +
           iAEEfvVU/E5wbtAzv6pY32+OKX5kyHAbM5/e918B8ZxmHG1J9QKCAQEA6FwxsRG3

     

       195
       +
           526NnZak540yboht5kV12BNBChjmARv/XgZ7o1VsfwjaosErMvasUBcHDEYOC/oE

     

       196
       +
           ZgPAyrMVsYm0xe/5FSIFLJVeYXTr0rmCNhVtBCHx3IS94BCXreNnz0qoEWnb5E09

     

       197
       +
           Z1O42D0yGcLXklg6QaJfb7EdHh03F3dSVMHyDR3JlAQHRINeuP6LlQpbvRD3adH5

     

       198
       +
           QWr2M3k+Stuq2OJdG7eUS1dreCxRShLuDjDhiZekdl/TB3LM0prOaWrKBrryN2g6

     

       199
       +
           mjiasH6I5zRD3LQP5zg57Thb8afHqA4Fb85Frt6ltfFlPTIoxXZ5drVhmRWfXXnQ

     

       200
       +
           POnj8T+w4zVjvwKCAQEA1J4ivyFkCL0JTSY3/PtwAQvBBj3GazzU6P+urWeH74Vh

     

       201
       +
           WK17Ae40iOUHGyy80Db/fVY4VLQTpxvAeG91Gj5Nd/AucXJgOrisabcEz6N/xUs5

     

       202
       +
           sjJNgXuNKTAgjYBu0bqLXxgZj43zT8JhA6KW7RuYU0PtHMRragz4RbK9NWDaVvJb

     

       203
       +
           xSR5QoVLS00PerUa0SfupEYKCrlSTP6FOM5YNkCuSMt7X6/m9cR0WwVINKvUQBiT

     

       204
       +
           ObrN+KeBmF9awpQQnQOq/GbCl3kf6VyPQqYFhdrWSg52w33c2tBVYrtHJpeXGcin

     

       205
       +
           akw4KKcj4rdU2qxMuuRiD5paagshbLdGsYMTbSzjCwKCAQEAh89DGAyUIcfDLAWd

     

       206
       +
           st0bSfGh0oJsw3NVg3JUFPfpRWqiny/Rr1pcd95RwoLc6h7bdrgHg8aJBZtR9ue/

     

       207
       +
           WTp0l3CQdGKjBZD0TiAJqevViIjzZAP3Gn3XgPwRu4f75/Pp0eu+o2zl49vSYUk7

     

       208
       +
           XEU+vIGm4y/leiHaM/y9c5DBZVrKgBIV/NZx7QCfv56/tMgOIK6m/YnFlw/OgP1v

     

       209
       +
           hE9qR0PfSdD98x9QaDf290WjMFYvrL0eWjXd4S+fOcVTude55z8jTXE1N2i4OUpr

     

       210
       +
           +D7bH0d7OBjr+pQDYXZAQyCW2ueEYRYvYu2Jz7/ehrOdgN25AsHZmMgXB1NpcFta

     

       211
       +
           pyJQfwKCAQByoPMwworRH0GVg4Zp8RFYrwKZH9MK29gZ6kc9m/Sw0OND0PvhdZCD

     

       212
       +
           QZ8MKpl9VDl4VHS4TgHOdWrWQ5kJ1g8kG6yeY0C4R/pEYHTKkWaAcucfSHl61qar

     

       213
       +
           TxQt1dFpZz5evXqCZ9CG7tApCo5+NQNx2MxMVyVmHqn3wb66uYXdnHqXlet+Tqji

     

       214
       +
           ZyByUpOrsfC6RjyBvZo+gnZGwxDR5xtPiczxML+/PvRQYk+kfgNHrzgoxqrnZT+8

     

       215
       +
           a6ReBT/TtzeHLsu4qIfo44slLqcJnIstkBC9ouzgV7PBMCDTEKVZNFH2QDOCz2HM

     

       216
       +
           iHTKFFyl4h1wNhKK24dguor1hyqBENMzAoIBAAQvQHwRWIVlfCMRI170Ls8AXB9Z

     

       217
       +
           MMdZJ37bh6kmJpkV3+HB1ZkKwofHKR9h/3xLt5iYXzqT+/zA4EAsFFs1A93+tkzh

     

       218
       +
           yPrN5iTSJicophZSlA4ObX1hMkgshvl7ZB1fRM5WyiszBOfm8W7eAxaK8nY2oAoP

     

       219
       +
           tI7rioo6CFBNMCGbOl4gEX6YJ4OsVSm+efCRSDDw+3HW8H2YgqufBzAULk1Jcj5t

     

       220
       +
           ZvraXpC5qZ92VtsH0cGA1ovNDAmoOV4AAvtZVpLQsXwaphad/Fbn/ItGrrluvvFC

     

       221
       +
           HuldRzYtl/AQtoirK86LTY3aAmcwVFuiYvDQMzjzkJvVMmRCFZBcUIaz2oI=

     

       222
       +
           -----END RSA PRIVATE KEY-----

     

       223
       +
         '';

     

       224
       +
         "letsencrypt.org".cert = builtins.toFile "letsencrypt.org.cert" ''

     

       225
       +
           -----BEGIN CERTIFICATE-----

     

       226
       +
           MIIEpzCCAo8CAgKaMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNVBAMMC1NuYWtlb2ls

     

       227
       +
           IENBMCAXDTE4MDcxMjAwMjIxOVoYDzIxMTgwNjE4MDAyMjE5WjAaMRgwFgYDVQQD

     

       228
       +
           DA9sZXRzZW5jcnlwdC5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC

     

       229
       +
           AQDA++GXB6aA+Lr3X2xIPs/PqXoJF9TUb98NzQC+ww3+dOaIY0Omqf15/UID5G0u

     

       230
       +
           0649zUsvISi9x+7vn9X7opKA7iTX0TYKsUIXCMQ5YMYXgOByVPfvnVYaYUmDM8R9

     

       231
       +
           l+Fs6uZB9Bq7zorEC01lWn0XFwpu4vJD+w03F80wH7sgdtWHC/NVyd0elhkQ/qR2

     

       232
       +
           fC80s/bZui5fmrdq/FZK2WfTW5nQF9SbhfDFpQ0hTu3QO/noUr0L2Fb0Blp7R2jQ

     

       233
       +
           EkFZEXvFLAt4Mmqf25nP6xfRf+0hppJBIG5nJKPQd7lkrN1Q7S2nHbFNLYGuXdjY

     

       234
       +
           E4lo4T3we5ta90qiyUu3hfatWszEZrzpKYXNzIMvVFKjBw/+u7LLnnmXul6kvmzh

     

       235
       +
           yYyBEEFePm1eGpRNU6flY74kKUuT6u2+0BPiuiAmYyoQqYzDa3ss3LVb2uL/fvxA

     

       236
       +
           b+LcAZosgv/saw9u5E7nVJ22LhAxV7bM0XN7vabM2aPVJeiRbLv5m+NQynnmgSNF

     

       237
       +
           GxM9Rl004QclbLo6zbOe6ovtmkgcLEEbwUqeQJWJdEmoADxvNwSFH6ktqYsg4eW/

     

       238
       +
           iR3MnqmEeRK8rryq9tFF5SY6MmBK6lUEj2OEr58drL9RZHjN8lB5330fxk6iJeWs

     

       239
       +
           sJWz5U8PKdRQqvMXWdjKiU3OL81Lh7gBud9aDILkkpGmNQIDAQABMA0GCSqGSIb3

     

       240
       +
           DQEBCwUAA4ICAQAkx3jcryukAuYP7PQxMy3LElOl65ZFVqxDtTDlr7DvAkWJzVCb

     

       241
       +
           g08L6Tu+K0rKh2RbG/PqS0+8/jBgc4IwSOPfDDAX+sinfj0kwXG34WMzB0G3fQzU

     

       242
       +
           2BMplJDOaBcNqHG8pLP1BG+9HAtR/RHe9p2Jw8LG2qmZs6uemPT/nCTNoyIL4oxh

     

       243
       +
           UncjETV4ayCHDKD1XA7/icgddYsnfLQHWuIMuCrmQCHo0uQAd7qVHfUWZ+gcsZx0

     

       244
       +
           jTNCcaI8OTS2S65Bjaq2HaM7GMcUYNUD2vSyNQeQbha4ZeyZ9bPyFzznPMmrPXQe

     

       245
       +
           MJdkbJ009RQIG9As79En4m+l+/6zrdx4DNdROqaL6YNiSebWMnuFHpMW/rCnhrT/

     

       246
       +
           HYadijHOiJJGj9tWSdC4XJs7fvZW3crMPUYxpOvl01xW2ZlgaekILi1FAjSMQVoV

     

       247
       +
           NhWstdGCKJdthJqLL5MtNdfgihKcmgkJqKFXTkPv7sgAQCopu6X+S+srCgn856Lv

     

       248
       +
           21haRWZa8Ml+E0L/ticT8Fd8Luysc6K9TJ4mT8ENC5ywvgDlEkwBD3yvINXm5lg1

     

       249
       +
           xOIxv/Ye5gFk1knuM7OzpUFBrXUHdVVxflCUqNAhFPbcXwjgEQ+A+S5B0vI6Ohue

     

       250
       +
           ZnR/wuiou6Y+Yzh8XfqL/3H18mGDdjyMXI1B6l4Judk000UVyr46cnI7mw==

     

       251
       +
           -----END CERTIFICATE-----

     

       252
       +
         '';

     

       253
       +
       }

+1 -1

nixos/tests/common/resolver.nix

···

       18
        
             defining this option needs to be explicitly imported.

     

       19
        
       

     

       20
        
             The reason this option exists is for the

     

       21
       -
             <filename>nixos/tests/common/letsencrypt.nix</filename> module, which

     

       22
        
             needs that option to disable the resolver once the user has set its own

     

       23
        
             resolver.

     

       24
        
           '';

···

       18
        
             defining this option needs to be explicitly imported.

     

       19
        
       

     

       20
        
             The reason this option exists is for the

     

       21
       +
             <filename>nixos/tests/common/letsencrypt</filename> module, which

     

       22
        
             needs that option to disable the resolver once the user has set its own

     

       23
        
             resolver.

     

       24
        
           '';