[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PATCH 1/2] gnu: tlsdate: Use the system provided certificate store.
From: |
ng0 |
Subject: |
[PATCH 1/2] gnu: tlsdate: Use the system provided certificate store. |
Date: |
Mon, 5 Dec 2016 18:31:00 +0000 |
* gnu/packages/ntp.scm (tlsdate)[arguments]: Configure with unprivileged user
and group.
[arguments]: Build with the system provided certificates in a new phase.
---
gnu/packages/ntp.scm | 14 ++++++++++++--
1 file changed, 12 insertions(+), 2 deletions(-)
diff --git a/gnu/packages/ntp.scm b/gnu/packages/ntp.scm
index 13781fbda..45f334b57 100644
--- a/gnu/packages/ntp.scm
+++ b/gnu/packages/ntp.scm
@@ -4,6 +4,7 @@
;;; Copyright © 2015 Taylan Ulrich Bayırlı/Kammer <address@hidden>
;;; Copyright © 2015 Ludovic Courtès <address@hidden>
;;; Copyright © 2016 Efraim Flashner <address@hidden>
+;;; Copyright © 2016 ng0 <address@hidden>
;;;
;;; This file is part of GNU Guix.
;;;
@@ -134,8 +135,17 @@ minimalist than ntpd.")
(file-name (string-append name "-" version "-checkout"))))
(build-system gnu-build-system)
(arguments
- '(#:phases (modify-phases %standard-phases
- (add-after 'unpack 'autogen
+ '(#:configure-flags '("--with-unpriv-user=tlsdate"
+ "--with-unpriv-group=tlsdate")
+ #:phases (modify-phases %standard-phases
+ (add-after 'unpack 'set-cert-path
+ ;; Use the system certificate store, not the
+ ;; application bundled certificates.
+ (lambda _
+ (substitute* "Makefile.am"
+
(("$(sysconfdir)/tlsdate/ca-roots/tlsdate-ca-roots.conf")
+ "/etc/ssl/certs/ca-certificates.crt"))))
+ (add-after 'set-cert-path 'autogen
(lambda _
;; The ancestor of 'SOURCE_DATE_EPOCH'; it contains the
;; date that is recorded in binaries. It must be a
--
2.11.0
- [no subject], ng0, 2016/12/05
- [PATCH 2/2] services: Add tlsdate-service., ng0, 2016/12/05
- Re: [PATCH 2/2] services: Add tlsdate-service., ng0, 2016/12/05
- v2 tlsdate-service, ng0, 2016/12/05
- [PATCH 1/2] gnu: tlsdate: Use the system provided certificate store.,
ng0 <=
- [PATCH 2/2] services: Add tlsdate-service., ng0, 2016/12/05
- Re: [PATCH 2/2] services: Add tlsdate-service., Chris Marusich, 2016/12/07
- Re: [PATCH 2/2] services: Add tlsdate-service., ng0, 2016/12/07
- Re: [PATCH 2/2] services: Add tlsdate-service., Chris Marusich, 2016/12/09
[PATCH 1/2] gnu: tlsdate: Use the system provided certificate store., ng0, 2016/12/05