diff options
| author | Alejandro Soto <alejandro@34project.org> | 2025-08-02 20:48:07 -0600 |
|---|---|---|
| committer | Alejandro Soto <alejandro@34project.org> | 2025-08-02 20:48:07 -0600 |
| commit | 2a1246a75e438d93da8d53715069c9b6f24ab649 (patch) | |
| tree | a98c97bb4a1427e26d76d8a65935d798768b084e /sys/hardware/athena.nix | |
| parent | 789a5a9563f1c3e5270205d39d9eece50909b739 (diff) | |
sys/hardware/athena: trust the national eSignature root CA system-wide
Diffstat (limited to 'sys/hardware/athena.nix')
| -rw-r--r-- | sys/hardware/athena.nix | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sys/hardware/athena.nix b/sys/hardware/athena.nix index 9df7aac..06d10b3 100644 --- a/sys/hardware/athena.nix +++ b/sys/hardware/athena.nix @@ -28,6 +28,9 @@ in systemPackages = [ athena.ase-pkcs11 ]; }; + #FIXME: Extremadamente peligroso si BCCR o MICITT caen, investigar política nacional de root CA + security.pki.certificateFiles = [ "${athena.bccr-cacerts}/root-ca.pem" ]; + services = { pcscd.enable = true; |