From 2a1246a75e438d93da8d53715069c9b6f24ab649 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Sat, 2 Aug 2025 20:48:07 -0600
Subject: sys/hardware/athena: trust the national eSignature root CA
 system-wide

---
 sys/hardware/athena.nix | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'sys/hardware/athena.nix')

diff --git a/sys/hardware/athena.nix b/sys/hardware/athena.nix
index 9df7aac..06d10b3 100644
--- a/sys/hardware/athena.nix
+++ b/sys/hardware/athena.nix
@@ -28,6 +28,9 @@ in
       systemPackages = [ athena.ase-pkcs11 ];
     };
 
+    #FIXME: Extremadamente peligroso si BCCR o MICITT caen, investigar política nacional de root CA
+    security.pki.certificateFiles = [ "${athena.bccr-cacerts}/root-ca.pem" ];
+
     services = {
       pcscd.enable = true;
 
-- 
cgit v1.2.3