From 0fa5efb1ccc638652c829bebd75b774ccd6025b7 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Sat, 27 Jul 2024 15:52:29 -0600
Subject: sys/pki: add existing leaf certs: [lustrated]

---
 sys/pki/ca.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'sys/pki/ca.nix')

diff --git a/sys/pki/ca.nix b/sys/pki/ca.nix
index 2b74a89..0a0d3c2 100644
--- a/sys/pki/ca.nix
+++ b/sys/pki/ca.nix
@@ -93,12 +93,20 @@ in
       crl = ./public/home-crl.pem;
       cert = ./public/home-ca.pem;
       issuer = "root";
+
+      leaves = {
+        user-firefox.cert = ./public/home-user-firefox.pem;
+      };
     };
 
     mail = {
       crl = ./public/mail-crl.pem;
       cert = ./public/mail-ca.pem;
       issuer = "root";
+
+      leaves = {
+        kiev.cert = ./public/mail-kiev.pem;
+      };
     };
 
     root = {
-- 
cgit v1.2.3