From 9010a54874fa52fbeab95a5952dbaa420fe79331 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Sun, 28 Jul 2024 00:18:39 -0600
Subject: sys/pki: move certificate list to certs.nix

---
 sys/pki/certs.nix | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 sys/pki/certs.nix

(limited to 'sys/pki/certs.nix')

diff --git a/sys/pki/certs.nix b/sys/pki/certs.nix
new file mode 100644
index 0000000..c191fc5
--- /dev/null
+++ b/sys/pki/certs.nix
@@ -0,0 +1,31 @@
+{
+  config.local.pki.ca = {
+    home = {
+      crl = ./public/home-crl.pem;
+      cert = ./public/home-ca.pem;
+      issuer = "root";
+
+      leaves = {
+        user-firefox.cert = ./public/home-user-firefox.pem;
+      };
+    };
+
+    mail = {
+      crl = ./public/mail-crl.pem;
+      cert = ./public/mail-ca.pem;
+      issuer = "root";
+
+      leaves = {
+        kiev.cert = ./public/mail-kiev.pem;
+        larsa.cert = ./public/mail-larsa.pem;
+      };
+    };
+
+    root = {
+      crl = ./public/root-crl.pem;
+      cert = ./public/root-ca.pem;
+      issuer = null;
+      leaves = { };
+    };
+  };
+}
-- 
cgit v1.2.3