sys/pki/certs.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

{
  config.local.pki.ca = {
    home = {
      crl = ./public/home-crl.pem;
      cert = ./public/home-ca.pem;
      issuer = "root";

      leaves = {
        user-firefox.cert = ./public/home-user-firefox.pem;
      };
    };

    mail = {
      crl = ./public/mail-crl.pem;
      cert = ./public/mail-ca.pem;
      issuer = "root";

      leaves = {
        kiev.cert = ./public/mail-kiev.pem;
        larsa.cert = ./public/mail-larsa.pem;
      };
    };

    root = {
      crl = ./public/root-crl.pem;
      cert = ./public/root-ca.pem;
      issuer = null;
      leaves = { };
    };
  };
}