nixpkgs-custom/nixos/modules/security
Nikolay Amiantov c3799d33d3 acme service: generate a CA for self-signed certificate
This is needed because simp_le expects two certificates in fullchain.pem, leading to error:

> Not enough PEM encoded messages were found in fullchain.pem; at least 2 were expected, found 1.

We now create a CA and sign the key with it instead, providing correct fullchain.pem.

Also cleanup service a bit -- use PATH and a private temporary directory (which
is more suitable).

(cherry picked from commit 4fc0b4edca7e48755538d4436b98baff5901a752)
2018-04-17 12:54:22 +03:00
..
wrappers nixos/security-wrapper: Fix cross-compilation 2018-01-09 11:25:19 -05:00
acme.nix acme service: generate a CA for self-signed certificate 2018-04-17 12:54:22 +03:00
acme.xml nixos/acme: remove doc note about restarting nginx 2017-10-30 13:51:35 -04:00
apparmor-suid.nix Getting rid of the var indirection and using a bin path instead 2017-01-29 04:11:01 -06:00
apparmor.nix apparmor: support for lxc profiles 2017-01-10 23:01:03 +01:00
audit.nix audit module: only enable service if kernel has audit (#19569) 2016-10-15 16:03:41 +02:00
auditd.nix nixos/auditd: break ordering cycle (#27577) 2017-08-01 20:45:01 +01:00
ca.nix cacerts: refactor, add blacklist option 2016-10-09 02:00:18 +02:00
chromium-suid-sandbox.nix nixos/chromium-suid-sandbox: remove reference to grsecurity 2017-09-02 20:35:28 +02:00
dhparams.nix dhparams module: condition on enable option (#23661) 2017-03-17 01:56:13 +01:00
duosec.nix More derp 2017-01-29 05:33:56 -06:00
hidepid.nix hidepid: polkit and systemd-logind compatibility 2016-12-07 01:12:05 +01:00
hidepid.xml hidepid module: detailed description to external doc 2016-09-15 15:36:03 +02:00
lock-kernel-modules.nix nixos/lock-kernel-modules: fix deferred fileSystem mounts 2017-09-22 23:55:04 +02:00
oath.nix config.security.oath: new module 2016-02-25 13:52:45 +00:00
pam.nix tree-wide: autorename gnome packages to use dashes 2018-02-25 17:41:16 +01:00
pam_mount.nix pam_mount module: integrate pam_mount into PAM of NixOS 2015-07-04 23:42:31 +02:00
pam_usb.nix security.pam.usb: link to wiki on github.com 2017-09-28 16:00:28 +02:00
polkit.nix network-link-*.service: Set stopIfChanged = false 2017-04-04 15:13:49 +02:00
prey.nix nixos: fix some types 2015-09-18 18:48:50 +00:00
rngd.nix rngd: update modalias to match cpu type 2016-09-17 18:36:57 -07:00
rtkit.nix rtkit: Update from 0.10 to 0.11 2014-04-21 23:22:10 +02:00
sudo.nix nixos/security: fix description of sudo.wheelNeedsPassword 2018-03-18 12:29:00 +00:00