Unverified Commit ab99231a authored by Lily Foster's avatar Lily Foster
Browse files

prefetch-yarn-deps: add cacert to provide certificates during fetches 

Ideally fetch-yarn-deps could do like some other fetchers and support
using SSL_CERT_FILE if it exists and also only verify integrity on FOD
hash unless using an empty/test hash.

But this should keep at least the same semantics as before the recent
Node.js change to stop using the built-in certificate store in favor of
the system one (which does not exist by default in the build sandbox).
parent e4ad9895

pkgs/build-support/node/fetch-yarn-deps/default.nix

+1 −1
Original line number Diff line number Diff line
@@ -62,7 +62,7 @@ in { 
      dontUnpack = src == null;

      dontInstall = true;



      nativeBuildInputs = [ prefetch-yarn-deps ];

      nativeBuildInputs = [ prefetch-yarn-deps cacert ];

      GIT_SSL_CAINFO = "${cacert}/etc/ssl/certs/ca-bundle.crt";



      buildPhase = ''