Commit f2d48986 authored by Ricardo M. Correia's avatar Ricardo M. Correia Committed by Joerg Thalheim
Browse files

openntpd: fix constraints feature on NixOS 

The OpenNTPD constraints feature requires a valid chain of SSL
certificates, but the default path in openntpd didn't match the one in
NixOS.

Unfortunately the configured certificate path becomes hardcoded into the
binary, so this feature will likely still fail on other
distributions/operating systems, unless the path coincides with the
NixOS path or the user sets up a symlink.

(cherry picked from commit f7616c4f)
parent 8c6dbd72

pkgs/tools/networking/openntpd/default.nix

+1 −0
Original line number Diff line number Diff line
@@ -17,6 +17,7 @@ stdenv.mkDerivation rec { 
    "--with-privsep-user=${privsepUser}"

    "--sysconfdir=/etc"

    "--localstatedir=/var"

    "--with-cacert=/etc/ssl/certs/ca-certificates.crt"

  ];



  buildInputs = [ libressl ];