SSL Certificates: Difference between revisions

Serif (talk | contribs)
Created page.
 
Lapo (talk | contribs)
Fix certificateFiles format, verified as workingjust now by me, found here: https://www.reddit.com/r/NixOS/comments/1bjn4g0/comment/mn5rlpb/
 
(8 intermediate revisions by 5 users not shown)
Line 1: Line 1:
To install SSL Certificates, use one of the following two options:
TLS/SSL Certificates, also called [[wikipedia:Public_key_certificate|public key certificates]], are files that verify the authenticity of a website or other online entity. They contain the public key of the certificate holder and are issued by trusted certificate authorities to enable secure, encrypted communications between clients and servers.


```nix
== Obtain new certificates ==


security.pki.certificates = [ "<insert_certificate_text_here>" ]
See [[ACME]].


security.pki.certificateFiles = [ "/path/to/cert1" "/path/to/cert2" ]
== Installation ==


```
To add additional trusted root certificates, use one or both of the following options:<syntaxhighlight lang="nix">
security.pki.certificates = [ "<insert_certificate_text_here>" ];
 
security.pki.certificateFiles = [
  /path/to/cert1
  /path/to/cert2
];
</syntaxhighlight>


The first option is a list of strings, whereas the second is a list of filesystem paths.
The first option is a list of strings, whereas the second is a list of filesystem paths.
[[Category:Security]]
[[Category:Networking]]