diff options
| author | Trevor Arjeski <tmarjeski@gmail.com> | 2025-09-29 09:18:26 +0300 |
|---|---|---|
| committer | Ludovic Courtès <ludo@gnu.org> | 2025-09-29 15:28:08 +0200 |
| commit | b4b4be47cba3066d3ab5de7dbc6cb0ee3803e237 (patch) | |
| tree | 6f352fad9f88510696f956813495e90bf4806e65 | |
| parent | c7b7089963f2121e98e43bbf0838de305aad3b4b (diff) | |
services: tor: Add nss-certs.
When using a tor-transport-plugin, namely a webtunnel with lyrebird, it is
necessary to have access to ssl certs to establish a connection to the bridge
over https.
* gnu/services/networking.scm (tor-shepherd-service): add nss-certs
file-sytem-mapping
Change-Id: Ifb7488d406cc6300eb6ac95e7dc0dfef0ff571db
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Modified-by: Ludovic Courtès <ludo@gnu.org>
| -rw-r--r-- | gnu/services/networking.scm | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/gnu/services/networking.scm b/gnu/services/networking.scm index 646c8620409..c15adc23baa 100644 --- a/gnu/services/networking.scm +++ b/gnu/services/networking.scm @@ -64,6 +64,7 @@ #:use-module (gnu packages usb-modeswitch) #:use-module (gnu packages messaging) #:use-module (gnu packages networking) + #:use-module (gnu packages nss) #:use-module (gnu packages ntp) #:use-module (gnu packages gnome) #:use-module (gnu packages ipfs) @@ -1307,7 +1308,13 @@ HiddenServicePort ~a ~a~%" (writable? #t)) (file-system-mapping (source torrc) - (target source))) + (target source)) + + ;; Transport plugins like the lyrebird + ;; webtunnel need X.509 certificates. + (file-system-mapping + (source (file-append nss-certs "/etc/ssl/certs")) + (target "/etc/ssl/certs"))) (map (lambda (plugin) (file-system-mapping (source (tor-plugin-program plugin)) |