chore: update nixpkgs for cacert 3.131.1, drop emSign stopgap #112

Merged
aaron merged 2 commits from chore/remove-emudhra-stopgap into main 2026-10-25 15:06:52 +01:00
Showing only changes of commit 66e738c792 - Show all commits
-5
View File
@@ -17,9 +17,4 @@ in
security.pki.certificates = [
caddyRootCA # self-signed pki ca for my home-lab
];
# Temporary: eMudhra intermediates under this root have recoverable private
# keys (https://bugzilla.mozilla.org/show_bug.cgi?id=2083449). Remove once
# nixos-unstable ships cacert >= 3.131.1 (nixpkgs f903b88).
security.pki.caCertificateBlacklist = [ "emSign ECC Root CA - G3" ];
}