46 lines
1.2 KiB
Nix
46 lines
1.2 KiB
Nix
{ lib, stdenv, fetchFromGitHub, openssl, makeWrapper, runtimeShell }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "easyrsa";
|
|
version = "3.1.1";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "OpenVPN";
|
|
repo = "easy-rsa";
|
|
rev = "v${version}";
|
|
sha256 = "sha256-errF7bNhX3oYEMDwB/B1W5hBWhOD+GCgET3lA121PHc=";
|
|
};
|
|
|
|
nativeBuildInputs = [ makeWrapper ];
|
|
|
|
installPhase = ''
|
|
mkdir -p $out/share/easy-rsa
|
|
cp -r easyrsa3/{*.cnf,x509-types,vars.example} $out/share/easy-rsa
|
|
install -D -m755 easyrsa3/easyrsa $out/bin/easyrsa
|
|
|
|
substituteInPlace $out/bin/easyrsa \
|
|
--replace /usr/ $out/ \
|
|
--replace '~VER~' '${version}' \
|
|
--replace '~GITHEAD~' 'v${version}' \
|
|
--replace '~DATE~' '1970-01-01'
|
|
|
|
# Wrap it with the correct OpenSSL binary.
|
|
wrapProgram $out/bin/easyrsa \
|
|
--set EASYRSA_OPENSSL ${openssl.bin}/bin/openssl
|
|
|
|
# Helper utility
|
|
cat > $out/bin/easyrsa-init <<EOF
|
|
#!${runtimeShell} -e
|
|
cp -r $out/share/easy-rsa/* .
|
|
EOF
|
|
chmod +x $out/bin/easyrsa-init
|
|
'';
|
|
|
|
meta = with lib; {
|
|
description = "Simple shell based CA utility";
|
|
homepage = "https://openvpn.net/";
|
|
license = licenses.gpl2;
|
|
maintainers = [ maintainers.offline maintainers.numinit ];
|
|
platforms = platforms.unix;
|
|
};
|
|
}
|