~ruther/guix-local: services: tor: Add nss-certs.

b4b4be47cba3066d3ab5de7dbc6cb0ee3803e237 — Trevor Arjeski 7 months ago c7b7089

services: tor: Add nss-certs.

When using a tor-transport-plugin, namely a webtunnel with lyrebird, it is
necessary to have access to ssl certs to establish a connection to the bridge
over https.

* gnu/services/networking.scm (tor-shepherd-service): add nss-certs
file-sytem-mapping

Change-Id: Ifb7488d406cc6300eb6ac95e7dc0dfef0ff571db
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Modified-by: Ludovic Courtès <ludo@gnu.org>

patch browse .tar.gz

1 files changed, 8 insertions(+), 1 deletions(-)

M gnu/services/networking.scm

M gnu/services/networking.scm => gnu/services/networking.scm +8 -1

@@ 64,6 64,7 @@
   #:use-module (gnu packages usb-modeswitch)
   #:use-module (gnu packages messaging)
   #:use-module (gnu packages networking)
+  #:use-module (gnu packages nss)
   #:use-module (gnu packages ntp)
   #:use-module (gnu packages gnome)
   #:use-module (gnu packages ipfs)


@@ 1307,7 1308,13 @@ HiddenServicePort ~a ~a~%"
                                     (writable? #t))
                                    (file-system-mapping
                                     (source torrc)
-                                    (target source)))
+                                    (target source))
+
+                                   ;; Transport plugins like the lyrebird
+                                   ;; webtunnel need X.509 certificates.
+                                   (file-system-mapping
+                                     (source (file-append nss-certs "/etc/ssl/certs"))
+                                     (target "/etc/ssl/certs")))
                              (map (lambda (plugin)
 				    (file-system-mapping
 				     (source (tor-plugin-program plugin))