How do you manage custom CA certificates?

Guix
1

I started using Guix System a few weeks ago, and thus far I’m really impressed. There’s just one thing I just haven’t been able to wrap my head around: how do I trust custom CA certificates?

I read through the Guix documentation on X.509 Certificates but I feel like it isn’t very through.

I have a PEM encoded CA certificate that I want to trust (preferably on the entire system) so that I can curl/wget/whatever without having to specify any environment variables or flags. I guess I should have to modify the nss-certs package to do this?

How do you handle this? I’d love to know.

2

You may need to write a service for your certificate, e.g. to extend the nss-certs.