zscaler-cacert: init at 2025-02-02 (#468122)

2025-12-26 00:43:51 +00:00
parent 00c16d4ca8 b976ef503f
commit 4fef6e384d
1 changed files with 36 additions and 0 deletions
@@ -0,0 +1,36 @@
+{
+  lib,
+  stdenvNoCC,
+  fetchurl,
+}:
+
+stdenvNoCC.mkDerivation {
+  pname = "zscaler-cacert";
+
+  # check it on the DHL keyserver homepage ('validity period')
+  # and using openssl:
+  # openssl x509 -startdate -noout -in ZscalerRootCertificate-2048-SHA256.crt
+
+  version = "0-unstable-2025-02-02";
+
+  src = fetchurl {
+    url = "https://keyserver.dhl.com/pki/X3/ZscalerRootCertificate-2048-SHA256.crt";
+    hash = "sha256-HrQ7am1IteSP1O3mz3weay1NQG8aj3EUt1ZjYRbOEQA=";
+  };
+
+  dontUnpack = true;
+
+  dontBuild = true;
+
+  installPhase = ''
+    install -Dm644 $src $out/etc/ssl/certs/zscaler-ca.crt
+  '';
+
+  meta = {
+    description = "ZScaler Root CA certificate";
+    homepage = "https://keyserver.dhl.com/certificates";
+    license = lib.licenses.publicDomain;
+    maintainers = with lib.maintainers; [ aiyion ];
+    platforms = lib.platforms.all;
+  };
+}