https://github.com/aszlig/minica-deterministic

Deterministic minimalistic CA for NixOS tests
https://github.com/aszlig/minica-deterministic

Last synced: 13 days ago
JSON representation

Deterministic minimalistic CA for NixOS tests

• Host: GitHub
• URL: https://github.com/aszlig/minica-deterministic
• Owner: aszlig
• License: mit
• Created: 2020-10-18T22:34:20.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2023-04-07T05:53:49.000Z (almost 2 years ago)
• Last Synced: 2024-11-13T02:36:01.362Z (2 months ago)
• Language: Nix
• Size: 5.86 KB
• Stars: 1
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# WARNING: Do not use this in *anything* other than test environments!

This is a deterministic version of [Minica](https://github.com/jsha/minica),

which is useful for generating certificates in NixOS tests.

Currently this is implemented by patching Go in order to introduce determinism

in [`randutil.MaybeReadByte`][1] and also uses `sed` to patch Minica.

The implementation is gruesome and will probably break with future versions of

Minica. This is **deliberate** so that I someday™ get annoyed enough to

implement it in sane way as an upstream pull request.

[1]: https://golang.org/pkg/crypto/internal/randutil/#MaybeReadByte