Is your feature request related to a problem? Please describe.
There is a certificate bundle at /etc/ssl/cert.pem on macOS (more precisely, OpenBSD), which is used by e.g. system-bundled curl. I notice the Nix profile scripts will fall back to some predefined bundle paths when exporting $NIX_SSL_CERT_FILE, it would be nice to also support this location.
Describe the solution you'd like
When exporting $NIX_SSL_CERT_FILE in scripts (e.g. scripts/nix-profile.sh.in), also check the existence of /etc/ssl/cert.pem and use it if approriate.
Describe alternatives you've considered
Maintain the status quo i.e. prefer the bundle in Nix profile.
Is your feature request related to a problem? Please describe. There is a certificate bundle at
/etc/ssl/cert.pem
on macOS (more precisely, OpenBSD), which is used by e.g. system-bundled curl. I notice the Nix profile scripts will fall back to some predefined bundle paths when exporting$NIX_SSL_CERT_FILE
, it would be nice to also support this location.Describe the solution you'd like When exporting
$NIX_SSL_CERT_FILE
in scripts (e.g.scripts/nix-profile.sh.in
), also check the existence of/etc/ssl/cert.pem
and use it if approriate.Describe alternatives you've considered Maintain the status quo i.e. prefer the bundle in Nix profile.
Additional context N/A