MyNixOS website logo
option

security.pki.caCertificateBlacklist

A list of blacklisted CA certificate names that won't be imported from the Mozilla Trust Store into /etc/ssl/certs/ca-certificates.crt. Use the names from that file.

Declarations
    Type
    list of string
    Default
    [ ]
    Example
    [
      "WoSign"
      "WoSign China"
      "CA WoSign ECC Root"
      "Certification Authority of WoSign G2"
    ]