osg-ca-certs: init at 1.130

flake.nix

@@ -65,7 +65,7 @@
         overlays = [ self.overlays.default ];
         # Will assume that the flake user agrees to use non-free EIC software
         config.allowUnfreePredicate = pkg:
-          (builtins.elem pkg.pname [ "afterburner" "athena" "BeastMagneticField" "eic-smear" "epic" "hepmcmerger" "npdet" "npsim" "pythia6" ])
+          (builtins.elem pkg.pname [ "afterburner" "athena" "BeastMagneticField" "eic-smear" "epic" "hepmcmerger" "npdet" "npsim" "osg-ca-certs" "pythia6" ])
           || lib.hasPrefix "ecce-detectors" pkg.pname
           || lib.hasPrefix "fun4all_coresoftware" pkg.pname
           || lib.hasPrefix "fun4all_eicdetectors" pkg.pname

overlay.nix

@@ -212,6 +212,8 @@ final: prev: with final; {
     }
   );
 
+  osg-ca-certs = callPackage pkgs/osg-ca-certs {};
+
   podio = callPackage pkgs/podio { inherit podio-src; };
 
   pythia6 = callPackage pkgs/pythia6 {};

pkgs/osg-ca-certs/default.nix

@@ -0,0 +1,35 @@
+{
+  lib,
+  stdenv,
+  fetchurl,
+}:
+
+stdenv.mkDerivation rec {
+  pname = "osg-ca-certs";
+  version = "1.130";
+
+  src = fetchurl {
+    url = "https://repo.opensciencegrid.org/cadist/${version}NEW/osg-certificates-${version}NEW.tar.gz";
+    hash = "sha256-R0+OpHOXzWoFvrihTFqVFRCjnlICzF/edXhyf3pduVc=";
+  };
+
+  dontConfigure = true;
+  dontBuild = true;
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p "$out"/etc/grid-security/certificates
+    mv * "$out"/etc/grid-security/certificates/
+
+    runHook postInstall
+  '';
+
+  meta = with lib; {
+    changelog = "https://repo.opensciencegrid.org/cadist/CHANGES";
+    description = "OSG CA certificates";
+    license = licenses.unfreeRedistributable; # no license specified
+    homepage = "https://ca.cilogon.org/";
+    maintainers = with maintainers; [ veprbl ];
+  };
+}