nixpkgs/pkgs/tools/security/zlint/default.nix
2024-04-15 02:51:24 +00:00

55 lines
1.2 KiB
Nix

{ lib
, buildGoModule
, fetchFromGitHub
, testers
, zlint
}:
buildGoModule rec {
pname = "zlint";
version = "3.6.2";
src = fetchFromGitHub {
owner = "zmap";
repo = "zlint";
rev = "v${version}";
hash = "sha256-UwtWYDWbln64nE4KDV+gWIhhdbyvlrs0fM96otnfqfE=";
};
modRoot = "v3";
vendorHash = "sha256-LP7I7NY/Am6zWfVSvwJanCFwiLfcHKA3Fb9RIMD76a0=";
postPatch = ''
# Remove a package which is not declared in go.mod.
rm -rf v3/cmd/genTestCerts
'';
excludedPackages = [
"lints"
];
ldflags = [
"-s"
"-w"
"-X main.version=${version}"
];
passthru.tests.version = testers.testVersion {
package = zlint;
command = "zlint -version";
};
meta = with lib; {
description = "X.509 Certificate Linter focused on Web PKI standards and requirements";
longDescription = ''
ZLint is a X.509 certificate linter written in Go that checks for
consistency with standards (e.g. RFC 5280) and other relevant PKI
requirements (e.g. CA/Browser Forum Baseline Requirements).
'';
homepage = "https://github.com/zmap/zlint";
changelog = "https://github.com/zmap/zlint/releases/tag/${src.rev}";
license = licenses.asl20;
maintainers = with maintainers; [ baloo ];
};
}