Hello, I'm trying to verify the nss-mozilla-ca-policy certificate attribute for the system certificates, but I can't seem to find the p11-kit trust store. For instance, ArchLinux keeps the store at:
/usr/share/ca-certificates/trust-source/mozilla.trust.p11-kit while NixOS at: /etc/ssl/trust-source/ca-bundle.trust.p11-kit Running `p11-kit list-modules' shows `ca-certificates.crt', `ca-bundle.crt' and `ca-bundle.pem' as the names of the tokens of the default `p11-kit-trust.so' module. I assume (and from strace) that `ca-certificates.crt' corresponds to: /etc/ssl/certs/ca-certificates.crt from the nss-certs package but that isn't a p11-kit trust source file akin to the ones in ArchLinux and NixOS. Running `trust dump' doesn't list the nss-mozilla-ca-policy attribute (which exists in other distros) which leads me to believe a .p11-kit trust file doesn't exist in guix? Any ideas? Thanks, Alex
