security.pki.useCompatibleBundle

NixOS option

Whether to enable usage of a compatibility bundle. Such a bundle consists exclusively of BEGIN CERTIFICATE and no BEGIN TRUSTED CERTIFICATE, which is an OpenSSL specific PEM format. It is known to be incompatible with certain software stacks. Nevertheless, enabling this will strip all additional trust rules provided by the certificates themselves. This can have security consequences depending on your usecases .

type: boolean
Default
false
Example
true
declared in: nixos/modules/security/ca.nixView source on NixOS/nixpkgs →