+ ISRG_Root_X1 = pkgs.fetchurl {
+ url = "https://letsencrypt.org/certs/isrgrootx1.pem";
+ sha256 = "1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92";
+ };
+ fix_ISRG_Root_X1 = pkgs.writeScript "fix-pem" ''
+ cat ${ISRG_Root_X1} | grep -v " CERTIFICATE" | \
+ sed -i.bak -ne "/MIIFYDCCBEigAwIBAgIQQAF3ITfU6UK47naqPGQKtzANBgkqhkiG9w0BAQsFADA/ {r /dev/stdin" -e ":a; n; /Dfvp7OOGAN6dEOM4+qR9sdjoSYKEBpsr6GtPAQw4dy753ec5/ { b }; ba };p" chain.pem fullchain.pem full.pem
+ '';