@ -437,6 +437,7 @@ in {
baseDirectory = mkOption {
type = types . path ;
default = " ${ cfg . directories . certificates } / ${ name } " ;
defaultText = literalExpression '' " ''$ { c o n f i g . ${ opt . directories . certificates } } / ''$ { n a m e } " '' ;
description = ''
The mandatory base directory for cryptographic objects of this
policy . This path is only automatically generated when this
@ -498,6 +499,7 @@ in {
revokedDir = mkOption {
type = types . path ;
default = " ${ config . baseDirectory } / r e v o k e d " ;
defaultText = literalExpression '' " ''$ { c o n f i g . ${ options . baseDirectory } } / r e v o k e d " '' ;
description = ''
Path to directory of CRLs ( Certificate Revocation Lists ) in
PEM format . Must be an absolute path . The existence of this
@ -533,6 +535,7 @@ in {
trustedDir = mkOption {
type = types . path ;
default = " ${ config . baseDirectory } / t r u s t e d " ;
defaultText = literalExpression '' " ''$ { c o n f i g . ${ options . baseDirectory } } / t r u s t e d " '' ;
description = ''
Path to directory of X .509 certificates in PEM format for
trusted parties . Must be an absolute path . The existence of this