From 31e47632f441adab9040e741530233ebd9211c34 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?m=C3=BCde?= Date: Thu, 6 Aug 2026 00:22:44 +0200 Subject: [PATCH] unbork main?? --- nix/host-modules/swarm-ca.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/nix/host-modules/swarm-ca.nix b/nix/host-modules/swarm-ca.nix index 31102718..2e6d2bd3 100644 --- a/nix/host-modules/swarm-ca.nix +++ b/nix/host-modules/swarm-ca.nix @@ -270,8 +270,8 @@ in # redundant — a DNS constraint says nothing about an # iPAddress SAN, and an unconstrained name type is a name # type this CA is unconstrained for. - printf 'nameConstraints=critical,permitted;%s,excluded;IP:0.0.0.0/0.0.0.0,excluded;IP:0:0:0:0:0:0:0:0/0:0:0:0:0:0:0:0\n' \ - "$(echo "$want" | sed 's/^/DNS:/' | paste -sd, -)" + printf 'nameConstraints=critical,%s,excluded;IP:0.0.0.0/0.0.0.0,excluded;IP:0:0:0:0:0:0:0:0/0:0:0:0:0:0:0:0\n' \ + "$(echo "$want" | sed 's/^/permitted;DNS:/' | paste -sd, -)" } > "$ext" openssl x509 -req -in "$csr" -CA "$root" -CAkey "$rootk" \