NixOs in corporate

[johncoopertr]

Hi all,

I ran into the same issue - hopefully this is helpful for you guys or someone else:

1. find the Zscaler root cert in your browser, export it.
   

   

2. Set nix.settings.ssl-cert-file explicitly to /etc/ssl/certs/ca-bundle.crt

3. Use security.pki.certificates to grab the .crt file we exported earlier.

From what I understand, security.pki.certificates will stick the exported .crt into /etc/ssl/certs/ca-bundle.crt at build time.