chore(openssl): remove dist files from ssldir

lib/make-sysext.nix

@@ -81,7 +81,11 @@ runCommand name
     find tree -type d -exec chmod 0755 {} \;
     mkfs.erofs --all-root $name.raw tree/
     veritysetup format --root-hash-file $name.roothash $name.raw $name.verity
-    #TODO: pcks7 signature?
+    # TODO: pcks7 signature
+    # openssl smime -sign -nocerts -noattr -binary -in ${name}.roothash \
+    #   -inkey key.pem -signer cert.pem -outform der -out ${name}.roothash.p7s
     rm -rf tree
+    sha256sum * > SHA256SUMS
+    # TODO: add gpg signature
     popd
   ''

pkgs/openssl/default.nix

@@ -145,6 +145,7 @@ stdenv.mkDerivation rec {
 
     installPhase = ''
       make DESTDIR=$out install
+      rm -rf $out/etc/ssl/*.dist $out/etc/ssl/misc
     '';
 
     enableParallelBuilding = true;