From unknown Sun Aug 10 16:51:09 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#22937 <22937@debbugs.gnu.org> To: bug#22937 <22937@debbugs.gnu.org> Subject: Status: Substitutes cannot be downloaded over HTTPS Reply-To: bug#22937 <22937@debbugs.gnu.org> Date: Sun, 10 Aug 2025 23:51:09 +0000 retitle 22937 Substitutes cannot be downloaded over HTTPS reassign 22937 guix submitter 22937 Chris Marusich severity 22937 important thanks From debbugs-submit-bounces@debbugs.gnu.org Tue Mar 08 01:16:50 2016 Received: (at submit) by debbugs.gnu.org; 8 Mar 2016 06:16:50 +0000 Received: from localhost ([127.0.0.1]:38554 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1adAwo-0008MH-Hs for submit@debbugs.gnu.org; Tue, 08 Mar 2016 01:16:50 -0500 Received: from eggs.gnu.org ([208.118.235.92]:54562) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1adAwm-0008M2-7j for submit@debbugs.gnu.org; Tue, 08 Mar 2016 01:16:44 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1adAwf-0005Ck-Mh for submit@debbugs.gnu.org; Tue, 08 Mar 2016 01:16:38 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM, T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:55085) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1adAwf-0005Ce-Je for submit@debbugs.gnu.org; Tue, 08 Mar 2016 01:16:37 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:45493) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1adAwe-0003n3-AV for bug-guix@gnu.org; Tue, 08 Mar 2016 01:16:37 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1adAwd-0005B2-3J for bug-guix@gnu.org; Tue, 08 Mar 2016 01:16:36 -0500 Received: from mail-pa0-x229.google.com ([2607:f8b0:400e:c03::229]:34728) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1adAwc-0005Av-SO for bug-guix@gnu.org; Tue, 08 Mar 2016 01:16:35 -0500 Received: by mail-pa0-x229.google.com with SMTP id fy10so5528873pac.1 for ; Mon, 07 Mar 2016 22:16:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:subject:date:message-id:mime-version; bh=LHvtlLkCxQtgb73U5+3hEo1mCb3v2Q0zc5BM6DowDGQ=; b=vKLgg+bf/5DN9M11ZYDpjXQCcAmWFEgWDv0aW5utVZU06RXbw5P6k+3gOZyAQMg564 YdQpk41eHgrHtcq1jhUbUGyi+5VItGUf1Peouoahykiznp3sG0Q1+NnvQkZHSAp8Iw18 Fozg5e59yAgtAFB135zus75gnQVl22UjuJl1N3B3KH/XvZLHwdSZRzAWbq6kuS3rexVN 8cP/KkqQL1pwfSgris/UoP5ZRfMyfnOkN2YtYRNuOnlTnOENjeaP4Z1IL3g25q9nAWPe 22NBjkTwQNOWnC2iOchEtD7Zhxo4gQTnCdr1Ef4sPwRIM9HBI2AWG4dyLZhUt0CjdPW0 MVCQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:mime-version; bh=LHvtlLkCxQtgb73U5+3hEo1mCb3v2Q0zc5BM6DowDGQ=; b=QnqK7awccPCdEHQHpAQXUJjUa/0jSLRDq9J4Es6u4pqI7u/YJuPygF8aVAkM7hAsHJ kjqtZsdeUpPSNl/zW9kYFVMrwsX7hz88uBJ6jMhvhep8QVibhcphzWKrEWS9Gg334Qhs 5FToNQNLCZkWnGZ94OkCHiMtU7WkDia+InC5kRYwgpwxcB7XNRpYOciEvsQixzXGkrWx rbjTGllWPrxwTAoTXH0cK4fQlEpPo+gCfZhqc7nt1qyhkeXc2KM6ne1D1tJvEl9vnQtx 2vo4mKpDlmIPJRyxN6ao4vb9xtG0xZ8WSArO5eE04BeIgSBscUibdxntXyfB+pdin+zd 4BoA== X-Gm-Message-State: AD7BkJKgSc/5oWvfEfsTZQIbwygNUEne6FTqrRdBAdK+Ui6yFbG6qt94SIUDculqVNkOzw== X-Received: by 10.67.5.68 with SMTP id ck4mr38860567pad.3.1457417794210; Mon, 07 Mar 2016 22:16:34 -0800 (PST) Received: from carbuncle ([2601:602:8100:9ee4:4e0f:6eff:fef6:70b9]) by smtp.gmail.com with ESMTPSA id i11sm1792446pfi.55.2016.03.07.22.16.33 for (version=TLSv1/SSLv3 cipher=OTHER); Mon, 07 Mar 2016 22:16:33 -0800 (PST) From: Chris Marusich To: bug-guix@gnu.org Subject: guix package fails when --substitute-urls specifies an HTTPS endpoint Date: Mon, 07 Mar 2016 22:16:30 -0800 Message-ID: <87k2ldjxz5.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) Hi, I've noticed that "guix package" fails when I specify an HTTPS endpoint for --substitute-urls. Is that expected behavior? I recently set up a caching proxy for hydra.gnu.org. The endpoint's DNS name is hydra-mirror.marusich.info. It's configured to accept both HTTP and HTTPS requests. When it receives an HTTPS request, it proxies the request (assuming it's a cache miss) to hydra.gnu.org over HTTP. I've configured it this way because my understanding is that hydra.gnu.org is currently only available via HTTP. Commands like wget, curl, and even "guix download" work fine with the mirror, even over HTTPS. For example, the following command succeeds: guix download https://hydra-mirror.marusich.info/nar/8kvb2k0n1jqjd5sa7g6qj5qllq0ckcya-linux-libre-4.4 However, when I try to install a package with "guix package" using the endpoint, it fails with a backtrace like the following (this command was invoked using the "guix package" from commit 7b3f2682de38a8e39f052705795ec85fcdfc8a96): --8<---------------cut here---------------start------------->8--- $ ./pre-inst-env guix package --substitute-urls="https://hydra-mirror.marusich.info" -i graphviz substitute: Backtrace: substitute: In ice-9/boot-9.scm: substitute: 63: 19 [call-with-prompt prompt0 ...] substitute: In ice-9/eval.scm: substitute: 432: 18 [eval # #] substitute: In ice-9/boot-9.scm: substitute: 2401: 17 [save-module-excursion #] substitute: 4050: 16 [#] substitute: 1724: 15 [%start-stack load-stack ...] substitute: 1729: 14 [#] substitute: In unknown file: substitute: ?: 13 [primitive-load "/gnu/store/3lg5c1nidbj0kjdz5b63hn3vp29kzf0s-guix-0.9.0.c3f29bc/bin/.guix-real"] substitute: In guix/ui.scm: substitute: 1175: 12 [run-guix-command substitute "--query"] substitute: In ice-9/boot-9.scm: substitute: 157: 11 [catch getaddrinfo-error ...] substitute: 157: 10 [catch srfi-34 # ...] substitute: 157: 9 [catch system-error ...] substitute: In guix/scripts/substitute.scm: substitute: 946: 8 [#] substitute: 804: 7 [process-query "info /gnu/store/x29dbk9inqjym79q0907sx4arp1bfp28-graphviz-2.38.0-doc " ...] substitute: 633: 6 [lookup-narinfos/diverse # #] substitute: 617: 5 [lookup-narinfos "https://hydra-mirror.marusich.info" #] substitute: 589: 4 [fetch-narinfos "https://hydra-mirror.marusich.info" #] substitute: 222: 3 [download-cache-info "https://hydra-mirror.marusich.info"] substitute: In guix/records.scm: substitute: 331: 2 [recutils->alist #] substitute: In ice-9/rdelim.scm: substitute: 184: 1 [read-line # trim] substitute: In unknown file: substitute: ?: 0 [%read-line #] substitute: substitute: ERROR: In procedure %read-line: substitute: ERROR: In procedure %read-line: Wrong type argument in position 1 (expecting open input port): # guix package: error: build failed: substituter `substitute' died unexpectedly --8<---------------cut here---------------end--------------->8--- When I replaced --substitute-urls="https://hydra-mirror.marusich.info" with --substitute-urls="http://hydra-mirror.marusich.info", the same command worked fine. Chris From debbugs-submit-bounces@debbugs.gnu.org Wed Mar 09 17:52:13 2016 Received: (at 22937) by debbugs.gnu.org; 9 Mar 2016 22:52:13 +0000 Received: from localhost ([127.0.0.1]:41944 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1admxh-0005fB-56 for submit@debbugs.gnu.org; Wed, 09 Mar 2016 17:52:13 -0500 Received: from eggs.gnu.org ([208.118.235.92]:37972) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1admxf-0005ew-7d for 22937@debbugs.gnu.org; Wed, 09 Mar 2016 17:52:11 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1admxV-0001V6-9Y for 22937@debbugs.gnu.org; Wed, 09 Mar 2016 17:52:05 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: ** X-Spam-Status: No, score=2.3 required=5.0 tests=BAYES_50,RP_MATCHES_RCVD, URIBL_RHS_DOB autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:50693) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1admxV-0001V2-5W; Wed, 09 Mar 2016 17:52:01 -0500 Received: from reverse-83.fdn.fr ([80.67.176.83]:36850 helo=pluto) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1admxU-0004DJ-FQ; Wed, 09 Mar 2016 17:52:00 -0500 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) To: Chris Marusich Subject: Re: bug#22937: guix package fails when --substitute-urls specifies an HTTPS endpoint References: <87k2ldjxz5.fsf@gmail.com> Date: Wed, 09 Mar 2016 23:51:57 +0100 In-Reply-To: <87k2ldjxz5.fsf@gmail.com> (Chris Marusich's message of "Mon, 07 Mar 2016 22:16:30 -0800") Message-ID: <87pov38dte.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -4.7 (----) X-Debbugs-Envelope-To: 22937 Cc: 22937@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.7 (----) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable First, the graceless error handling is fixed in 204d34ff961d6dabf18b255decc29712e03afef0. Second, here=E2=80=99s a preliminary patch that almost works with . The problem is that sometimes the server closes the connection unexpectedly, leading to an obscure backtrace like this: --8<---------------cut here---------------start------------->8--- substitute: 629: 6 [lookup-narinfos "https://hydra-mirror.marusich.info" #] substitute: 585: 5 [fetch-narinfos "https://hydra-mirror.marusich.info" #] substitute: 510: 4 [http-multiple-get # ...] substitute: In web/response.scm: substitute: 197: 3 [read-response #] substitute: In web/http.scm: substitute: 1157: 2 [read-response-line #] substitute: 151: 1 [read-header-line #] substitute: In unknown file: substitute: ?: 0 [%read-line #] substitute:=20 substitute: ERROR: In procedure %read-line: substitute: ERROR: Throw to key `gnutls-error' with args `(# fill_session_record_port_input)'. --8<---------------cut here---------------end--------------->8--- The =E2=80=9Cerror in the pull function=E2=80=9D is because =E2=80=98gnutls= _record_recv=E2=80=99 got ECONNRESET while reading. I wonder whether this could be due to the particular configuration of nginx at Cloudfront, so I=E2=80=99ll try with another server (I=E2=80=99ve = set up Let=E2=80=99s Encrypt on that server but it=E2=80=99s not accessible yet via port 443.) To be continued! Ludo=E2=80=99. --=-=-= Content-Type: text/x-patch; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable diff --git a/guix/scripts/substitute.scm b/guix/scripts/substitute.scm index b82fc17..df95de0 100755 --- a/guix/scripts/substitute.scm +++ b/guix/scripts/substitute.scm @@ -32,6 +32,7 @@ #:use-module ((guix build utils) #:select (mkdir-p dump-port)) #:use-module ((guix build download) #:select (progress-proc uri-abbreviation + open-connection-for-uri store-path-abbreviation byte-count->string)) #:use-module (ice-9 rdelim) #:use-module (ice-9 regex) @@ -171,7 +172,7 @@ to the caller without emitting an error message." (let ((port (open-file (uri-path uri) (if buffered? "rb" "r0b")))) (values port (stat:size (stat port))))) - ((http) + ((http https) (guard (c ((http-get-error? c) (let ((code (http-get-error-code c))) (if (and (=3D code 404) quiet-404?) @@ -201,10 +202,10 @@ to the caller without emitting an error message." (close-port port)))) (begin (when (or (not port) (port-closed? port)) - (set! port (open-socket-for-uri uri)) + (set! port (open-connection-for-uri uri)) (unless buffered? (setvbuf port _IONBF))) - (http-fetch uri #:text? #f #:port port)))))))) + (http-fetch uri #:text? #f #:port port)))))) (else (leave (_ "unsupported substitute URI scheme: ~a~%") (uri->string uri))))) @@ -478,20 +479,26 @@ may be #f, in which case it indicates that PATH is un= available at CACHE-URL." ".narinfo"))) (build-request (string->uri url) #:method 'GET))) =20 -(define (http-multiple-get base-url proc seed requests) - "Send all of REQUESTS to the server at BASE-URL. Call PROC for each +(define (http-multiple-get base-uri proc seed requests) + "Send all of REQUESTS to the server at BASE-URI. Call PROC for each response, passing it the request object, the response, a port from which to read the response body, and the previous result, starting with SEED, =C3= =A0 la 'fold'. Return the final result." (let connect ((requests requests) (result seed)) - ;; (format (current-error-port) "connecting (~a requests left)..." - ;; (length requests)) - (let ((p (open-socket-for-uri base-url))) + (format (current-error-port) "connecting (~a requests left)..." + (length requests)) + (let ((p (open-connection-for-uri base-uri))) + ;; For HTTPS, P is not a file port and does not support 'setvbuf'. + (when (file-port? p) + (setvbuf p _IOFBF (expt 2 16))) + ;; Send all of REQUESTS in a row. - (setvbuf p _IOFBF (expt 2 16)) - (for-each (cut write-request <> p) requests) - (force-output p) + ;; XXX: Do our own caching to work around . + (let-values (((buffer get) (open-bytevector-output-port))) + (for-each (cut write-request <> buffer) requests) + (put-bytevector p (get)) + (force-output p)) =20 ;; Now start processing responses. (let loop ((requests requests) @@ -501,6 +508,8 @@ read the response body, and the previous result, starti= ng with SEED, =C3=A0 la (reverse result)) ((head tail ...) (let* ((resp (read-response p)) + ;; (xxx (format (current-error-port) + ;; "http response: ~s~%" resp)) (body (response-body-port resp)) (result (proc head resp body result))) ;; The server can choose to stop responding at any time, in w= hich @@ -570,10 +579,10 @@ if file doesn't exist, and the narinfo otherwise." =20 (define (do-fetch uri) (case (and=3D> uri uri-scheme) - ((http) + ((http https) (let ((requests (map (cut narinfo-request url <>) paths))) (update-progress!) - (let ((result (http-multiple-get url + (let ((result (http-multiple-get uri handle-narinfo-response '() requests))) (newline (current-error-port)) --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Thu Mar 10 08:03:44 2016 Received: (at control) by debbugs.gnu.org; 10 Mar 2016 13:03:44 +0000 Received: from localhost ([127.0.0.1]:42406 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1ae0Fk-0005rG-5S for submit@debbugs.gnu.org; Thu, 10 Mar 2016 08:03:44 -0500 Received: from eggs.gnu.org ([208.118.235.92]:56677) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1ae0Fj-0005r4-27 for control@debbugs.gnu.org; Thu, 10 Mar 2016 08:03:43 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ae0Fa-0001Jx-UC for control@debbugs.gnu.org; Thu, 10 Mar 2016 08:03:37 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:41398) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ae0Fa-0001Jl-Rx for control@debbugs.gnu.org; Thu, 10 Mar 2016 08:03:34 -0500 Received: from pluto.bordeaux.inria.fr ([193.50.110.57]:45834 helo=pluto) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1ae0Fa-0007TQ-8b for control@debbugs.gnu.org; Thu, 10 Mar 2016 08:03:34 -0500 Date: Thu, 10 Mar 2016 14:03:31 +0100 Message-Id: <878u1qwkm4.fsf@gnu.org> To: control@debbugs.gnu.org From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: control message for bug #22937 MIME-version: 1.0 Content-type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) severity 22937 important From debbugs-submit-bounces@debbugs.gnu.org Thu Mar 10 08:07:36 2016 Received: (at request) by debbugs.gnu.org; 10 Mar 2016 13:07:36 +0000 Received: from localhost ([127.0.0.1]:42413 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1ae0JU-0005x0-Lv for submit@debbugs.gnu.org; Thu, 10 Mar 2016 08:07:36 -0500 Received: from eggs.gnu.org ([208.118.235.92]:57856) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1ae0JT-0005wj-2d for request@debbugs.gnu.org; Thu, 10 Mar 2016 08:07:35 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ae0JI-0002ii-Lv for request@debbugs.gnu.org; Thu, 10 Mar 2016 08:07:30 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:41488) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ae0JI-0002ib-Ib for request@debbugs.gnu.org; Thu, 10 Mar 2016 08:07:24 -0500 Received: from pluto.bordeaux.inria.fr ([193.50.110.57]:45842 helo=pluto) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1ae0JH-0007x7-VW for request@debbugs.gnu.org; Thu, 10 Mar 2016 08:07:24 -0500 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) To: request@debbugs.gnu.org Subject: retitle X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 21 =?utf-8?Q?Vent=C3=B4se?= an 224 de la =?utf-8?Q?R?= =?utf-8?Q?=C3=A9volution?= X-PGP-Key-ID: 0x3D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-unknown-linux-gnu Date: Thu, 10 Mar 2016 14:07:22 +0100 Message-ID: <874mcewkfp.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: request X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) retitle 22937 Substitutes cannot be downloaded over HTTPS thanks From debbugs-submit-bounces@debbugs.gnu.org Thu Mar 10 08:08:30 2016 Received: (at 22937-done) by debbugs.gnu.org; 10 Mar 2016 13:08:30 +0000 Received: from localhost ([127.0.0.1]:42417 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1ae0KL-0005yj-Vh for submit@debbugs.gnu.org; Thu, 10 Mar 2016 08:08:30 -0500 Received: from eggs.gnu.org ([208.118.235.92]:57999) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1ae0KK-0005yX-8w for 22937-done@debbugs.gnu.org; Thu, 10 Mar 2016 08:08:28 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ae0KC-0002rg-4A for 22937-done@debbugs.gnu.org; Thu, 10 Mar 2016 08:08:23 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.4 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD, URIBL_RHS_DOB autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:41498) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ae0KB-0002ra-Vw; Thu, 10 Mar 2016 08:08:20 -0500 Received: from pluto.bordeaux.inria.fr ([193.50.110.57]:45864 helo=pluto) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1ae0KA-0007zx-Q9; Thu, 10 Mar 2016 08:08:19 -0500 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) To: Chris Marusich Subject: Re: bug#22937: guix package fails when --substitute-urls specifies an HTTPS endpoint References: <87k2ldjxz5.fsf@gmail.com> <87pov38dte.fsf@gnu.org> Date: Thu, 10 Mar 2016 14:08:17 +0100 In-Reply-To: <87pov38dte.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Wed, 09 Mar 2016 23:51:57 +0100") Message-ID: <8737rywke6.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -4.7 (----) X-Debbugs-Envelope-To: 22937-done Cc: 22937-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.7 (----) After some more testing and tweaks, notably with and its brand new Let=E2=80=99s Encrypt certific= ate, I pushed the patch as 9b7bd1b160be7c740a798c09e3b8986368b92036. I can no longer reproduce the ECONNRESET issue I mentioned for , but feel free to open a new bug if that comes up again! For the record, the main test I used for that was: $ sudo rm -rf /var/guix/substitute/cache $ guix build libreoffice --no-grafts -n \ --substitute-urls=3Dhttps://hydra.gnunet.org That forces a redownload of all .narinfo files from hydra.gnunet.org, which involves HTTP pipelining. Anyway, thanks for giving me an incentive to address this. This was long overdue! Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Thu Mar 10 16:21:33 2016 Received: (at 22937) by debbugs.gnu.org; 10 Mar 2016 21:21:33 +0000 Received: from localhost ([127.0.0.1]:44123 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1ae81V-0004di-4y for submit@debbugs.gnu.org; Thu, 10 Mar 2016 16:21:33 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:35995) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1ae81S-0004da-Mo for 22937@debbugs.gnu.org; Thu, 10 Mar 2016 16:21:31 -0500 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 13BDD20B70; Thu, 10 Mar 2016 16:21:30 -0500 (EST) Received: from frontend2 ([10.202.2.161]) by compute4.internal (MEProxy); Thu, 10 Mar 2016 16:21:30 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=famulari.name; h= content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=DPBLYYfOxxwYCYrE1aa7gQ/7Dxk=; b=uR8cLv rvyh2b+A2wRqydalFiSozgvTSgFmBSVYo948etkQtWm+IrgduX7jGxa1xcLVDio0 A2ahdLIUR+6t9K0tS27LkAoMpKnh2i/Jonz4qYEXAKEAmo+ozQ1lAEo0SFgJfT5k llqFGofBgxhL1/WDFx0QnLaxIUE9GPD7Vcbx8= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=DPBLYYfOxxwYCYr E1aa7gQ/7Dxk=; b=RWZoGAqkfzZh/1NzCQwh0CdY/133BbCYICCizpjH5Q2GYZ3 OdkitZ/trBgiiAGGt4b/f0kqCZsKybkzh+khnZOec4VaN8CIK9reYwgr2Wk23rf1 sTU//Lqe6xpWKgxAqxESqILtsluwJJmQj9JYumhYMPEdVSO6Ba/rugywiBag= X-Sasl-enc: 2Tt7J9kOVZK5kFKRwF8dy1jNxPmNp2F8wlHM/KvayPE4 1457644889 Received: from localhost (c-69-249-5-231.hsd1.pa.comcast.net [69.249.5.231]) by mail.messagingengine.com (Postfix) with ESMTPA id C4B4C6801E8; Thu, 10 Mar 2016 16:21:29 -0500 (EST) Date: Thu, 10 Mar 2016 16:21:33 -0500 From: Leo Famulari To: 22937@debbugs.gnu.org, ludo@gnu.org, cmmarusich@gmail.com Subject: Re: bug#22937: guix package fails when --substitute-urls specifies an HTTPS endpoint Message-ID: <20160310212133.GA8829@jasmine> References: <87k2ldjxz5.fsf@gmail.com> <87pov38dte.fsf@gnu.org> <8737rywke6.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <8737rywke6.fsf@gnu.org> User-Agent: Mutt/1.5.24 (2015-08-30) X-Spam-Score: -0.4 (/) X-Debbugs-Envelope-To: 22937 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.4 (/) On Thu, Mar 10, 2016 at 02:08:17PM +0100, Ludovic Courtès wrote: > After some more testing and tweaks, notably with > and its brand new Let’s Encrypt certificate, > I pushed the patch as 9b7bd1b160be7c740a798c09e3b8986368b92036. With this commit, I still get the backtrace in the original report of this bug. I ran `guix pull` and confirmed the changes were in ~/.config/guix/latest. I cleared the cache at /vat/guix/substitute/cache. Then, I updated --substitute-urls in the daemon invocation and reloaded the daemon, and then did `guix build hello`. Did I miss a step? > > I can no longer reproduce the ECONNRESET issue I mentioned for > , but feel free to open a new bug if > that comes up again! > > For the record, the main test I used for that was: > > $ sudo rm -rf /var/guix/substitute/cache > $ guix build libreoffice --no-grafts -n \ > --substitute-urls=https://hydra.gnunet.org > > That forces a redownload of all .narinfo files from hydra.gnunet.org, > which involves HTTP pipelining. > > Anyway, thanks for giving me an incentive to address this. This was > long overdue! > > Ludo’. > > > From debbugs-submit-bounces@debbugs.gnu.org Fri Mar 11 03:39:25 2016 Received: (at 22937) by debbugs.gnu.org; 11 Mar 2016 08:39:25 +0000 Received: from localhost ([127.0.0.1]:44261 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1aeIbV-0003Tr-4s for submit@debbugs.gnu.org; Fri, 11 Mar 2016 03:39:25 -0500 Received: from eggs.gnu.org ([208.118.235.92]:35456) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1aeIbT-0003Tf-FG for 22937@debbugs.gnu.org; Fri, 11 Mar 2016 03:39:24 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aeIbN-0001Re-8K for 22937@debbugs.gnu.org; Fri, 11 Mar 2016 03:39:18 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:57009) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aeIbJ-0001RB-G3; Fri, 11 Mar 2016 03:39:13 -0500 Received: from pluto.bordeaux.inria.fr ([193.50.110.57]:42358 helo=pluto) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1aeIbI-00023E-Ob; Fri, 11 Mar 2016 03:39:13 -0500 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) To: Leo Famulari Subject: Re: bug#22937: guix package fails when --substitute-urls specifies an HTTPS endpoint References: <87k2ldjxz5.fsf@gmail.com> <87pov38dte.fsf@gnu.org> <8737rywke6.fsf@gnu.org> <20160310212133.GA8829@jasmine> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 22 =?utf-8?Q?Vent=C3=B4se?= an 224 de la =?utf-8?Q?R?= =?utf-8?Q?=C3=A9volution?= X-PGP-Key-ID: 0x3D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-unknown-linux-gnu Date: Fri, 11 Mar 2016 09:39:10 +0100 In-Reply-To: <20160310212133.GA8829@jasmine> (Leo Famulari's message of "Thu, 10 Mar 2016 16:21:33 -0500") Message-ID: <874mcd5ryp.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: 22937 Cc: cmmarusich@gmail.com, 22937@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) Leo Famulari skribis: > On Thu, Mar 10, 2016 at 02:08:17PM +0100, Ludovic Court=C3=A8s wrote: >> After some more testing and tweaks, notably with >> and its brand new Let=E2=80=99s Encrypt certi= ficate, >> I pushed the patch as 9b7bd1b160be7c740a798c09e3b8986368b92036. > > With this commit, I still get the backtrace in the original report of > this bug. You need to make sure that =E2=80=98guix-daemon=E2=80=99 launches the right= =E2=80=98guix substitute=E2=80=99. A simple way to do that from your Git checkout is: sudo ./pre-inst-env guix-daemon --build-users-group=3Dguixbuild \ --substitute-urls=3Dhttps://mirror.guixsd.org Make sure to stop any running guix-daemon before; on GuixSD, this goes like this: sudo herd stop guix-daemon HTH! Ludo=E2=80=99. From unknown Sun Aug 10 16:51:09 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 08 Apr 2016 11:24:03 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator