From debbugs-submit-bounces@debbugs.gnu.org Tue May 10 08:30:45 2016 Received: (at submit) by debbugs.gnu.org; 10 May 2016 12:30:45 +0000 Received: from localhost ([127.0.0.1]:45231 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b06oH-0003C3-8o for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:45 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33516) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b06oF-0003Br-LF for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:44 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b06o6-0000bt-5a for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:38 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_20,FREEMAIL_FROM, T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:37724) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b06o6-0000bo-2b for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:34 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:52712) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b06o3-0003IM-CJ for bug-guix@gnu.org; Tue, 10 May 2016 08:30:32 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b06nw-0000bB-8L for bug-guix@gnu.org; Tue, 10 May 2016 08:30:30 -0400 Received: from mail-yw0-x22c.google.com ([2607:f8b0:4002:c05::22c]:33571) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b06nw-0000b4-4J for bug-guix@gnu.org; Tue, 10 May 2016 08:30:24 -0400 Received: by mail-yw0-x22c.google.com with SMTP id t10so10978302ywa.0 for ; Tue, 10 May 2016 05:30:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=bf7FuDRYETpM74WxcA2fZInml580UVtD+30Dn58TMWU=; b=da6pzBZ+AeMQ+dUQ7p2japSCCZZBuqDS+dKE+OtoMxJ05pM62etNrxcOBuQh4+2p8x qd79yvEMTohy64HjghfBFzm8X6O1hNlWA5/71jR4PDGRzWmfFxJ9kgQd7kK3bt9wTXuB qusyB4/ITAmVrLWM3duwS4H+zYgaRL6YW25Iefivot+dgpukbAZykf6wD4rCsB5TJXd7 g8VpxNVGn7JhXsE88PRN8cH9llcWbJHrz5rv1xRafeMLaeUSwe/e1qB95jOHiJGGkUGj MQHaCO68GV0Fu4refqwu5jVHuiOvPJ8BDjmiJE7+qlB4goNF0SxghevI98kmrcrk3AKS uwqg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=bf7FuDRYETpM74WxcA2fZInml580UVtD+30Dn58TMWU=; b=B9JlTjTxxFASzNGuyLY5TH6lezRkxK6fp2j9I8gbaq5r4Vy2UKuOU6N71ZWcQ44ztL VCWjgocQKTxmB0DzqBLSV13KegZoLJgQ5aI3dUg6q+ueF2hrhMHTMSS+a93lcUa37cJo mO0B2aYXGg5VIQiqGNvjHJ1K5kE+1tABZbK7TAx7bamPwcB0Ga4qcBZR8pBbo5NYVF3X c413VViGUXh5U7ZeGf8zEvieeJEATnkWGbk6Jgcd4hSF0c/ZuhAZjpPzjbfMb79MIqpE vGPI9Canf/2Oz+IohVyXu6h5//2iobjz8EoHPrTJ1kvfY3S8DvS62avIniitOANF0wp3 4h1Q== X-Gm-Message-State: AOPr4FU2vG6T2tJBUXkAzUWOUDFlGeLDphy2zflVmxxKjKtD739zZjWyWpwlsRUCAJ+q1vtbpaRllj2X0+UGnA== MIME-Version: 1.0 X-Received: by 10.13.206.131 with SMTP id q125mr21903856ywd.54.1462883422249; Tue, 10 May 2016 05:30:22 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Tue, 10 May 2016 05:30:22 -0700 (PDT) Date: Tue, 10 May 2016 15:30:22 +0300 Message-ID: Subject: git 2.7.4 fails to clone repositories over HTTPS sources From: Dennis Mungai To: bug-guix@gnu.org Content-Type: text/plain; charset=UTF-8 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) Hello there, I'm using git 2.7.4 from a guix profile, and here is my current environment: guix package -p ~/opt/guix-build-system --search-paths warning: failed to install locale: Invalid argument export PATH="/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-build-system/sbin" export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" export INFOPATH="/home/lin/opt/guix-build-system/share/info" export PKG_CONFIG_PATH="/home/lin/opt/guix-build-system/lib/pkgconfig" export GUILE_LOAD_COMPILED_PATH="/home/lin/opt/guix-build-system/lib/guile/2.0/ccache" export C_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" export CPLUS_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" export LIBRARY_PATH="/home/lin/opt/guix-build-system/lib" export ACLOCAL_PATH="/home/lin/opt/guix-build-system/share/aclocal" which env returns: which env /home/lin/opt/guix-build-system/bin/env Now, with git clone example over HTTPS: git clone --branch gn-latest https://github.com/genenetwork/guix-bioinformatics Cloning into 'guix-bioinformatics'... fatal: unable to access 'https://github.com/genenetwork/guix-bioinformatics/': server certificate verification failed. CAfile: none CRLfile: none The system git does not present such an error. What could be wrong with my setup? Missing certificates? At the moment, I've installed the nss-certs package hoping it would be a workaround as these are Mozilla certs, but to no avail. Thanks and regards, Dennis. From debbugs-submit-bounces@debbugs.gnu.org Tue May 10 09:36:13 2016 Received: (at 23504) by debbugs.gnu.org; 10 May 2016 13:36:13 +0000 Received: from localhost ([127.0.0.1]:45283 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07pc-0004js-QM for submit@debbugs.gnu.org; Tue, 10 May 2016 09:36:13 -0400 Received: from mail-yw0-f194.google.com ([209.85.161.194]:34136) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07pb-0004jf-Cu for 23504@debbugs.gnu.org; Tue, 10 May 2016 09:36:11 -0400 Received: by mail-yw0-f194.google.com with SMTP id i22so1063303ywc.1 for <23504@debbugs.gnu.org>; Tue, 10 May 2016 06:36:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=08kdaNZhVfF6GvL5tZOwOEdWwsrL0P4sSuTnptHkcjU=; b=LM9Eh772wdZtnbl0ALzULVigdWpP4xCFbpkKSoHk1oYr/5j49kKmchQZrypcy/F3NZ WAvuaqRC0MvuzTH3IY118L8EdCmQQ4lSmp0keClOM6SjKZh1b+/iZuForCCQzj56M3Xe KRoHeq3Zgk0W/HMuAX2q93Xs9TOxueP0mWnbDVWo6Gh3QtCWac3IcQURyqdUPKLt6idN jSunT5OI4dhFnzx7gRfdD3tdyZRqKpVmI+reAdUeQ0R7eTbu/Y5n0KfwAwGgPfOj0iKA WCznb8T7KN0DnrUfnyn72UDybf8jZ8tybZZGi9YMTLI06HEo/u3AhnOl0+TyFVWUsd0V EbsA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=08kdaNZhVfF6GvL5tZOwOEdWwsrL0P4sSuTnptHkcjU=; b=ZjYtvoVva5QXEU4T5a/4Q0yc2vprRe32wDT9mINxf2KHDeIWQhNOquu1aakJE0nhNw CZaPzMBc5AZQz3U4Tjx6TwOi8/3aWGnoiNvGK2PkzWiEoVu2yDsVZpmB32HB5SYgy8gB KvrSVKVQyeoNuUXeM8E1H2FBJW8kvlVcvbnbx+/VKnACxeBVGFdhiPYp2NLunTaeVqT7 +p1OOgr3GKTMK+wGQkcHuaVxyT+y65Ly636QllzCdTT+48L+b6qofhQphj8kO7eLARfF qNBegGmGIe37t0iIi/gWGE5e7lFkz4iA6eHkKI3U+a97mEUR7FL3nMyB5WgpF/wiKdkl zHOQ== X-Gm-Message-State: AOPr4FUmz57/OQKBM4yz9//c+ZMNiuvM/AK25zIU5pBk13QjlwuRcUFmIeu/+WxituszUoE//1pV+aBvZpueSw== MIME-Version: 1.0 X-Received: by 10.129.111.196 with SMTP id k187mr22816403ywc.11.1462887365766; Tue, 10 May 2016 06:36:05 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Tue, 10 May 2016 06:36:05 -0700 (PDT) In-Reply-To: References: Date: Tue, 10 May 2016 16:36:05 +0300 Message-ID: Subject: Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources From: Dennis Mungai To: Ricardo Wurmus Content-Type: text/plain; charset=UTF-8 X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 23504 Cc: 23504@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) Hmmm, thanks ;-) Perhaps one could set the installation of nss-certs as: 1. A dependency to git, and 2. To print out the environment variable export GTI_SSL_CAPATH once nss-certs is installed. I have seen packages such as gtk3 on guix trigger similar variables to be set when they are installed and loaded from a specific guix profile, as such: guix package -p ~/some-profile -i -some-gtk3-app And then this would be recommended when calling up guix package -p ~/some-profile --search-paths Taken from the email above as an example: export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" So yeah, it can be done ;-) On 10 May 2016 at 16:11, Ricardo Wurmus wrote: > > Dennis Mungai writes: > >> Hello there, >> >> I'm using git 2.7.4 from a guix profile, and here is my current environment: >> >> guix package -p ~/opt/guix-build-system --search-paths >> warning: failed to install locale: Invalid argument >> export PATH="/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-build-system/sbin" >> export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" >> export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" >> export INFOPATH="/home/lin/opt/guix-build-system/share/info" >> export PKG_CONFIG_PATH="/home/lin/opt/guix-build-system/lib/pkgconfig" >> export GUILE_LOAD_COMPILED_PATH="/home/lin/opt/guix-build-system/lib/guile/2.0/ccache" >> export C_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" >> export CPLUS_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" >> export LIBRARY_PATH="/home/lin/opt/guix-build-system/lib" >> export ACLOCAL_PATH="/home/lin/opt/guix-build-system/share/aclocal" >> >> which env returns: >> >> which env >> /home/lin/opt/guix-build-system/bin/env >> >> Now, with git clone example over HTTPS: >> >> git clone --branch gn-latest https://github.com/genenetwork/guix-bioinformatics >> Cloning into 'guix-bioinformatics'... >> fatal: unable to access >> 'https://github.com/genenetwork/guix-bioinformatics/': server >> certificate verification failed. CAfile: none CRLfile: none >> >> The system git does not present such an error. >> >> What could be wrong with my setup? Missing certificates? > > Please try this: > > export GIT_SSL_CAPATH=$HOME/.guix-profile/etc/ssl/certs > > Assuming that nss-certs has been installed into $HOME/.guix-profile this > should be enough to make it work. > > I wonder how we can make it easier to tell the user that this > environment variable must be set. > > ~~ Ricardo From debbugs-submit-bounces@debbugs.gnu.org Tue May 10 09:39:14 2016 Received: (at 23504) by debbugs.gnu.org; 10 May 2016 13:39:14 +0000 Received: from localhost ([127.0.0.1]:45293 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07sX-0004oS-O8 for submit@debbugs.gnu.org; Tue, 10 May 2016 09:39:13 -0400 Received: from eggs.gnu.org ([208.118.235.92]:49915) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07sW-0004oH-Ax for 23504@debbugs.gnu.org; Tue, 10 May 2016 09:39:12 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b07sO-00089Q-6F for 23504@debbugs.gnu.org; Tue, 10 May 2016 09:39:07 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-4.0 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:58307) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b07sO-000899-2b; Tue, 10 May 2016 09:39:04 -0400 Received: from wifi-eduroam-161119.inria.fr ([128.93.161.119]:32984 helo=pluto) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1b07sL-0002lr-F9; Tue, 10 May 2016 09:39:02 -0400 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) To: Dennis Mungai Subject: Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources References: X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 22 =?utf-8?Q?Flor=C3=A9al?= an 224 de la =?utf-8?Q?R?= =?utf-8?Q?=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-unknown-linux-gnu Date: Tue, 10 May 2016 15:38:57 +0200 In-Reply-To: (Dennis Mungai's message of "Tue, 10 May 2016 15:30:22 +0300") Message-ID: <87a8jyghhq.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -7.1 (-------) X-Debbugs-Envelope-To: 23504 Cc: 23504@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -7.1 (-------) Dennis Mungai skribis: > I'm using git 2.7.4 from a guix profile, and here is my current environme= nt: > > guix package -p ~/opt/guix-build-system --search-paths > warning: failed to install locale: Invalid argument > export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-bui= ld-system/sbin" > export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" > export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" > export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" > export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfig" > export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib/gu= ile/2.0/ccache" > export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" > export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" > export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" > export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" > > which env returns: > > which env > /home/lin/opt/guix-build-system/bin/env > > Now, with git clone example over HTTPS: > > git clone --branch gn-latest https://github.com/genenetwork/guix-bioinfor= matics > Cloning into 'guix-bioinformatics'... > fatal: unable to access > 'https://github.com/genenetwork/guix-bioinformatics/': server > certificate verification failed. CAfile: none CRLfile: none > > The system git does not present such an error. > > What could be wrong with my setup? Missing certificates? > > At the moment, I've installed the nss-certs package hoping it would be > a workaround as these are Mozilla certs, but to no avail. I think you also need to set the =E2=80=98GIT_SSL_CAINFO=E2=80=99 environme= nt variable. For instance: $ guix package -i nss-certs $ export SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs" $ export SSL_CERT_FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-certifi= cates.crt" $ export GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" Can you confirm? Thanks, Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Tue May 10 09:46:54 2016 Received: (at 23504) by debbugs.gnu.org; 10 May 2016 13:46:54 +0000 Received: from localhost ([127.0.0.1]:45297 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07zx-0004zE-Iy for submit@debbugs.gnu.org; Tue, 10 May 2016 09:46:54 -0400 Received: from mail-yw0-f194.google.com ([209.85.161.194]:35040) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07zv-0004z1-Fo for 23504@debbugs.gnu.org; Tue, 10 May 2016 09:46:51 -0400 Received: by mail-yw0-f194.google.com with SMTP id v81so1086191ywa.2 for <23504@debbugs.gnu.org>; Tue, 10 May 2016 06:46:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-transfer-encoding; bh=BOaDnEqH502zTfjjHdvEFB8VYh1GEjOwSxDCHQtVZow=; b=J+pk0LoaQ9BavgaU/Ru1VS5hLBflbgqE7NnIKObPl0DV693n4eiU6Gv052HZ75ugXl Qv5GJ+8HK79v5RLsWKVihBB9dkDJ1FuWMdX7tuYcFbr5jzI3IcNSR5jniohweYHulB0l H0ArmqQWLqO0Pe2euD6dGle/rLhHrRuse7xT8MUQOQJvMfZPgdIKWqQcoJxwf+Lj3U9o j0Sg4afrTZlIa9zoOnpbJ2adiYta0oexGB25i45tHKEGV1ciD9HRLHRsI+Iy1biTBFye oC0joEKfUBw9m3LEOdpcqp5jGA7+/n2PNAEszln66Urifw9WIo/zyCBYQ+CLVXuZdQa6 jBlA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-transfer-encoding; bh=BOaDnEqH502zTfjjHdvEFB8VYh1GEjOwSxDCHQtVZow=; b=D4iY1DS7evMk1MHyPvu5YNH0lfWkniV4PiOEO0cNo819lEvnAxpVRetElFiVFiEG06 +G0Yf6K/w9B/CQ+O0psszKVWOOb7qRkJi8v6uiulfXIqkSe2ukGBS4yB9iuZRQOmD4Jz GFETzhW30iLguUrSRO/nUtyhNOq8dv4lBA2P7Upj0y4sGkiCB7K8zQufRfUegZPfssHY 9haobMN/K6h8PHtXyVAI+ojloH53NheajVqA2ZUhwk2Qf8T1uwHdNth4f14a2fUDsstN 5tg5aY8qpKrE3ltf7ZuNRR3ajL0tnk3Ghs8BZ3L7xubw9OsHjvdo9GRDfmIeEeAhMZ+V TZ5A== X-Gm-Message-State: AOPr4FXgPiVEENWqClOVJTL1SGCG8gbj1ugdMC754lICBWGD+70Nxl1WHY2b4FmSUHInKSZn6HjlJ2/8plAXGQ== MIME-Version: 1.0 X-Received: by 10.13.216.17 with SMTP id a17mr21785292ywe.313.1462888006012; Tue, 10 May 2016 06:46:46 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Tue, 10 May 2016 06:46:45 -0700 (PDT) In-Reply-To: <87a8jyghhq.fsf@gnu.org> References: <87a8jyghhq.fsf@gnu.org> Date: Tue, 10 May 2016 16:46:45 +0300 Message-ID: Subject: Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources From: Dennis Mungai To: =?UTF-8?Q?Ludovic_Court=C3=A8s?= Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 23504 Cc: 23504@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) Sure, will do. On 10 May 2016 at 16:38, Ludovic Court=C3=A8s wrote: > Dennis Mungai skribis: > >> I'm using git 2.7.4 from a guix profile, and here is my current environm= ent: >> >> guix package -p ~/opt/guix-build-system --search-paths >> warning: failed to install locale: Invalid argument >> export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-bu= ild-system/sbin" >> export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" >> export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" >> export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" >> export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfig" >> export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib/g= uile/2.0/ccache" >> export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >> export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >> export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" >> export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" >> >> which env returns: >> >> which env >> /home/lin/opt/guix-build-system/bin/env >> >> Now, with git clone example over HTTPS: >> >> git clone --branch gn-latest https://github.com/genenetwork/guix-bioinfo= rmatics >> Cloning into 'guix-bioinformatics'... >> fatal: unable to access >> 'https://github.com/genenetwork/guix-bioinformatics/': server >> certificate verification failed. CAfile: none CRLfile: none >> >> The system git does not present such an error. >> >> What could be wrong with my setup? Missing certificates? >> >> At the moment, I've installed the nss-certs package hoping it would be >> a workaround as these are Mozilla certs, but to no avail. > > I think you also need to set the =E2=80=98GIT_SSL_CAINFO=E2=80=99 environ= ment variable. > For instance: > > $ guix package -i nss-certs > $ export SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs" > $ export SSL_CERT_FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-certi= ficates.crt" > $ export GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" > > Can you confirm? > > Thanks, > Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Wed May 11 04:10:58 2016 Received: (at 23504) by debbugs.gnu.org; 11 May 2016 08:10:58 +0000 Received: from localhost ([127.0.0.1]:46638 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0PEQ-00070G-IY for submit@debbugs.gnu.org; Wed, 11 May 2016 04:10:58 -0400 Received: from mail-yw0-f180.google.com ([209.85.161.180]:35629) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0PEO-000702-Mo for 23504@debbugs.gnu.org; Wed, 11 May 2016 04:10:57 -0400 Received: by mail-yw0-f180.google.com with SMTP id g133so35560115ywb.2 for <23504@debbugs.gnu.org>; Wed, 11 May 2016 01:10:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-transfer-encoding; bh=sbjJqgUwE84vZVagsapZXp7oEYGSAjhgmZHcqNNxdqQ=; b=FQAvEUnSQduKvS6nAnu41utnCHkaeDTxcbNxPp1QPBaz+l6A79Y6IAlGRc9Gvc4yZP pLeLHtsNyS+OcpAS6ckseQ3aL8Mo1skgCgmSrj6UsIuNhYHPkRD1G4l025NeI4nRkvXo JK+BcYo45E70bLKIXZLqg8ix+Iv6us/HO/OILe7RzhONORt8r/HsxZbU0uatUp8MXIf3 yz9u2MeuKJQL4hZ6Iz5PSPs1+lPde1kRXVRv+QnvC8Mzx5qrFa88+tMpO3ZzYUb9luz7 RQos1dlleBmDjlof9uq5M+NwBUBgvKSoP4qvbMwjUU3VjmzEKPGSMP3LiKYCBZEk3jUA R8mg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-transfer-encoding; bh=sbjJqgUwE84vZVagsapZXp7oEYGSAjhgmZHcqNNxdqQ=; b=XfFZeWBOJOkHDRC85BWlL/EuQnllqx+KDBWW2KPPrpG5ATL60VQRFLMKYLqXdVYAEw TqjE1WEaRSIGekiGemKRMea3xPDK2vSptK/bryfZZRpzassaIN4+ozF+Va+zzUWOHBsw A8zZWxKUV9wcSXobGd4NnP6Gy1+sOT69sCHc7fZopa+4LOo0t26qd5bdSsKzFJ8Cr8Zd xUPk+6FSfT7K9ShmUWiUvaVSA6vIAQ5lGJ/W7XAve0iB1ZjnDRxIoUr7+168Io/zaidb GsY715Y0v/yaOxlMu3uRvjQS0kGiEy21EWIo6wnsluFAs6HIrPKBZZOF3ur32ruFUm4+ hXlA== X-Gm-Message-State: AOPr4FUJmv8/xlKZwPsmW2OGfO4YFYIf/OcUnF1JhwigIjrXISsErnLpAJirUAjbaJN/yA6L8sZ6sQyexroU3Q== MIME-Version: 1.0 X-Received: by 10.37.98.80 with SMTP id w77mr847189ybb.9.1462954250972; Wed, 11 May 2016 01:10:50 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Wed, 11 May 2016 01:10:50 -0700 (PDT) In-Reply-To: References: <87a8jyghhq.fsf@gnu.org> Date: Wed, 11 May 2016 11:10:50 +0300 Message-ID: Subject: Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources From: Dennis Mungai To: =?UTF-8?Q?Ludovic_Court=C3=A8s?= Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 23504 Cc: 23504@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) Hey there, Sorry for the late reply. I used Pjotr's Guix hacking notes to fix the problem , solution: https://github.com/pjotrp/guix-notes/blob/master/HACKING.org#git-ca-certifi= cates On 10 May 2016 at 16:46, Dennis Mungai wrote: > Sure, will do. > > On 10 May 2016 at 16:38, Ludovic Court=C3=A8s wrote: >> Dennis Mungai skribis: >> >>> I'm using git 2.7.4 from a guix profile, and here is my current environ= ment: >>> >>> guix package -p ~/opt/guix-build-system --search-paths >>> warning: failed to install locale: Invalid argument >>> export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-b= uild-system/sbin" >>> export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" >>> export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" >>> export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" >>> export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfig= " >>> export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib/= guile/2.0/ccache" >>> export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>> export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>> export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" >>> export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" >>> >>> which env returns: >>> >>> which env >>> /home/lin/opt/guix-build-system/bin/env >>> >>> Now, with git clone example over HTTPS: >>> >>> git clone --branch gn-latest https://github.com/genenetwork/guix-bioinf= ormatics >>> Cloning into 'guix-bioinformatics'... >>> fatal: unable to access >>> 'https://github.com/genenetwork/guix-bioinformatics/': server >>> certificate verification failed. CAfile: none CRLfile: none >>> >>> The system git does not present such an error. >>> >>> What could be wrong with my setup? Missing certificates? >>> >>> At the moment, I've installed the nss-certs package hoping it would be >>> a workaround as these are Mozilla certs, but to no avail. >> >> I think you also need to set the =E2=80=98GIT_SSL_CAINFO=E2=80=99 enviro= nment variable. >> For instance: >> >> $ guix package -i nss-certs >> $ export SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs" >> $ export SSL_CERT_FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-cert= ificates.crt" >> $ export GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" >> >> Can you confirm? >> >> Thanks, >> Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Wed May 11 04:16:40 2016 Received: (at 23504) by debbugs.gnu.org; 11 May 2016 08:16:40 +0000 Received: from localhost ([127.0.0.1]:46651 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0PJv-00079c-PV for submit@debbugs.gnu.org; Wed, 11 May 2016 04:16:40 -0400 Received: from mail-yw0-f179.google.com ([209.85.161.179]:34147) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0PJu-00079P-Ca for 23504@debbugs.gnu.org; Wed, 11 May 2016 04:16:38 -0400 Received: by mail-yw0-f179.google.com with SMTP id j74so35650307ywg.1 for <23504@debbugs.gnu.org>; Wed, 11 May 2016 01:16:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-transfer-encoding; bh=uBnmppRHkVwqfPVKg7qrYHW4qUwHeMUfO9cPqPNESUw=; b=Q5mXFWuzJAEJsExoLnAMFNtvjpv0QrQVOvry7wbA9qoODngtq7bzOLRiABIVOrjauj 7lOM6tFOa1qyaoonN7MzZ+VtEBXyGSQe+weUCQO3P1ggBdfXs7vJkJ1c6Rb6FiE5FiQi ynkOCPKiBK3opUUVSbEbntIurD3UoN7OqRhjE8UfiVqKXNcgUqYKjkmLWt+cZXSSnF/1 mmuKfqYeiJy8fzxaCD+mOsavCB6FcVPj96wsKXVLTo6c0i2xyg1qa87P/uLNeRQHB86o TprtwSrmmcJFlofjaxUEz9dVe2CmYfxW361edzavwbvpv7zFrJ4Xjm5Vfb0DVyiwwhKj 0aHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-transfer-encoding; bh=uBnmppRHkVwqfPVKg7qrYHW4qUwHeMUfO9cPqPNESUw=; b=f/Bb7E0Y+7sTHswYK0peV9KD2jKUBAMhxibyUa57Jo9YBy/6Gw+rRZ9Nial6GnjFUA b6b9f3E5iJiLPiVEipTplGKGq5MQW7Svp5E87EWkLwCXVrcXB+uXLO0BF1a0X+uDyimh 0W7T+Aoy7c8z62i/RYsmFL0FdrAimqDpG1lhEnrtqD9+X6I+GRBvbrAFau10+qGluOFV lvnX26vfrdTwui25AVe/euBA0R2Jwj10CzfZ15VkUdHXzOzbVhxuigJZnYhKKGy5bGh/ QmfISGfaSj0Bx4EQgi/odAt+Xf0qBko8HYGnfUAhiyz6QPxAwG3EzzUCJmV6tiVsbLXb /5YQ== X-Gm-Message-State: AOPr4FWUPGta+szGkk42MtEyZZLDjmhHk3uHgEGDizjyW/xE7VkCgEcNrbn7YZr9KT5qi/e0gcDucSCAGXrbvQ== MIME-Version: 1.0 X-Received: by 10.129.79.79 with SMTP id d76mr962526ywb.194.1462954592757; Wed, 11 May 2016 01:16:32 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Wed, 11 May 2016 01:16:32 -0700 (PDT) In-Reply-To: References: <87a8jyghhq.fsf@gnu.org> Date: Wed, 11 May 2016 11:16:32 +0300 Message-ID: Subject: Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources From: Dennis Mungai To: =?UTF-8?Q?Ludovic_Court=C3=A8s?= Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 23504 Cc: 23504@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) Also, your workaround worked (in git, at least). I'm not sure if there are other cases affected by this in the wild. On 11 May 2016 at 11:10, Dennis Mungai wrote: > Hey there, > > Sorry for the late reply. > > I used Pjotr's Guix hacking notes to fix the problem , solution: > > https://github.com/pjotrp/guix-notes/blob/master/HACKING.org#git-ca-certi= ficates > > > > On 10 May 2016 at 16:46, Dennis Mungai wrote: >> Sure, will do. >> >> On 10 May 2016 at 16:38, Ludovic Court=C3=A8s wrote: >>> Dennis Mungai skribis: >>> >>>> I'm using git 2.7.4 from a guix profile, and here is my current enviro= nment: >>>> >>>> guix package -p ~/opt/guix-build-system --search-paths >>>> warning: failed to install locale: Invalid argument >>>> export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-= build-system/sbin" >>>> export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" >>>> export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" >>>> export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" >>>> export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfi= g" >>>> export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib= /guile/2.0/ccache" >>>> export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>>> export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>>> export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" >>>> export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" >>>> >>>> which env returns: >>>> >>>> which env >>>> /home/lin/opt/guix-build-system/bin/env >>>> >>>> Now, with git clone example over HTTPS: >>>> >>>> git clone --branch gn-latest https://github.com/genenetwork/guix-bioin= formatics >>>> Cloning into 'guix-bioinformatics'... >>>> fatal: unable to access >>>> 'https://github.com/genenetwork/guix-bioinformatics/': server >>>> certificate verification failed. CAfile: none CRLfile: none >>>> >>>> The system git does not present such an error. >>>> >>>> What could be wrong with my setup? Missing certificates? >>>> >>>> At the moment, I've installed the nss-certs package hoping it would be >>>> a workaround as these are Mozilla certs, but to no avail. >>> >>> I think you also need to set the =E2=80=98GIT_SSL_CAINFO=E2=80=99 envir= onment variable. >>> For instance: >>> >>> $ guix package -i nss-certs >>> $ export SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs" >>> $ export SSL_CERT_FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-cer= tificates.crt" >>> $ export GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" >>> >>> Can you confirm? >>> >>> Thanks, >>> Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Wed May 11 05:02:22 2016 Received: (at 23504-done) by debbugs.gnu.org; 11 May 2016 09:02:22 +0000 Received: from localhost ([127.0.0.1]:46664 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0Q29-0008Db-OJ for submit@debbugs.gnu.org; Wed, 11 May 2016 05:02:21 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33306) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0Q27-0008DO-QC for 23504-done@debbugs.gnu.org; Wed, 11 May 2016 05:02:20 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b0Q1z-0004Qq-Lw for 23504-done@debbugs.gnu.org; Wed, 11 May 2016 05:02:14 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:48608) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b0Q1z-0004Qb-Iy; Wed, 11 May 2016 05:02:11 -0400 Received: from wifi-eduroam-161119.inria.fr ([128.93.161.119]:34920 helo=pluto) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1b0Q1v-000621-Fk; Wed, 11 May 2016 05:02:10 -0400 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) To: Dennis Mungai Subject: Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources References: <87a8jyghhq.fsf@gnu.org> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 23 =?utf-8?Q?Flor=C3=A9al?= an 224 de la =?utf-8?Q?R?= =?utf-8?Q?=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-unknown-linux-gnu Date: Wed, 11 May 2016 11:02:01 +0200 In-Reply-To: (Dennis Mungai's message of "Wed, 11 May 2016 11:16:32 +0300") Message-ID: <871t59ge7q.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -7.1 (-------) X-Debbugs-Envelope-To: 23504-done Cc: 23504-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -7.1 (-------) Dennis Mungai skribis: > Also, your workaround worked (in git, at least). > > I'm not sure if there are other cases affected by this in the wild. Great, thanks for letting us know. Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Wed May 11 17:55:52 2016 Received: (at 23504) by debbugs.gnu.org; 11 May 2016 21:55:52 +0000 Received: from localhost ([127.0.0.1]:47755 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0c6h-0007wG-Pq for submit@debbugs.gnu.org; Wed, 11 May 2016 17:55:52 -0400 Received: from sinope02.bbbm.mdc-berlin.de ([141.80.25.24]:55262) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0c6f-0007w7-To for 23504@debbugs.gnu.org; Wed, 11 May 2016 17:55:50 -0400 Received: from localhost (localhost [127.0.0.1]) by sinope02.bbbm.mdc-berlin.de (Postfix) with ESMTP id 18B6F31F53; Tue, 10 May 2016 15:11:50 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mdc-berlin.de; h= content-type:content-type:mime-version:message-id:date:date :in-reply-to:subject:subject:from:from:references:received :received:received; s=mdc; t=1462885904; x=1464700305; bh=XNdm7P Y+fy3EuTGyzGuXP0c04ydJTk5gG/pmT5W4J08=; b=AxUaQvfQ0Q3RG2FT1kjAyY aXpjCXeEEhlF6S/uVkFBOUmlIOFILvAhY7oQ6izKG6pn3CQqBCO8h7TSCJIYcxNi aGguAg1K4v+Rvc4ZJFRf+7WGBIt4JWMOQSyrYiN5bdpkPUnpAeB6DfIh0KI8+vxC Q76WiRbOkkkkzgg06JyLg= X-Virus-Scanned: amavisd-new at mdc-berlin.de Received: from sinope02.bbbm.mdc-berlin.de ([127.0.0.1]) by localhost (sinope02.bbbm.mdc-berlin.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m8kCiXnG5ZmL; Tue, 10 May 2016 15:11:44 +0200 (CEST) Received: from HTCAONE.mdc-berlin.net (puck.citx.mdc-berlin.de [141.80.36.101]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by sinope02.bbbm.mdc-berlin.de (Postfix) with ESMTPS; Tue, 10 May 2016 15:11:44 +0200 (CEST) Received: from localhost (141.80.180.135) by HTCAONE.mdc-berlin.net (141.80.180.125) with Microsoft SMTP Server (TLS) id 14.3.279.2; Tue, 10 May 2016 15:11:35 +0200 References: From: Ricardo Wurmus To: Dennis Mungai Subject: Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources In-Reply-To: Date: Tue, 10 May 2016 15:11:34 +0200 Message-ID: MIME-Version: 1.0 Content-Type: text/plain X-Originating-IP: [141.80.180.135] X-TM-AS-Product-Ver: SMEX-11.0.0.4255-8.000.1202-22312.007 X-TM-AS-Result: No--9.281000-0.000000-31 X-TM-AS-User-Approved-Sender: Yes X-TM-AS-User-Blocked-Sender: No X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: 23504 Cc: 23504@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.4 (-) Dennis Mungai writes: > Hello there, > > I'm using git 2.7.4 from a guix profile, and here is my current environment: > > guix package -p ~/opt/guix-build-system --search-paths > warning: failed to install locale: Invalid argument > export PATH="/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-build-system/sbin" > export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" > export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" > export INFOPATH="/home/lin/opt/guix-build-system/share/info" > export PKG_CONFIG_PATH="/home/lin/opt/guix-build-system/lib/pkgconfig" > export GUILE_LOAD_COMPILED_PATH="/home/lin/opt/guix-build-system/lib/guile/2.0/ccache" > export C_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" > export CPLUS_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" > export LIBRARY_PATH="/home/lin/opt/guix-build-system/lib" > export ACLOCAL_PATH="/home/lin/opt/guix-build-system/share/aclocal" > > which env returns: > > which env > /home/lin/opt/guix-build-system/bin/env > > Now, with git clone example over HTTPS: > > git clone --branch gn-latest https://github.com/genenetwork/guix-bioinformatics > Cloning into 'guix-bioinformatics'... > fatal: unable to access > 'https://github.com/genenetwork/guix-bioinformatics/': server > certificate verification failed. CAfile: none CRLfile: none > > The system git does not present such an error. > > What could be wrong with my setup? Missing certificates? Please try this: export GIT_SSL_CAPATH=$HOME/.guix-profile/etc/ssl/certs Assuming that nss-certs has been installed into $HOME/.guix-profile this should be enough to make it work. I wonder how we can make it easier to tell the user that this environment variable must be set. ~~ Ricardo From debbugs-submit-bounces@debbugs.gnu.org Wed May 11 18:09:08 2016 Received: (at 23504) by debbugs.gnu.org; 11 May 2016 22:09:09 +0000 Received: from localhost ([127.0.0.1]:47778 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0cJV-0008GW-J2 for submit@debbugs.gnu.org; Wed, 11 May 2016 18:09:08 -0400 Received: from 93-95-228-168.1984.is ([93.95.228.168]:51748 helo=beleriand.n0.is) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0cIC-0008E3-Uq for 23504@debbugs.gnu.org; Wed, 11 May 2016 18:07:48 -0400 Received: by beleriand.n0.is (OpenSMTPD) with ESMTPSA id c0acb41c TLS version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO for <23504@debbugs.gnu.org>; Wed, 11 May 2016 22:07:41 +0000 (UTC) Date: Wed, 11 May 2016 22:07:38 +0000 From: ng0 To: 23504@debbugs.gnu.org Subject: Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Message-ID: <20160511220737.GA14842@khazad-dum> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="wac7ysb48OaltWcw" Content-Disposition: inline In-Reply-To: X-Spam-Score: 0.4 (/) X-Debbugs-Envelope-To: 23504 X-Mailman-Approved-At: Wed, 11 May 2016 18:09:03 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.4 (/) --wac7ysb48OaltWcw Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2016-05-10(03:11:34+0200), Ricardo Wurmus wrote: >=20 > Dennis Mungai writes: >=20 > > Hello there, > > > > I'm using git 2.7.4 from a guix profile, and here is my current environ= ment: > > > > guix package -p ~/opt/guix-build-system --search-paths > > warning: failed to install locale: Invalid argument > > export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-b= uild-system/sbin" > > export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" > > export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" > > export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" > > export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfig" > > export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib/= guile/2.0/ccache" > > export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" > > export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" > > export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" > > export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" > > > > which env returns: > > > > which env > > /home/lin/opt/guix-build-system/bin/env > > > > Now, with git clone example over HTTPS: > > > > git clone --branch gn-latest https://github.com/genenetwork/guix-bioinf= ormatics > > Cloning into 'guix-bioinformatics'... > > fatal: unable to access > > 'https://github.com/genenetwork/guix-bioinformatics/': server > > certificate verification failed. CAfile: none CRLfile: none > > > > The system git does not present such an error. > > > > What could be wrong with my setup? Missing certificates? >=20 > Please try this: >=20 > export GIT_SSL_CAPATH=3D$HOME/.guix-profile/etc/ssl/certs >=20 > Assuming that nss-certs has been installed into $HOME/.guix-profile this > should be enough to make it work. >=20 > I wonder how we can make it easier to tell the user that this > environment variable must be set. >=20 > ~~ Ricardo Assuming this currently does not exist (I have not checked it), what about a note in the manual, application specific, and maybe something like a message after guix package -i git was run? --=20 =E2=99=A5=E2=92=B6 ng0 --wac7ysb48OaltWcw Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXM60oAAoJEAKilhUMIBgjWQUQAMfNYa8XzJuf07BKae1PrziQ WBWAumGXSoTTKGuOCvraA7Pr2dN4c0bHIabuOhkFLr8gTf+vQ4z5xnuzbTXnjMyt kr9ntJLv8Iwm+5Z7GYk5nmeDnsARPcMI97jtiOUKcscYjQqfPT40dr0bl+T0B6rC tCHxyT3Px5VP3hQuaqU4WIP/Odg5tUrVIGSNV3Qt7govI+ak+8hVP8VHA4lNBJ1V Dujr23nv3i9T409xxE6PY8zyE3P0C/mbVl615Vjts9po3hYliTs/Gf0j9/5NFEjY uJ/4GcHmAkeyivhIcmlwCn2zhsFwKwiv50upJS/8xLep6ct3pJ0byX9FAq7uUl4w tYIKbXOSZtfj4wubjgWkbcGos84yV6XB//zzrlXB6Pnylc2p9rEogl70jwGfuWpy MDExAaB55/uady5qcH7BxxwMACLdQWsBr3CVCnatpQ59eVB+FZj2rYdYmBv09Ie/ pFbOC/q7+a03D7nZK1kH/gKRNQF1sJYp3pHCUBDU2+xa5FXzsXPpzHjQ69XJIwbi qtrL28TO1/hFoPbO3Skk/Sxn7BaBhEeDyxejJ8fu2ZpQbu7ccieT4aBwjBWcgPoE AHCbX0/+DFNwLR/LBSikS2/nrTzQdmQX8RINm84iR6dC4/MGlq7+31YUWhXugR1c JD4LNLEdhelhT2XUy9DW =puNm -----END PGP SIGNATURE----- --wac7ysb48OaltWcw-- From unknown Fri Aug 15 18:11:24 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Thu, 09 Jun 2016 11:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator