From unknown Thu Aug 14 22:18:03 2025 X-Loop: help-debbugs@gnu.org Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Resent-From: Dennis Mungai Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 10 May 2016 12:31:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 23504 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 23504@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.146288344512283 (code B ref -1); Tue, 10 May 2016 12:31:02 +0000 Received: (at submit) by debbugs.gnu.org; 10 May 2016 12:30:45 +0000 Received: from localhost ([127.0.0.1]:45231 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b06oH-0003C3-8o for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:45 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33516) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b06oF-0003Br-LF for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:44 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b06o6-0000bt-5a for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:38 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_20,FREEMAIL_FROM, T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:37724) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b06o6-0000bo-2b for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:34 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:52712) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b06o3-0003IM-CJ for bug-guix@gnu.org; Tue, 10 May 2016 08:30:32 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b06nw-0000bB-8L for bug-guix@gnu.org; Tue, 10 May 2016 08:30:30 -0400 Received: from mail-yw0-x22c.google.com ([2607:f8b0:4002:c05::22c]:33571) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b06nw-0000b4-4J for bug-guix@gnu.org; Tue, 10 May 2016 08:30:24 -0400 Received: by mail-yw0-x22c.google.com with SMTP id t10so10978302ywa.0 for ; Tue, 10 May 2016 05:30:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=bf7FuDRYETpM74WxcA2fZInml580UVtD+30Dn58TMWU=; b=da6pzBZ+AeMQ+dUQ7p2japSCCZZBuqDS+dKE+OtoMxJ05pM62etNrxcOBuQh4+2p8x qd79yvEMTohy64HjghfBFzm8X6O1hNlWA5/71jR4PDGRzWmfFxJ9kgQd7kK3bt9wTXuB qusyB4/ITAmVrLWM3duwS4H+zYgaRL6YW25Iefivot+dgpukbAZykf6wD4rCsB5TJXd7 g8VpxNVGn7JhXsE88PRN8cH9llcWbJHrz5rv1xRafeMLaeUSwe/e1qB95jOHiJGGkUGj MQHaCO68GV0Fu4refqwu5jVHuiOvPJ8BDjmiJE7+qlB4goNF0SxghevI98kmrcrk3AKS uwqg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=bf7FuDRYETpM74WxcA2fZInml580UVtD+30Dn58TMWU=; b=B9JlTjTxxFASzNGuyLY5TH6lezRkxK6fp2j9I8gbaq5r4Vy2UKuOU6N71ZWcQ44ztL VCWjgocQKTxmB0DzqBLSV13KegZoLJgQ5aI3dUg6q+ueF2hrhMHTMSS+a93lcUa37cJo mO0B2aYXGg5VIQiqGNvjHJ1K5kE+1tABZbK7TAx7bamPwcB0Ga4qcBZR8pBbo5NYVF3X c413VViGUXh5U7ZeGf8zEvieeJEATnkWGbk6Jgcd4hSF0c/ZuhAZjpPzjbfMb79MIqpE vGPI9Canf/2Oz+IohVyXu6h5//2iobjz8EoHPrTJ1kvfY3S8DvS62avIniitOANF0wp3 4h1Q== X-Gm-Message-State: AOPr4FU2vG6T2tJBUXkAzUWOUDFlGeLDphy2zflVmxxKjKtD739zZjWyWpwlsRUCAJ+q1vtbpaRllj2X0+UGnA== MIME-Version: 1.0 X-Received: by 10.13.206.131 with SMTP id q125mr21903856ywd.54.1462883422249; Tue, 10 May 2016 05:30:22 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Tue, 10 May 2016 05:30:22 -0700 (PDT) Date: Tue, 10 May 2016 15:30:22 +0300 Message-ID: From: Dennis Mungai Content-Type: text/plain; charset=UTF-8 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) Hello there, I'm using git 2.7.4 from a guix profile, and here is my current environment: guix package -p ~/opt/guix-build-system --search-paths warning: failed to install locale: Invalid argument export PATH="/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-build-system/sbin" export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" export INFOPATH="/home/lin/opt/guix-build-system/share/info" export PKG_CONFIG_PATH="/home/lin/opt/guix-build-system/lib/pkgconfig" export GUILE_LOAD_COMPILED_PATH="/home/lin/opt/guix-build-system/lib/guile/2.0/ccache" export C_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" export CPLUS_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" export LIBRARY_PATH="/home/lin/opt/guix-build-system/lib" export ACLOCAL_PATH="/home/lin/opt/guix-build-system/share/aclocal" which env returns: which env /home/lin/opt/guix-build-system/bin/env Now, with git clone example over HTTPS: git clone --branch gn-latest https://github.com/genenetwork/guix-bioinformatics Cloning into 'guix-bioinformatics'... fatal: unable to access 'https://github.com/genenetwork/guix-bioinformatics/': server certificate verification failed. CAfile: none CRLfile: none The system git does not present such an error. What could be wrong with my setup? Missing certificates? At the moment, I've installed the nss-certs package hoping it would be a workaround as these are Mozilla certs, but to no avail. Thanks and regards, Dennis. From unknown Thu Aug 14 22:18:03 2025 X-Loop: help-debbugs@gnu.org Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Resent-From: Dennis Mungai Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 10 May 2016 13:37:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 23504 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ricardo Wurmus Cc: 23504@debbugs.gnu.org Received: via spool by 23504-submit@debbugs.gnu.org id=B23504.146288737318224 (code B ref 23504); Tue, 10 May 2016 13:37:01 +0000 Received: (at 23504) by debbugs.gnu.org; 10 May 2016 13:36:13 +0000 Received: from localhost ([127.0.0.1]:45283 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07pc-0004js-QM for submit@debbugs.gnu.org; Tue, 10 May 2016 09:36:13 -0400 Received: from mail-yw0-f194.google.com ([209.85.161.194]:34136) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07pb-0004jf-Cu for 23504@debbugs.gnu.org; Tue, 10 May 2016 09:36:11 -0400 Received: by mail-yw0-f194.google.com with SMTP id i22so1063303ywc.1 for <23504@debbugs.gnu.org>; Tue, 10 May 2016 06:36:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=08kdaNZhVfF6GvL5tZOwOEdWwsrL0P4sSuTnptHkcjU=; b=LM9Eh772wdZtnbl0ALzULVigdWpP4xCFbpkKSoHk1oYr/5j49kKmchQZrypcy/F3NZ WAvuaqRC0MvuzTH3IY118L8EdCmQQ4lSmp0keClOM6SjKZh1b+/iZuForCCQzj56M3Xe KRoHeq3Zgk0W/HMuAX2q93Xs9TOxueP0mWnbDVWo6Gh3QtCWac3IcQURyqdUPKLt6idN jSunT5OI4dhFnzx7gRfdD3tdyZRqKpVmI+reAdUeQ0R7eTbu/Y5n0KfwAwGgPfOj0iKA WCznb8T7KN0DnrUfnyn72UDybf8jZ8tybZZGi9YMTLI06HEo/u3AhnOl0+TyFVWUsd0V EbsA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=08kdaNZhVfF6GvL5tZOwOEdWwsrL0P4sSuTnptHkcjU=; b=ZjYtvoVva5QXEU4T5a/4Q0yc2vprRe32wDT9mINxf2KHDeIWQhNOquu1aakJE0nhNw CZaPzMBc5AZQz3U4Tjx6TwOi8/3aWGnoiNvGK2PkzWiEoVu2yDsVZpmB32HB5SYgy8gB KvrSVKVQyeoNuUXeM8E1H2FBJW8kvlVcvbnbx+/VKnACxeBVGFdhiPYp2NLunTaeVqT7 +p1OOgr3GKTMK+wGQkcHuaVxyT+y65Ly636QllzCdTT+48L+b6qofhQphj8kO7eLARfF qNBegGmGIe37t0iIi/gWGE5e7lFkz4iA6eHkKI3U+a97mEUR7FL3nMyB5WgpF/wiKdkl zHOQ== X-Gm-Message-State: AOPr4FUmz57/OQKBM4yz9//c+ZMNiuvM/AK25zIU5pBk13QjlwuRcUFmIeu/+WxituszUoE//1pV+aBvZpueSw== MIME-Version: 1.0 X-Received: by 10.129.111.196 with SMTP id k187mr22816403ywc.11.1462887365766; Tue, 10 May 2016 06:36:05 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Tue, 10 May 2016 06:36:05 -0700 (PDT) In-Reply-To: References: Date: Tue, 10 May 2016 16:36:05 +0300 Message-ID: From: Dennis Mungai Content-Type: text/plain; charset=UTF-8 X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) Hmmm, thanks ;-) Perhaps one could set the installation of nss-certs as: 1. A dependency to git, and 2. To print out the environment variable export GTI_SSL_CAPATH once nss-certs is installed. I have seen packages such as gtk3 on guix trigger similar variables to be set when they are installed and loaded from a specific guix profile, as such: guix package -p ~/some-profile -i -some-gtk3-app And then this would be recommended when calling up guix package -p ~/some-profile --search-paths Taken from the email above as an example: export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" So yeah, it can be done ;-) On 10 May 2016 at 16:11, Ricardo Wurmus wrote: > > Dennis Mungai writes: > >> Hello there, >> >> I'm using git 2.7.4 from a guix profile, and here is my current environment: >> >> guix package -p ~/opt/guix-build-system --search-paths >> warning: failed to install locale: Invalid argument >> export PATH="/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-build-system/sbin" >> export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" >> export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" >> export INFOPATH="/home/lin/opt/guix-build-system/share/info" >> export PKG_CONFIG_PATH="/home/lin/opt/guix-build-system/lib/pkgconfig" >> export GUILE_LOAD_COMPILED_PATH="/home/lin/opt/guix-build-system/lib/guile/2.0/ccache" >> export C_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" >> export CPLUS_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" >> export LIBRARY_PATH="/home/lin/opt/guix-build-system/lib" >> export ACLOCAL_PATH="/home/lin/opt/guix-build-system/share/aclocal" >> >> which env returns: >> >> which env >> /home/lin/opt/guix-build-system/bin/env >> >> Now, with git clone example over HTTPS: >> >> git clone --branch gn-latest https://github.com/genenetwork/guix-bioinformatics >> Cloning into 'guix-bioinformatics'... >> fatal: unable to access >> 'https://github.com/genenetwork/guix-bioinformatics/': server >> certificate verification failed. CAfile: none CRLfile: none >> >> The system git does not present such an error. >> >> What could be wrong with my setup? Missing certificates? > > Please try this: > > export GIT_SSL_CAPATH=$HOME/.guix-profile/etc/ssl/certs > > Assuming that nss-certs has been installed into $HOME/.guix-profile this > should be enough to make it work. > > I wonder how we can make it easier to tell the user that this > environment variable must be set. > > ~~ Ricardo From unknown Thu Aug 14 22:18:03 2025 X-Loop: help-debbugs@gnu.org Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Resent-From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=) Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 10 May 2016 13:40:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 23504 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Dennis Mungai Cc: 23504@debbugs.gnu.org Received: via spool by 23504-submit@debbugs.gnu.org id=B23504.146288755418510 (code B ref 23504); Tue, 10 May 2016 13:40:01 +0000 Received: (at 23504) by debbugs.gnu.org; 10 May 2016 13:39:14 +0000 Received: from localhost ([127.0.0.1]:45293 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07sX-0004oS-O8 for submit@debbugs.gnu.org; Tue, 10 May 2016 09:39:13 -0400 Received: from eggs.gnu.org ([208.118.235.92]:49915) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07sW-0004oH-Ax for 23504@debbugs.gnu.org; Tue, 10 May 2016 09:39:12 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b07sO-00089Q-6F for 23504@debbugs.gnu.org; Tue, 10 May 2016 09:39:07 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-4.0 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:58307) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b07sO-000899-2b; Tue, 10 May 2016 09:39:04 -0400 Received: from wifi-eduroam-161119.inria.fr ([128.93.161.119]:32984 helo=pluto) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1b07sL-0002lr-F9; Tue, 10 May 2016 09:39:02 -0400 From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=) References: X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 22 =?UTF-8?Q?Flor=C3=A9al?= an 224 de la =?UTF-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-unknown-linux-gnu Date: Tue, 10 May 2016 15:38:57 +0200 In-Reply-To: (Dennis Mungai's message of "Tue, 10 May 2016 15:30:22 +0300") Message-ID: <87a8jyghhq.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -7.1 (-------) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -7.1 (-------) Dennis Mungai skribis: > I'm using git 2.7.4 from a guix profile, and here is my current environme= nt: > > guix package -p ~/opt/guix-build-system --search-paths > warning: failed to install locale: Invalid argument > export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-bui= ld-system/sbin" > export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" > export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" > export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" > export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfig" > export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib/gu= ile/2.0/ccache" > export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" > export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" > export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" > export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" > > which env returns: > > which env > /home/lin/opt/guix-build-system/bin/env > > Now, with git clone example over HTTPS: > > git clone --branch gn-latest https://github.com/genenetwork/guix-bioinfor= matics > Cloning into 'guix-bioinformatics'... > fatal: unable to access > 'https://github.com/genenetwork/guix-bioinformatics/': server > certificate verification failed. CAfile: none CRLfile: none > > The system git does not present such an error. > > What could be wrong with my setup? Missing certificates? > > At the moment, I've installed the nss-certs package hoping it would be > a workaround as these are Mozilla certs, but to no avail. I think you also need to set the =E2=80=98GIT_SSL_CAINFO=E2=80=99 environme= nt variable. For instance: $ guix package -i nss-certs $ export SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs" $ export SSL_CERT_FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-certifi= cates.crt" $ export GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" Can you confirm? Thanks, Ludo=E2=80=99. From unknown Thu Aug 14 22:18:03 2025 X-Loop: help-debbugs@gnu.org Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Resent-From: Dennis Mungai Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 10 May 2016 13:47:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 23504 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 23504@debbugs.gnu.org Received: via spool by 23504-submit@debbugs.gnu.org id=B23504.146288801419178 (code B ref 23504); Tue, 10 May 2016 13:47:01 +0000 Received: (at 23504) by debbugs.gnu.org; 10 May 2016 13:46:54 +0000 Received: from localhost ([127.0.0.1]:45297 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07zx-0004zE-Iy for submit@debbugs.gnu.org; Tue, 10 May 2016 09:46:54 -0400 Received: from mail-yw0-f194.google.com ([209.85.161.194]:35040) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b07zv-0004z1-Fo for 23504@debbugs.gnu.org; Tue, 10 May 2016 09:46:51 -0400 Received: by mail-yw0-f194.google.com with SMTP id v81so1086191ywa.2 for <23504@debbugs.gnu.org>; Tue, 10 May 2016 06:46:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-transfer-encoding; bh=BOaDnEqH502zTfjjHdvEFB8VYh1GEjOwSxDCHQtVZow=; b=J+pk0LoaQ9BavgaU/Ru1VS5hLBflbgqE7NnIKObPl0DV693n4eiU6Gv052HZ75ugXl Qv5GJ+8HK79v5RLsWKVihBB9dkDJ1FuWMdX7tuYcFbr5jzI3IcNSR5jniohweYHulB0l H0ArmqQWLqO0Pe2euD6dGle/rLhHrRuse7xT8MUQOQJvMfZPgdIKWqQcoJxwf+Lj3U9o j0Sg4afrTZlIa9zoOnpbJ2adiYta0oexGB25i45tHKEGV1ciD9HRLHRsI+Iy1biTBFye oC0joEKfUBw9m3LEOdpcqp5jGA7+/n2PNAEszln66Urifw9WIo/zyCBYQ+CLVXuZdQa6 jBlA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-transfer-encoding; bh=BOaDnEqH502zTfjjHdvEFB8VYh1GEjOwSxDCHQtVZow=; b=D4iY1DS7evMk1MHyPvu5YNH0lfWkniV4PiOEO0cNo819lEvnAxpVRetElFiVFiEG06 +G0Yf6K/w9B/CQ+O0psszKVWOOb7qRkJi8v6uiulfXIqkSe2ukGBS4yB9iuZRQOmD4Jz GFETzhW30iLguUrSRO/nUtyhNOq8dv4lBA2P7Upj0y4sGkiCB7K8zQufRfUegZPfssHY 9haobMN/K6h8PHtXyVAI+ojloH53NheajVqA2ZUhwk2Qf8T1uwHdNth4f14a2fUDsstN 5tg5aY8qpKrE3ltf7ZuNRR3ajL0tnk3Ghs8BZ3L7xubw9OsHjvdo9GRDfmIeEeAhMZ+V TZ5A== X-Gm-Message-State: AOPr4FXgPiVEENWqClOVJTL1SGCG8gbj1ugdMC754lICBWGD+70Nxl1WHY2b4FmSUHInKSZn6HjlJ2/8plAXGQ== MIME-Version: 1.0 X-Received: by 10.13.216.17 with SMTP id a17mr21785292ywe.313.1462888006012; Tue, 10 May 2016 06:46:46 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Tue, 10 May 2016 06:46:45 -0700 (PDT) In-Reply-To: <87a8jyghhq.fsf@gnu.org> References: <87a8jyghhq.fsf@gnu.org> Date: Tue, 10 May 2016 16:46:45 +0300 Message-ID: From: Dennis Mungai Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) Sure, will do. On 10 May 2016 at 16:38, Ludovic Court=C3=A8s wrote: > Dennis Mungai skribis: > >> I'm using git 2.7.4 from a guix profile, and here is my current environm= ent: >> >> guix package -p ~/opt/guix-build-system --search-paths >> warning: failed to install locale: Invalid argument >> export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-bu= ild-system/sbin" >> export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" >> export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" >> export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" >> export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfig" >> export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib/g= uile/2.0/ccache" >> export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >> export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >> export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" >> export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" >> >> which env returns: >> >> which env >> /home/lin/opt/guix-build-system/bin/env >> >> Now, with git clone example over HTTPS: >> >> git clone --branch gn-latest https://github.com/genenetwork/guix-bioinfo= rmatics >> Cloning into 'guix-bioinformatics'... >> fatal: unable to access >> 'https://github.com/genenetwork/guix-bioinformatics/': server >> certificate verification failed. CAfile: none CRLfile: none >> >> The system git does not present such an error. >> >> What could be wrong with my setup? Missing certificates? >> >> At the moment, I've installed the nss-certs package hoping it would be >> a workaround as these are Mozilla certs, but to no avail. > > I think you also need to set the =E2=80=98GIT_SSL_CAINFO=E2=80=99 environ= ment variable. > For instance: > > $ guix package -i nss-certs > $ export SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs" > $ export SSL_CERT_FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-certi= ficates.crt" > $ export GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" > > Can you confirm? > > Thanks, > Ludo=E2=80=99. From unknown Thu Aug 14 22:18:03 2025 X-Loop: help-debbugs@gnu.org Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Resent-From: Dennis Mungai Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 11 May 2016 08:11:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 23504 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 23504@debbugs.gnu.org Received: via spool by 23504-submit@debbugs.gnu.org id=B23504.146295425826928 (code B ref 23504); Wed, 11 May 2016 08:11:02 +0000 Received: (at 23504) by debbugs.gnu.org; 11 May 2016 08:10:58 +0000 Received: from localhost ([127.0.0.1]:46638 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0PEQ-00070G-IY for submit@debbugs.gnu.org; Wed, 11 May 2016 04:10:58 -0400 Received: from mail-yw0-f180.google.com ([209.85.161.180]:35629) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0PEO-000702-Mo for 23504@debbugs.gnu.org; Wed, 11 May 2016 04:10:57 -0400 Received: by mail-yw0-f180.google.com with SMTP id g133so35560115ywb.2 for <23504@debbugs.gnu.org>; Wed, 11 May 2016 01:10:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-transfer-encoding; bh=sbjJqgUwE84vZVagsapZXp7oEYGSAjhgmZHcqNNxdqQ=; b=FQAvEUnSQduKvS6nAnu41utnCHkaeDTxcbNxPp1QPBaz+l6A79Y6IAlGRc9Gvc4yZP pLeLHtsNyS+OcpAS6ckseQ3aL8Mo1skgCgmSrj6UsIuNhYHPkRD1G4l025NeI4nRkvXo JK+BcYo45E70bLKIXZLqg8ix+Iv6us/HO/OILe7RzhONORt8r/HsxZbU0uatUp8MXIf3 yz9u2MeuKJQL4hZ6Iz5PSPs1+lPde1kRXVRv+QnvC8Mzx5qrFa88+tMpO3ZzYUb9luz7 RQos1dlleBmDjlof9uq5M+NwBUBgvKSoP4qvbMwjUU3VjmzEKPGSMP3LiKYCBZEk3jUA R8mg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-transfer-encoding; bh=sbjJqgUwE84vZVagsapZXp7oEYGSAjhgmZHcqNNxdqQ=; b=XfFZeWBOJOkHDRC85BWlL/EuQnllqx+KDBWW2KPPrpG5ATL60VQRFLMKYLqXdVYAEw TqjE1WEaRSIGekiGemKRMea3xPDK2vSptK/bryfZZRpzassaIN4+ozF+Va+zzUWOHBsw A8zZWxKUV9wcSXobGd4NnP6Gy1+sOT69sCHc7fZopa+4LOo0t26qd5bdSsKzFJ8Cr8Zd xUPk+6FSfT7K9ShmUWiUvaVSA6vIAQ5lGJ/W7XAve0iB1ZjnDRxIoUr7+168Io/zaidb GsY715Y0v/yaOxlMu3uRvjQS0kGiEy21EWIo6wnsluFAs6HIrPKBZZOF3ur32ruFUm4+ hXlA== X-Gm-Message-State: AOPr4FUJmv8/xlKZwPsmW2OGfO4YFYIf/OcUnF1JhwigIjrXISsErnLpAJirUAjbaJN/yA6L8sZ6sQyexroU3Q== MIME-Version: 1.0 X-Received: by 10.37.98.80 with SMTP id w77mr847189ybb.9.1462954250972; Wed, 11 May 2016 01:10:50 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Wed, 11 May 2016 01:10:50 -0700 (PDT) In-Reply-To: References: <87a8jyghhq.fsf@gnu.org> Date: Wed, 11 May 2016 11:10:50 +0300 Message-ID: From: Dennis Mungai Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) Hey there, Sorry for the late reply. I used Pjotr's Guix hacking notes to fix the problem , solution: https://github.com/pjotrp/guix-notes/blob/master/HACKING.org#git-ca-certifi= cates On 10 May 2016 at 16:46, Dennis Mungai wrote: > Sure, will do. > > On 10 May 2016 at 16:38, Ludovic Court=C3=A8s wrote: >> Dennis Mungai skribis: >> >>> I'm using git 2.7.4 from a guix profile, and here is my current environ= ment: >>> >>> guix package -p ~/opt/guix-build-system --search-paths >>> warning: failed to install locale: Invalid argument >>> export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-b= uild-system/sbin" >>> export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" >>> export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" >>> export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" >>> export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfig= " >>> export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib/= guile/2.0/ccache" >>> export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>> export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>> export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" >>> export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" >>> >>> which env returns: >>> >>> which env >>> /home/lin/opt/guix-build-system/bin/env >>> >>> Now, with git clone example over HTTPS: >>> >>> git clone --branch gn-latest https://github.com/genenetwork/guix-bioinf= ormatics >>> Cloning into 'guix-bioinformatics'... >>> fatal: unable to access >>> 'https://github.com/genenetwork/guix-bioinformatics/': server >>> certificate verification failed. CAfile: none CRLfile: none >>> >>> The system git does not present such an error. >>> >>> What could be wrong with my setup? Missing certificates? >>> >>> At the moment, I've installed the nss-certs package hoping it would be >>> a workaround as these are Mozilla certs, but to no avail. >> >> I think you also need to set the =E2=80=98GIT_SSL_CAINFO=E2=80=99 enviro= nment variable. >> For instance: >> >> $ guix package -i nss-certs >> $ export SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs" >> $ export SSL_CERT_FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-cert= ificates.crt" >> $ export GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" >> >> Can you confirm? >> >> Thanks, >> Ludo=E2=80=99. From unknown Thu Aug 14 22:18:03 2025 X-Loop: help-debbugs@gnu.org Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Resent-From: Dennis Mungai Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 11 May 2016 08:17:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 23504 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 23504@debbugs.gnu.org Received: via spool by 23504-submit@debbugs.gnu.org id=B23504.146295460027508 (code B ref 23504); Wed, 11 May 2016 08:17:02 +0000 Received: (at 23504) by debbugs.gnu.org; 11 May 2016 08:16:40 +0000 Received: from localhost ([127.0.0.1]:46651 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0PJv-00079c-PV for submit@debbugs.gnu.org; Wed, 11 May 2016 04:16:40 -0400 Received: from mail-yw0-f179.google.com ([209.85.161.179]:34147) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0PJu-00079P-Ca for 23504@debbugs.gnu.org; Wed, 11 May 2016 04:16:38 -0400 Received: by mail-yw0-f179.google.com with SMTP id j74so35650307ywg.1 for <23504@debbugs.gnu.org>; Wed, 11 May 2016 01:16:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-transfer-encoding; bh=uBnmppRHkVwqfPVKg7qrYHW4qUwHeMUfO9cPqPNESUw=; b=Q5mXFWuzJAEJsExoLnAMFNtvjpv0QrQVOvry7wbA9qoODngtq7bzOLRiABIVOrjauj 7lOM6tFOa1qyaoonN7MzZ+VtEBXyGSQe+weUCQO3P1ggBdfXs7vJkJ1c6Rb6FiE5FiQi ynkOCPKiBK3opUUVSbEbntIurD3UoN7OqRhjE8UfiVqKXNcgUqYKjkmLWt+cZXSSnF/1 mmuKfqYeiJy8fzxaCD+mOsavCB6FcVPj96wsKXVLTo6c0i2xyg1qa87P/uLNeRQHB86o TprtwSrmmcJFlofjaxUEz9dVe2CmYfxW361edzavwbvpv7zFrJ4Xjm5Vfb0DVyiwwhKj 0aHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-transfer-encoding; bh=uBnmppRHkVwqfPVKg7qrYHW4qUwHeMUfO9cPqPNESUw=; b=f/Bb7E0Y+7sTHswYK0peV9KD2jKUBAMhxibyUa57Jo9YBy/6Gw+rRZ9Nial6GnjFUA b6b9f3E5iJiLPiVEipTplGKGq5MQW7Svp5E87EWkLwCXVrcXB+uXLO0BF1a0X+uDyimh 0W7T+Aoy7c8z62i/RYsmFL0FdrAimqDpG1lhEnrtqD9+X6I+GRBvbrAFau10+qGluOFV lvnX26vfrdTwui25AVe/euBA0R2Jwj10CzfZ15VkUdHXzOzbVhxuigJZnYhKKGy5bGh/ QmfISGfaSj0Bx4EQgi/odAt+Xf0qBko8HYGnfUAhiyz6QPxAwG3EzzUCJmV6tiVsbLXb /5YQ== X-Gm-Message-State: AOPr4FWUPGta+szGkk42MtEyZZLDjmhHk3uHgEGDizjyW/xE7VkCgEcNrbn7YZr9KT5qi/e0gcDucSCAGXrbvQ== MIME-Version: 1.0 X-Received: by 10.129.79.79 with SMTP id d76mr962526ywb.194.1462954592757; Wed, 11 May 2016 01:16:32 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Wed, 11 May 2016 01:16:32 -0700 (PDT) In-Reply-To: References: <87a8jyghhq.fsf@gnu.org> Date: Wed, 11 May 2016 11:16:32 +0300 Message-ID: From: Dennis Mungai Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) Also, your workaround worked (in git, at least). I'm not sure if there are other cases affected by this in the wild. On 11 May 2016 at 11:10, Dennis Mungai wrote: > Hey there, > > Sorry for the late reply. > > I used Pjotr's Guix hacking notes to fix the problem , solution: > > https://github.com/pjotrp/guix-notes/blob/master/HACKING.org#git-ca-certi= ficates > > > > On 10 May 2016 at 16:46, Dennis Mungai wrote: >> Sure, will do. >> >> On 10 May 2016 at 16:38, Ludovic Court=C3=A8s wrote: >>> Dennis Mungai skribis: >>> >>>> I'm using git 2.7.4 from a guix profile, and here is my current enviro= nment: >>>> >>>> guix package -p ~/opt/guix-build-system --search-paths >>>> warning: failed to install locale: Invalid argument >>>> export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-= build-system/sbin" >>>> export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" >>>> export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" >>>> export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" >>>> export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfi= g" >>>> export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib= /guile/2.0/ccache" >>>> export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>>> export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>>> export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" >>>> export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" >>>> >>>> which env returns: >>>> >>>> which env >>>> /home/lin/opt/guix-build-system/bin/env >>>> >>>> Now, with git clone example over HTTPS: >>>> >>>> git clone --branch gn-latest https://github.com/genenetwork/guix-bioin= formatics >>>> Cloning into 'guix-bioinformatics'... >>>> fatal: unable to access >>>> 'https://github.com/genenetwork/guix-bioinformatics/': server >>>> certificate verification failed. CAfile: none CRLfile: none >>>> >>>> The system git does not present such an error. >>>> >>>> What could be wrong with my setup? Missing certificates? >>>> >>>> At the moment, I've installed the nss-certs package hoping it would be >>>> a workaround as these are Mozilla certs, but to no avail. >>> >>> I think you also need to set the =E2=80=98GIT_SSL_CAINFO=E2=80=99 envir= onment variable. >>> For instance: >>> >>> $ guix package -i nss-certs >>> $ export SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs" >>> $ export SSL_CERT_FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-cer= tificates.crt" >>> $ export GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" >>> >>> Can you confirm? >>> >>> Thanks, >>> Ludo=E2=80=99. From unknown Thu Aug 14 22:18:03 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Dennis Mungai Subject: bug#23504: closed (Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources) Message-ID: References: <871t59ge7q.fsf@gnu.org> X-Gnu-PR-Message: they-closed 23504 X-Gnu-PR-Package: guix Reply-To: 23504@debbugs.gnu.org Date: Wed, 11 May 2016 09:03:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1462957382-31647-1" This is a multi-part message in MIME format... ------------=_1462957382-31647-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #23504: git 2.7.4 fails to clone repositories over HTTPS sources which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 23504@debbugs.gnu.org. --=20 23504: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D23504 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1462957382-31647-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 23504-done) by debbugs.gnu.org; 11 May 2016 09:02:22 +0000 Received: from localhost ([127.0.0.1]:46664 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0Q29-0008Db-OJ for submit@debbugs.gnu.org; Wed, 11 May 2016 05:02:21 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33306) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0Q27-0008DO-QC for 23504-done@debbugs.gnu.org; Wed, 11 May 2016 05:02:20 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b0Q1z-0004Qq-Lw for 23504-done@debbugs.gnu.org; Wed, 11 May 2016 05:02:14 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:48608) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b0Q1z-0004Qb-Iy; Wed, 11 May 2016 05:02:11 -0400 Received: from wifi-eduroam-161119.inria.fr ([128.93.161.119]:34920 helo=pluto) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1b0Q1v-000621-Fk; Wed, 11 May 2016 05:02:10 -0400 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) To: Dennis Mungai Subject: Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources References: <87a8jyghhq.fsf@gnu.org> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 23 =?utf-8?Q?Flor=C3=A9al?= an 224 de la =?utf-8?Q?R?= =?utf-8?Q?=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-unknown-linux-gnu Date: Wed, 11 May 2016 11:02:01 +0200 In-Reply-To: (Dennis Mungai's message of "Wed, 11 May 2016 11:16:32 +0300") Message-ID: <871t59ge7q.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -7.1 (-------) X-Debbugs-Envelope-To: 23504-done Cc: 23504-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -7.1 (-------) Dennis Mungai skribis: > Also, your workaround worked (in git, at least). > > I'm not sure if there are other cases affected by this in the wild. Great, thanks for letting us know. Ludo=E2=80=99. ------------=_1462957382-31647-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 10 May 2016 12:30:45 +0000 Received: from localhost ([127.0.0.1]:45231 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b06oH-0003C3-8o for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:45 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33516) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b06oF-0003Br-LF for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:44 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b06o6-0000bt-5a for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:38 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_20,FREEMAIL_FROM, T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:37724) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b06o6-0000bo-2b for submit@debbugs.gnu.org; Tue, 10 May 2016 08:30:34 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:52712) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b06o3-0003IM-CJ for bug-guix@gnu.org; Tue, 10 May 2016 08:30:32 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b06nw-0000bB-8L for bug-guix@gnu.org; Tue, 10 May 2016 08:30:30 -0400 Received: from mail-yw0-x22c.google.com ([2607:f8b0:4002:c05::22c]:33571) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b06nw-0000b4-4J for bug-guix@gnu.org; Tue, 10 May 2016 08:30:24 -0400 Received: by mail-yw0-x22c.google.com with SMTP id t10so10978302ywa.0 for ; Tue, 10 May 2016 05:30:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=bf7FuDRYETpM74WxcA2fZInml580UVtD+30Dn58TMWU=; b=da6pzBZ+AeMQ+dUQ7p2japSCCZZBuqDS+dKE+OtoMxJ05pM62etNrxcOBuQh4+2p8x qd79yvEMTohy64HjghfBFzm8X6O1hNlWA5/71jR4PDGRzWmfFxJ9kgQd7kK3bt9wTXuB qusyB4/ITAmVrLWM3duwS4H+zYgaRL6YW25Iefivot+dgpukbAZykf6wD4rCsB5TJXd7 g8VpxNVGn7JhXsE88PRN8cH9llcWbJHrz5rv1xRafeMLaeUSwe/e1qB95jOHiJGGkUGj MQHaCO68GV0Fu4refqwu5jVHuiOvPJ8BDjmiJE7+qlB4goNF0SxghevI98kmrcrk3AKS uwqg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=bf7FuDRYETpM74WxcA2fZInml580UVtD+30Dn58TMWU=; b=B9JlTjTxxFASzNGuyLY5TH6lezRkxK6fp2j9I8gbaq5r4Vy2UKuOU6N71ZWcQ44ztL VCWjgocQKTxmB0DzqBLSV13KegZoLJgQ5aI3dUg6q+ueF2hrhMHTMSS+a93lcUa37cJo mO0B2aYXGg5VIQiqGNvjHJ1K5kE+1tABZbK7TAx7bamPwcB0Ga4qcBZR8pBbo5NYVF3X c413VViGUXh5U7ZeGf8zEvieeJEATnkWGbk6Jgcd4hSF0c/ZuhAZjpPzjbfMb79MIqpE vGPI9Canf/2Oz+IohVyXu6h5//2iobjz8EoHPrTJ1kvfY3S8DvS62avIniitOANF0wp3 4h1Q== X-Gm-Message-State: AOPr4FU2vG6T2tJBUXkAzUWOUDFlGeLDphy2zflVmxxKjKtD739zZjWyWpwlsRUCAJ+q1vtbpaRllj2X0+UGnA== MIME-Version: 1.0 X-Received: by 10.13.206.131 with SMTP id q125mr21903856ywd.54.1462883422249; Tue, 10 May 2016 05:30:22 -0700 (PDT) Received: by 10.37.7.3 with HTTP; Tue, 10 May 2016 05:30:22 -0700 (PDT) Date: Tue, 10 May 2016 15:30:22 +0300 Message-ID: Subject: git 2.7.4 fails to clone repositories over HTTPS sources From: Dennis Mungai To: bug-guix@gnu.org Content-Type: text/plain; charset=UTF-8 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) Hello there, I'm using git 2.7.4 from a guix profile, and here is my current environment: guix package -p ~/opt/guix-build-system --search-paths warning: failed to install locale: Invalid argument export PATH="/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-build-system/sbin" export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" export INFOPATH="/home/lin/opt/guix-build-system/share/info" export PKG_CONFIG_PATH="/home/lin/opt/guix-build-system/lib/pkgconfig" export GUILE_LOAD_COMPILED_PATH="/home/lin/opt/guix-build-system/lib/guile/2.0/ccache" export C_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" export CPLUS_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" export LIBRARY_PATH="/home/lin/opt/guix-build-system/lib" export ACLOCAL_PATH="/home/lin/opt/guix-build-system/share/aclocal" which env returns: which env /home/lin/opt/guix-build-system/bin/env Now, with git clone example over HTTPS: git clone --branch gn-latest https://github.com/genenetwork/guix-bioinformatics Cloning into 'guix-bioinformatics'... fatal: unable to access 'https://github.com/genenetwork/guix-bioinformatics/': server certificate verification failed. CAfile: none CRLfile: none The system git does not present such an error. What could be wrong with my setup? Missing certificates? At the moment, I've installed the nss-certs package hoping it would be a workaround as these are Mozilla certs, but to no avail. Thanks and regards, Dennis. ------------=_1462957382-31647-1-- From unknown Thu Aug 14 22:18:03 2025 X-Loop: help-debbugs@gnu.org Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Resent-From: Ricardo Wurmus Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 11 May 2016 21:56:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 23504 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Dennis Mungai Cc: 23504@debbugs.gnu.org Received: via spool by 23504-submit@debbugs.gnu.org id=B23504.146300375230525 (code B ref 23504); Wed, 11 May 2016 21:56:01 +0000 Received: (at 23504) by debbugs.gnu.org; 11 May 2016 21:55:52 +0000 Received: from localhost ([127.0.0.1]:47755 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0c6h-0007wG-Pq for submit@debbugs.gnu.org; Wed, 11 May 2016 17:55:52 -0400 Received: from sinope02.bbbm.mdc-berlin.de ([141.80.25.24]:55262) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0c6f-0007w7-To for 23504@debbugs.gnu.org; Wed, 11 May 2016 17:55:50 -0400 Received: from localhost (localhost [127.0.0.1]) by sinope02.bbbm.mdc-berlin.de (Postfix) with ESMTP id 18B6F31F53; Tue, 10 May 2016 15:11:50 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mdc-berlin.de; h= content-type:content-type:mime-version:message-id:date:date :in-reply-to:subject:subject:from:from:references:received :received:received; s=mdc; t=1462885904; x=1464700305; bh=XNdm7P Y+fy3EuTGyzGuXP0c04ydJTk5gG/pmT5W4J08=; b=AxUaQvfQ0Q3RG2FT1kjAyY aXpjCXeEEhlF6S/uVkFBOUmlIOFILvAhY7oQ6izKG6pn3CQqBCO8h7TSCJIYcxNi aGguAg1K4v+Rvc4ZJFRf+7WGBIt4JWMOQSyrYiN5bdpkPUnpAeB6DfIh0KI8+vxC Q76WiRbOkkkkzgg06JyLg= X-Virus-Scanned: amavisd-new at mdc-berlin.de Received: from sinope02.bbbm.mdc-berlin.de ([127.0.0.1]) by localhost (sinope02.bbbm.mdc-berlin.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m8kCiXnG5ZmL; Tue, 10 May 2016 15:11:44 +0200 (CEST) Received: from HTCAONE.mdc-berlin.net (puck.citx.mdc-berlin.de [141.80.36.101]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by sinope02.bbbm.mdc-berlin.de (Postfix) with ESMTPS; Tue, 10 May 2016 15:11:44 +0200 (CEST) Received: from localhost (141.80.180.135) by HTCAONE.mdc-berlin.net (141.80.180.125) with Microsoft SMTP Server (TLS) id 14.3.279.2; Tue, 10 May 2016 15:11:35 +0200 References: From: Ricardo Wurmus In-Reply-To: Date: Tue, 10 May 2016 15:11:34 +0200 Message-ID: MIME-Version: 1.0 Content-Type: text/plain X-Originating-IP: [141.80.180.135] X-TM-AS-Product-Ver: SMEX-11.0.0.4255-8.000.1202-22312.007 X-TM-AS-Result: No--9.281000-0.000000-31 X-TM-AS-User-Approved-Sender: Yes X-TM-AS-User-Blocked-Sender: No X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.4 (-) Dennis Mungai writes: > Hello there, > > I'm using git 2.7.4 from a guix profile, and here is my current environment: > > guix package -p ~/opt/guix-build-system --search-paths > warning: failed to install locale: Invalid argument > export PATH="/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-build-system/sbin" > export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" > export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" > export INFOPATH="/home/lin/opt/guix-build-system/share/info" > export PKG_CONFIG_PATH="/home/lin/opt/guix-build-system/lib/pkgconfig" > export GUILE_LOAD_COMPILED_PATH="/home/lin/opt/guix-build-system/lib/guile/2.0/ccache" > export C_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" > export CPLUS_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" > export LIBRARY_PATH="/home/lin/opt/guix-build-system/lib" > export ACLOCAL_PATH="/home/lin/opt/guix-build-system/share/aclocal" > > which env returns: > > which env > /home/lin/opt/guix-build-system/bin/env > > Now, with git clone example over HTTPS: > > git clone --branch gn-latest https://github.com/genenetwork/guix-bioinformatics > Cloning into 'guix-bioinformatics'... > fatal: unable to access > 'https://github.com/genenetwork/guix-bioinformatics/': server > certificate verification failed. CAfile: none CRLfile: none > > The system git does not present such an error. > > What could be wrong with my setup? Missing certificates? Please try this: export GIT_SSL_CAPATH=$HOME/.guix-profile/etc/ssl/certs Assuming that nss-certs has been installed into $HOME/.guix-profile this should be enough to make it work. I wonder how we can make it easier to tell the user that this environment variable must be set. ~~ Ricardo From unknown Thu Aug 14 22:18:03 2025 X-Loop: help-debbugs@gnu.org Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Resent-From: ng0 Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 11 May 2016 22:10:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 23504 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 23504@debbugs.gnu.org Received: via spool by 23504-submit@debbugs.gnu.org id=B23504.146300454931783 (code B ref 23504); Wed, 11 May 2016 22:10:01 +0000 Received: (at 23504) by debbugs.gnu.org; 11 May 2016 22:09:09 +0000 Received: from localhost ([127.0.0.1]:47778 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0cJV-0008GW-J2 for submit@debbugs.gnu.org; Wed, 11 May 2016 18:09:08 -0400 Received: from 93-95-228-168.1984.is ([93.95.228.168]:51748 helo=beleriand.n0.is) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0cIC-0008E3-Uq for 23504@debbugs.gnu.org; Wed, 11 May 2016 18:07:48 -0400 Received: by beleriand.n0.is (OpenSMTPD) with ESMTPSA id c0acb41c TLS version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO for <23504@debbugs.gnu.org>; Wed, 11 May 2016 22:07:41 +0000 (UTC) Date: Wed, 11 May 2016 22:07:38 +0000 From: ng0 Message-ID: <20160511220737.GA14842@khazad-dum> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="wac7ysb48OaltWcw" Content-Disposition: inline In-Reply-To: X-Spam-Score: 0.4 (/) X-Mailman-Approved-At: Wed, 11 May 2016 18:09:03 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.4 (/) --wac7ysb48OaltWcw Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2016-05-10(03:11:34+0200), Ricardo Wurmus wrote: >=20 > Dennis Mungai writes: >=20 > > Hello there, > > > > I'm using git 2.7.4 from a guix profile, and here is my current environ= ment: > > > > guix package -p ~/opt/guix-build-system --search-paths > > warning: failed to install locale: Invalid argument > > export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-b= uild-system/sbin" > > export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" > > export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" > > export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" > > export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfig" > > export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib/= guile/2.0/ccache" > > export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" > > export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" > > export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" > > export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" > > > > which env returns: > > > > which env > > /home/lin/opt/guix-build-system/bin/env > > > > Now, with git clone example over HTTPS: > > > > git clone --branch gn-latest https://github.com/genenetwork/guix-bioinf= ormatics > > Cloning into 'guix-bioinformatics'... > > fatal: unable to access > > 'https://github.com/genenetwork/guix-bioinformatics/': server > > certificate verification failed. CAfile: none CRLfile: none > > > > The system git does not present such an error. > > > > What could be wrong with my setup? Missing certificates? >=20 > Please try this: >=20 > export GIT_SSL_CAPATH=3D$HOME/.guix-profile/etc/ssl/certs >=20 > Assuming that nss-certs has been installed into $HOME/.guix-profile this > should be enough to make it work. >=20 > I wonder how we can make it easier to tell the user that this > environment variable must be set. >=20 > ~~ Ricardo Assuming this currently does not exist (I have not checked it), what about a note in the manual, application specific, and maybe something like a message after guix package -i git was run? --=20 =E2=99=A5=E2=92=B6 ng0 --wac7ysb48OaltWcw Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXM60oAAoJEAKilhUMIBgjWQUQAMfNYa8XzJuf07BKae1PrziQ WBWAumGXSoTTKGuOCvraA7Pr2dN4c0bHIabuOhkFLr8gTf+vQ4z5xnuzbTXnjMyt kr9ntJLv8Iwm+5Z7GYk5nmeDnsARPcMI97jtiOUKcscYjQqfPT40dr0bl+T0B6rC tCHxyT3Px5VP3hQuaqU4WIP/Odg5tUrVIGSNV3Qt7govI+ak+8hVP8VHA4lNBJ1V Dujr23nv3i9T409xxE6PY8zyE3P0C/mbVl615Vjts9po3hYliTs/Gf0j9/5NFEjY uJ/4GcHmAkeyivhIcmlwCn2zhsFwKwiv50upJS/8xLep6ct3pJ0byX9FAq7uUl4w tYIKbXOSZtfj4wubjgWkbcGos84yV6XB//zzrlXB6Pnylc2p9rEogl70jwGfuWpy MDExAaB55/uady5qcH7BxxwMACLdQWsBr3CVCnatpQ59eVB+FZj2rYdYmBv09Ie/ pFbOC/q7+a03D7nZK1kH/gKRNQF1sJYp3pHCUBDU2+xa5FXzsXPpzHjQ69XJIwbi qtrL28TO1/hFoPbO3Skk/Sxn7BaBhEeDyxejJ8fu2ZpQbu7ccieT4aBwjBWcgPoE AHCbX0/+DFNwLR/LBSikS2/nrTzQdmQX8RINm84iR6dC4/MGlq7+31YUWhXugR1c JD4LNLEdhelhT2XUy9DW =puNm -----END PGP SIGNATURE----- --wac7ysb48OaltWcw--