GNU bug report logs - #23504
git 2.7.4 fails to clone repositories over HTTPS sources

Previous Next

Full log

Message #17 received at 23504 <at> debbugs.gnu.org (full text, mbox):

From: Dennis Mungai <dmngaie <at> gmail.com>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 23504 <at> debbugs.gnu.org
Subject: Re: bug#23504: git 2.7.4 fails to clone repositories over HTTPS
 sources
Date: Wed, 11 May 2016 11:10:50 +0300

Hey there,

Sorry for the late reply.

I used Pjotr's Guix hacking notes to fix the problem , solution:

https://github.com/pjotrp/guix-notes/blob/master/HACKING.org#git-ca-certificates



On 10 May 2016 at 16:46, Dennis Mungai <dmngaie <at> gmail.com> wrote:
> Sure, will do.
>
> On 10 May 2016 at 16:38, Ludovic Courtès <ludo <at> gnu.org> wrote:
>> Dennis Mungai <dmngaie <at> gmail.com> skribis:
>>
>>> I'm using git 2.7.4 from a guix profile, and here is my current environment:
>>>
>>> guix package -p ~/opt/guix-build-system --search-paths
>>> warning: failed to install locale: Invalid argument
>>> export PATH="/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-build-system/sbin"
>>> export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share"
>>> export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0"
>>> export INFOPATH="/home/lin/opt/guix-build-system/share/info"
>>> export PKG_CONFIG_PATH="/home/lin/opt/guix-build-system/lib/pkgconfig"
>>> export GUILE_LOAD_COMPILED_PATH="/home/lin/opt/guix-build-system/lib/guile/2.0/ccache"
>>> export C_INCLUDE_PATH="/home/lin/opt/guix-build-system/include"
>>> export CPLUS_INCLUDE_PATH="/home/lin/opt/guix-build-system/include"
>>> export LIBRARY_PATH="/home/lin/opt/guix-build-system/lib"
>>> export ACLOCAL_PATH="/home/lin/opt/guix-build-system/share/aclocal"
>>>
>>> which env returns:
>>>
>>> which env
>>> /home/lin/opt/guix-build-system/bin/env
>>>
>>> Now, with git clone example over HTTPS:
>>>
>>> git clone --branch gn-latest https://github.com/genenetwork/guix-bioinformatics
>>> Cloning into 'guix-bioinformatics'...
>>> fatal: unable to access
>>> 'https://github.com/genenetwork/guix-bioinformatics/': server
>>> certificate verification failed. CAfile: none CRLfile: none
>>>
>>> The system git does not present such an error.
>>>
>>> What could be wrong with my setup? Missing certificates?
>>>
>>> At the moment, I've installed the nss-certs package hoping it would be
>>> a workaround as these are Mozilla certs, but to no avail.
>>
>> I think you also need to set the ‘GIT_SSL_CAINFO’ environment variable.
>> For instance:
>>
>>      $ guix package -i nss-certs
>>      $ export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
>>      $ export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
>>      $ export GIT_SSL_CAINFO="$SSL_CERT_FILE"
>>
>> Can you confirm?
>>
>> Thanks,
>> Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.