From unknown Thu Aug 14 21:42:50 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#25240 <25240@debbugs.gnu.org> To: bug#25240 <25240@debbugs.gnu.org> Subject: Status: libcurl does not honor SSL_CERT_DIR et al. Reply-To: bug#25240 <25240@debbugs.gnu.org> Date: Fri, 15 Aug 2025 04:42:50 +0000 retitle 25240 libcurl does not honor SSL_CERT_DIR et al. reassign 25240 guix submitter 25240 Hank Donnay severity 25240 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Tue Dec 20 17:35:45 2016 Received: (at submit) by debbugs.gnu.org; 20 Dec 2016 22:35:45 +0000 Received: from localhost ([127.0.0.1]:49412 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cJT0b-0007ga-9t for submit@debbugs.gnu.org; Tue, 20 Dec 2016 17:35:45 -0500 Received: from eggs.gnu.org ([208.118.235.92]:49950) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cJSaR-0006rW-7w for submit@debbugs.gnu.org; Tue, 20 Dec 2016 17:08:43 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cJSaL-0008Lg-1w for submit@debbugs.gnu.org; Tue, 20 Dec 2016 17:08:37 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM, HTML_MESSAGE,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:39690) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cJSaK-0008LT-V5 for submit@debbugs.gnu.org; Tue, 20 Dec 2016 17:08:36 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:40900) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cJSaJ-000073-Tc for bug-guix@gnu.org; Tue, 20 Dec 2016 17:08:36 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cJSaI-0008KC-WF for bug-guix@gnu.org; Tue, 20 Dec 2016 17:08:35 -0500 Received: from mail-qk0-x232.google.com ([2607:f8b0:400d:c09::232]:34938) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cJSaI-0008Ir-SN for bug-guix@gnu.org; Tue, 20 Dec 2016 17:08:34 -0500 Received: by mail-qk0-x232.google.com with SMTP id u25so52786814qki.2 for ; Tue, 20 Dec 2016 14:08:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=ghf5sPrq1TH20Y920+1ryp5p90DfzYfeu2FaGl8UN4Y=; b=rbuZsPAQ9qdi/wz2srTAgOHMVLpv+tmYOSWpN3GbzFO2t4TfKrivnA6QyOzx92EQar ByOqB3cObc97xVgLFHOVfeWxadthqDuHU/X1UJzwPB+dnOIlNrbBqVJ7zX3HVKnocEqk sOTDoj2XvxJNFQNiiad9I4nRJtbrQlyP2Cu/ssYtRVn269CcbW6gS119v1P2rORITNAq iha5SbSECge3Tnw0uS2imFQ+1dL8a2ZoL11A0fayfftNL0aThmZM3dtkV2KwPaEgh3IU nwzgStjLv83/MzsGdRVYrkZ0E2zAFUKMQF7my2dgqF8fZNvGFAkoZ4MlYFEjzQc43NLf FStg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=ghf5sPrq1TH20Y920+1ryp5p90DfzYfeu2FaGl8UN4Y=; b=uMc4uzcHGtOu0GuHzjgEmF0QXXDqO26VuA/iBYVJspHILl8E/XTZ+X2eUe54QkkbJ5 kCRW6c5GOUBZiVhrFVVPRVku/LtGvgiLvW/bmd9X3iLGg4hLLzenm47ufiimZqHMC9Gf JLcr+85fvYoZwwV1m6A+y8UeTerYPaQ7mFJchFMuXBAu7xgIoxRktIwx/6XeaBvgaG/z fArjwHfqZftQvDDnbkJNYb0fBOAyu5YoE6jofR5GW6kykhBWbR0yL0OLjEPLqZVLY7dq pQVFv48fJ+wKoxCHuxFLo4HsANpcveRfF8co3VcaQCRcFkp4IphdzMOqJmTJg5GtOoQl aQ0w== X-Gm-Message-State: AIkVDXLeDPSw3j4kQTQYUWDBu+dQwKRYYYx/S+RIlPDhyYnFOPNcOj5C0E4Pwp8gbBkwJH1wzW8KwrAGZUzOxg== X-Received: by 10.55.177.195 with SMTP id a186mr1876305qkf.89.1482271712814; Tue, 20 Dec 2016 14:08:32 -0800 (PST) MIME-Version: 1.0 Received: by 10.12.151.17 with HTTP; Tue, 20 Dec 2016 14:08:32 -0800 (PST) From: Hank Donnay Date: Tue, 20 Dec 2016 17:08:32 -0500 Message-ID: Subject: weechat-1.6: curl error 60 To: bug-guix@gnu.org Content-Type: multipart/alternative; boundary=94eb2c06137ae72a9005441e4661 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Tue, 20 Dec 2016 17:35:44 -0500 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) --94eb2c06137ae72a9005441e4661 Content-Type: text/plain; charset=UTF-8 Weechat seems to be unable to do HTTPS, and fails with "curl error 60". Setting SSL_CERT_{DIR,FILE} doesn't make a difference. The actual error is: script: error downloading list of scripts: curl error 60 (server certificate verification failed. CAfile: none CRLfile: none) (URL: " https://weechat.org/files/plugins.xml.gz") I have nss-certs installed, and the files pointed to ($GUIX_PROFILE/etc/ssl/certs and $GUIX_PROFILE/etc/ssl/certs/ca-certificates.crt) both exist. Any pointers on where to look to fix this would be appreciated. --94eb2c06137ae72a9005441e4661 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Weechat seems to be unable to do HTTPS, and fail= s with "curl error 60". Setting SSL_CERT_{DIR,FILE} doesn't m= ake a difference. The actual error is:

=C2=A0=C2=A0=C2=A0 script: er= ror downloading list of scripts: curl error 60 (server certificate verifica= tion failed. CAfile: none CRLfile: none) (URL: "https://weechat.org/files/plugins.xml.gz= ")

I have nss-certs installed, and the files pointed to (= $GUIX_PROFILE/etc/ssl/certs and $GUIX_PROFILE/etc/ssl/certs/ca-certificates= .crt) both exist.

Any pointers on where to look to fix this wo= uld be appreciated.
--94eb2c06137ae72a9005441e4661-- From debbugs-submit-bounces@debbugs.gnu.org Wed Jan 25 06:10:14 2017 Received: (at 25240) by debbugs.gnu.org; 25 Jan 2017 11:10:14 +0000 Received: from localhost ([127.0.0.1]:41608 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cWLSw-0002R1-M1 for submit@debbugs.gnu.org; Wed, 25 Jan 2017 06:10:14 -0500 Received: from eggs.gnu.org ([208.118.235.92]:33676) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cWLSv-0002Qp-QO for 25240@debbugs.gnu.org; Wed, 25 Jan 2017 06:10:14 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cWLSm-0006ul-Ky for 25240@debbugs.gnu.org; Wed, 25 Jan 2017 06:10:08 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-5.1 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:58754) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cWLSm-0006ug-HZ; Wed, 25 Jan 2017 06:10:04 -0500 Received: from reverse-83.fdn.fr ([80.67.176.83]:39346 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1cWLSl-0002pB-Ut; Wed, 25 Jan 2017 06:10:04 -0500 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) To: Hank Donnay Subject: Re: bug#25240: weechat-1.6: curl error 60 References: Date: Wed, 25 Jan 2017 12:10:01 +0100 In-Reply-To: (Hank Donnay's message of "Tue, 20 Dec 2016 17:08:32 -0500") Message-ID: <87o9yv1jli.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -8.2 (--------) X-Debbugs-Envelope-To: 25240 Cc: 25240@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -8.2 (--------) Hello, Hank Donnay skribis: > Weechat seems to be unable to do HTTPS, and fails with "curl error 60". > Setting SSL_CERT_{DIR,FILE} doesn't make a difference. The actual error i= s: > > script: error downloading list of scripts: curl error 60 (server > certificate verification failed. CAfile: none CRLfile: none) (URL: " > https://weechat.org/files/plugins.xml.gz") > > I have nss-certs installed, and the files pointed to > ($GUIX_PROFILE/etc/ssl/certs and > $GUIX_PROFILE/etc/ssl/certs/ca-certificates.crt) both exist. > > Any pointers on where to look to fix this would be appreciated. Weechat uses libcurl, which uses GnuTLS and does not honor =E2=80=98SSL_CERT_DIR=E2=80=99, =E2=80=98SSL_CERT_FILE=E2=80=99, and =E2=80= =98CURL_CA_BUNDLE=E2=80=99. Instead, GnuTLS defaults to looking for certificates in /etc/ssl/certs, and it is up to the application to search for certificates in additional places. This has been discussed at but there=E2=80=99s no good solution yet. Thanks, Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Wed Jan 25 06:10:33 2017 Received: (at control) by debbugs.gnu.org; 25 Jan 2017 11:10:33 +0000 Received: from localhost ([127.0.0.1]:41611 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cWLTE-0002RY-Ug for submit@debbugs.gnu.org; Wed, 25 Jan 2017 06:10:33 -0500 Received: from eggs.gnu.org ([208.118.235.92]:33770) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cWLTE-0002RM-2o for control@debbugs.gnu.org; Wed, 25 Jan 2017 06:10:32 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cWLT5-00073D-BM for control@debbugs.gnu.org; Wed, 25 Jan 2017 06:10:27 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-3.2 required=5.0 tests=BAYES_20,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:58759) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cWLT5-000739-8c for control@debbugs.gnu.org; Wed, 25 Jan 2017 06:10:23 -0500 Received: from reverse-83.fdn.fr ([80.67.176.83]:39348 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1cWLT4-0002ui-HK for control@debbugs.gnu.org; Wed, 25 Jan 2017 06:10:22 -0500 Date: Wed, 25 Jan 2017 12:10:21 +0100 Message-Id: <87mvef1jky.fsf@gnu.org> To: control@debbugs.gnu.org From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: control message for bug #25240 MIME-version: 1.0 Content-type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -8.2 (--------) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -8.2 (--------) retitle 25240 libcurl does not honor SSL_CERT_DIR et al. From debbugs-submit-bounces@debbugs.gnu.org Fri Feb 07 14:09:50 2020 Received: (at 25240-done) by debbugs.gnu.org; 7 Feb 2020 19:09:51 +0000 Received: from localhost ([127.0.0.1]:50249 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j090g-0003xG-Om for submit@debbugs.gnu.org; Fri, 07 Feb 2020 14:09:50 -0500 Received: from pat.zlotemysli.pl ([37.59.186.212]:53474) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j090e-0003x7-LX for 25240-done@debbugs.gnu.org; Fri, 07 Feb 2020 14:09:49 -0500 Received: (qmail 10009 invoked by uid 1009); 7 Feb 2020 20:09:46 +0100 Received: from 188.123.215.55 (kuba@kadziolka.net@188.123.215.55) by pat (envelope-from , uid 1002) with qmail-scanner-2.08st (clamdscan: 0.98.6/25716. spamassassin: 3.4.0. perlscan: 2.08st. Clear:RC:1(188.123.215.55):. Processed in 0.019438 secs); 07 Feb 2020 19:09:46 -0000 Received: from unknown (HELO gravity) (kuba@kadziolka.net@188.123.215.55) by pat.zlotemysli.pl with SMTP; 7 Feb 2020 20:09:45 +0100 Date: Fri, 7 Feb 2020 20:10:15 +0100 From: Jakub =?utf-8?B?S8SFZHppb8WCa2E=?= To: 25240-done@debbugs.gnu.org Subject: Fixed on core-updates Message-ID: <20200207191015.vnjzk2cw3du7cojq@gravity> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="26m72jkaqtggitkz" Content-Disposition: inline X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 25240-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --26m72jkaqtggitkz Content-Type: text/plain; charset=us-ascii Content-Disposition: inline A patch that fixes this landed on core-updates, see #38873. A follow-up bug regarding some cleanup is #39415. --26m72jkaqtggitkz Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE5Xa/ss9usT31cTO54xWnWEYTFWQFAl49thcACgkQ4xWnWEYT FWR3sQ//cmNCnva6H2q6RGpE39ZN8Ffafyk7IvaQX2nFBKDWLEIB1Fy4jq20Wr9v Z4pO96bDVts+l8vxBQxabkR3yEUzD39YeQF9c71HebYdVEjUtBgs1XEjZgidPQzn 0VXedUIcK7U9xVQ3VA1aWwlLYXER5YN4JwBL2XIxK81otHIj7B2dwwx5lDL0VXHn Vf9Qch6iISLmSMB+Vqv6iIUjWkA8QmZL1FpzQSLXbR/IjVJk0zmksD8yKtwl5592 +ZvIJ1PXIVPAxBJuBNr1EbryH/pK25zZfSuNgmaAk8/cVWocjS9WGIas5hi2URB7 nd02lfJQHKgR1ohffHaKL22AtWva8W40SxheENIoLh+8AJFwSrEDP5CilEcyQLa8 Ep49/hBnEG8cofSoR2qh3x1XDUmy8aYPpyE+A2HsbNfs6wDTf3KEWQEtYARiVIvu M6cHtKelJjWMaXs63RudS42MU4xCCLd6afDa39JVQ4Q0lhoyd6geSoAMroV3FiuI cPEscBw1fzOy2p8g9/bb8LbxmbAP751gbgGJ0DtqRlUmPcuCn8+O/bcOkUvMJGSy gdJr15HmPj003Q8Zq2cMUIyxA5HQCmO4UkrCSZsEMJlXVJMMBC2RkbyFnqtWbsPC Y6EeRvxgei3KvPv2itMpxD9AcAi35niEf3p8BXAovd4BZfQrzGo= =5lze -----END PGP SIGNATURE----- --26m72jkaqtggitkz-- From unknown Thu Aug 14 21:42:50 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sat, 07 Mar 2020 12:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator