From debbugs-submit-bounces@debbugs.gnu.org Thu Mar 14 16:43:24 2019 Received: (at submit) by debbugs.gnu.org; 14 Mar 2019 20:43:24 +0000 Received: from localhost ([127.0.0.1]:44111 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h4XCF-0001Ag-Lr for submit@debbugs.gnu.org; Thu, 14 Mar 2019 16:43:23 -0400 Received: from eggs.gnu.org ([209.51.188.92]:58237) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h4XCB-0001AR-Oy for submit@debbugs.gnu.org; Thu, 14 Mar 2019 16:43:22 -0400 Received: from lists.gnu.org ([209.51.188.17]:51878) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1h4XC6-00015p-Du for submit@debbugs.gnu.org; Thu, 14 Mar 2019 16:43:14 -0400 Received: from eggs.gnu.org ([209.51.188.92]:44039) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h4XC5-0001X1-CW for bug-guix@gnu.org; Thu, 14 Mar 2019 16:43:14 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,HTML_MESSAGE, RCVD_IN_DNSWL_NONE,URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1h4X68-00026E-Vc for bug-guix@gnu.org; Thu, 14 Mar 2019 16:37:05 -0400 Received: from knopi.disroot.org ([178.21.23.139]:50704) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1h4X68-000236-0F for bug-guix@gnu.org; Thu, 14 Mar 2019 16:37:04 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 307B72C368 for ; Thu, 14 Mar 2019 21:37:00 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SVYsVDzh4Zrt for ; Thu, 14 Mar 2019 21:36:58 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1552595818; bh=IquL4TLseCKH9oHqUnSfxSJuGE1s4sd4cH0/pr3Xq0U=; h=Date:From:Subject:To; b=IOj1sAxPxiGgKXulX+Y8Ivguck/myI/1fM7T9Ox+7mIIUaTR8EyQ7DrqG9eb1iKD2 Oxw8jD/nhyz6H9kPszTgPUYl2jIvCOyWMSMVM13tTW+QvbFRxfbeiV/tEe/IrJpD0n 668r2tlMjqEuNGBHbKrWpPp4UkIG9UzhpkF6HvsjK4mH7euKAg1Nvzv2INQnr/HoRx VLI2FdRf0EOj2Po2TsCZai/JTMeS5akrfGG+XR/IYL9XZD5lhYh9jJZ2jx7/5Zg54P Xun7LHNmRI8/Tv5KYYwQwLOhMlfTspeDyqg4e8N8Lp3FexdODm5nPEIQlYibXHPoPo CnqX0VhiUa6mg== Date: Thu, 14 Mar 2019 20:36:58 +0000 Content-Type: multipart/alternative; boundary="--=_RainLoop_957_212577591.1552595818" From: "Raghav Gururajan" Message-ID: <002a84964102ac2171089fa7dc007092@disroot.org> Subject: TLS Error with Flatpak To: bug-guix@gnu.org X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 178.21.23.139 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Spam-Score: 0.9 (/) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) ----=_RainLoop_957_212577591.1552595818 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Guix!=0A=0APackage: flatpak=0A=0AWhenever I try "flatpak remote-add= --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo"; I= keep getting the error "Can't load uri https://flathub.org/repo/flathub.= flatpakrepo: TLS support is not available".=0A=0AI even tried following s= teps mentioned at https://www.gnu.org/software/guix/manual/en/guix.html#i= ndex-TLS. Still not working.=0A=0AUnless this is fixed, flatpak in guix w= ill be unusable with remote repositories.=0A=0ARegards,=0ARG. ----=_RainLoop_957_212577591.1552595818 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable
H= ello Guix!

Package: flatpak

Whenever I try "flatpak remote-= add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo"= ; I keep getting the error "Can't load uri https://flathub.org/repo/flath= ub.flatpakrepo: TLS support is not available".

I even tried follow= ing steps mentioned at https://www.gnu.org/software/guix/manual/en/guix.h= tml#index-TLS. Still not working.

Unless this is fixed, flatpak in= guix will be unusable with remote repositories.

Regards,
RG. ----=_RainLoop_957_212577591.1552595818-- From debbugs-submit-bounces@debbugs.gnu.org Mon Mar 18 05:49:43 2019 Received: (at 34861) by debbugs.gnu.org; 18 Mar 2019 09:49:43 +0000 Received: from localhost ([127.0.0.1]:48119 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5otr-00082H-0A for submit@debbugs.gnu.org; Mon, 18 Mar 2019 05:49:43 -0400 Received: from eggs.gnu.org ([209.51.188.92]:59784) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5otp-000824-6h for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 05:49:42 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:33912) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h5otj-0008Rz-Hn; Mon, 18 Mar 2019 05:49:35 -0400 Received: from [2001:660:6102:320:e120:2c8f:8909:cdfe] (port=53582 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1h5oti-0005oO-SW; Mon, 18 Mar 2019 05:49:35 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: "Raghav Gururajan" Subject: Re: bug#34861: TLS Error with Flatpak References: <002a84964102ac2171089fa7dc007092@disroot.org> Date: Mon, 18 Mar 2019 10:49:33 +0100 In-Reply-To: <002a84964102ac2171089fa7dc007092@disroot.org> (Raghav Gururajan's message of "Thu, 14 Mar 2019 20:36:58 +0000") Message-ID: <87imwgpl5e.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34861 Cc: 34861@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello, "Raghav Gururajan" skribis: > Whenever I try "flatpak remote-add --if-not-exists flathub https://flathu= b.org/repo/flathub.flatpakrepo"; I keep getting the error "Can't load uri h= ttps://flathub.org/repo/flathub.flatpakrepo: TLS support is not available". > > I even tried following steps mentioned at https://www.gnu.org/software/gu= ix/manual/en/guix.html#index-TLS. Still not working. To be more specific, did you install =E2=80=98nss-certs=E2=80=99? If you did is it installed system-wide in /etc/ssl/certs, or per-user? Did you set =E2=80=98SSL_CERT_DIR=E2=80=99, =E2=80=98SSL_CERT_FILE=E2=80=99= , or related environment variables? Thanks, Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Mon Mar 18 13:32:02 2019 Received: (at 34861) by debbugs.gnu.org; 18 Mar 2019 17:32:02 +0000 Received: from localhost ([127.0.0.1]:49154 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5w7E-0000my-3G for submit@debbugs.gnu.org; Mon, 18 Mar 2019 13:32:00 -0400 Received: from knopi.disroot.org ([178.21.23.139]:38096) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5w7B-0000mn-Uc for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 13:31:59 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 5C7442C874; Mon, 18 Mar 2019 18:31:56 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bMEX15DZOj1M; Mon, 18 Mar 2019 18:31:54 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1552930314; bh=XOtVfIz9H+yTLLH1rfm4o8x9gj67sa19c2mJ21Yt94Q=; h=Date:From:Subject:To:Cc:In-Reply-To:References; b=A2RQRP7PNx4EgkAwoz/wqECk6cOff9KaXlGBw1s4SwmUoayZY8F8+fGIzctIjiVS9 W6aHIvF7Y20FbnGHq7d0SsFIriwPYlF6R5EtPL3seCZ9JsCBrsqpCM48hoZVULr8y1 xgTA1yvqhzXxQVzIUWww7FCoJkuLJ5QZ3jaKptwKlO8jfPN6eO9T1XkgyG2u6a5htB tavw5RvkL8qtFC4eKKX1lcS+l4seUUUJAH+DpKSVxV3rUHDfD9QvhaFh+WwVrIwsZe nv7Ih5569xzX5wTQrbVVqc4rzxJgEfd5Vbvl6jaS4zwxcC+36uff/Jdpn919tGgF6K /JXilgTxWgKXA== Date: Mon, 18 Mar 2019 17:31:54 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: "Raghav Gururajan" Message-ID: Subject: Re: bug#34861: TLS Error with Flatpak To: "=?utf-8?B?THVkb3ZpYyBDb3VydMOocw==?=" In-Reply-To: <87imwgpl5e.fsf@gnu.org> References: <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 34861 Cc: 34861@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello Ludovic!=0A=0AYes, I did them. Still did not work.=0A=0AI did the f= ollowing to set env variables:=0A=0A$ guix package -i nss-certs=0A$ expor= t SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs"=0A$ export SSL_CERT_= FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"=0A$ export= GIT_SSL_CAINFO=3D"$SSL_CERT_FILE"=0A=0ARegards,=0ARG.=0A=0AMarch 18, 201= 9 9:49 AM, "Ludovic Court=C3=A8s" wrote:=0A=0A> Hello,=0A>= =0A> "Raghav Gururajan" skribis:=0A> =0A>> Whenever I= try "flatpak remote-add --if-not-exists flathub=0A>> https://flathub.org= /repo/flathub.flatpakrepo"; I keep getting the error "Can't load uri=0A>>= https://flathub.org/repo/flathub.flatpakrepo: TLS support is not availab= le".=0A>> =0A>> I even tried following steps mentioned at=0A>> https://ww= w.gnu.org/software/guix/manual/en/guix.html#index-TLS. Still not working.= =0A> =0A> To be more specific, did you install =E2=80=98nss-certs=E2=80= =99?=0A> =0A> If you did is it installed system-wide in /etc/ssl/certs, o= r per-user?=0A> =0A> Did you set =E2=80=98SSL_CERT_DIR=E2=80=99, =E2=80= =98SSL_CERT_FILE=E2=80=99, or related environment=0A> variables?=0A> =0A>= Thanks,=0A> Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Mon Mar 18 17:24:52 2019 Received: (at 34861) by debbugs.gnu.org; 18 Mar 2019 21:24:52 +0000 Received: from localhost ([127.0.0.1]:49268 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5zka-0006YY-Ge for submit@debbugs.gnu.org; Mon, 18 Mar 2019 17:24:52 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21115) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5zkY-0006YP-QY for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 17:24:51 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1552944263; cv=none; d=zoho.com; s=zohoarc; b=iF5GeAD/WgbkFnrXPgb7rQwGB5Hp74lUej4qyIHaNmRpLWEbExABHm3iqfbGGjqz36clLKBrLjSX71GbRlDkoWF1SMM5mmk17fRVA+gpWhgpTluJD4hWL+fhre11JyNeLTv35Pr56OR7XsNOwjWCsHD5p339mYKKBzOon0Ay73w= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com; s=zohoarc; t=1552944263; h=Content-Type:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results; bh=2D6nc/vu9lzl7hrN5Y4tXV5jUzCp+VeLAegUhcPw2oM=; b=c1YzMXaB2ijuX+fqNSyJa7+HA2cM2+vBUo0TP9HfjylCjLf+5pIz4iZCJx3IYucyz2rDhdKTaOL+gswf2sb9VL/d9QxjYekbWrQ437BaWXR4kEY4c3AnMkxk/+xiJZAzR2zecPgzDefMcxMVCRPvlvZLZITJbILOIKEBuGuB7iM= ARC-Authentication-Results: i=1; mx.zoho.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=rekado@elephly.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1552944263; s=zoho; d=elephly.net; i=rekado@elephly.net; h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type; l=581; bh=2D6nc/vu9lzl7hrN5Y4tXV5jUzCp+VeLAegUhcPw2oM=; b=VkHPFTAvBqmJLgPp/G3Em4Ejj9bmt9BCe7NRhnm974O8SHaIPXXakEB35+rw2/Fr UZz/SqvmFeDic4n17Ap6+hoeruNo+qaPRT/bi1OZlyGbA+YohOup21/Y81XFcJYKYhl HyjU7xRSJwV9I44ZzaIJ92I9Vkn8fMSbCy/5yvss= Received: from localhost (p54AD4E7B.dip0.t-ipconnect.de [84.173.78.123]) by mx.zohomail.com with SMTPS id 1552944261482695.5759285468879; Mon, 18 Mar 2019 14:24:21 -0700 (PDT) References: <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> User-agent: mu4e 1.0; emacs 26.1 From: Ricardo Wurmus To: Raghav Gururajan Subject: Re: bug#34861: TLS Error with Flatpak In-reply-to: X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Mon, 18 Mar 2019 22:24:12 +0100 Message-ID: <87ef73yiyr.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain X-ZohoMailClient: External X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34861 Cc: Ludovic =?utf-8?Q?Court=C3=A8s?= , 34861@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Raghav Gururajan writes: > Yes, I did them. Still did not work. > > I did the following to set env variables: > > $ guix package -i nss-certs > $ export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs" > $ export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt" > $ export GIT_SSL_CAINFO="$SSL_CERT_FILE" Flatpak uses libsoup with SOUP_SESSION_SSL_USE_SYSTEM_CA_FILE. libsoup delegates TLS handling to glib-networking. Raghav, could you trace flatpak to see what certificate files it is trying to access? -- Ricardo From debbugs-submit-bounces@debbugs.gnu.org Mon Mar 18 19:10:56 2019 Received: (at 34861) by debbugs.gnu.org; 18 Mar 2019 23:10:56 +0000 Received: from localhost ([127.0.0.1]:49344 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h61PE-0000mY-9s for submit@debbugs.gnu.org; Mon, 18 Mar 2019 19:10:56 -0400 Received: from knopi.disroot.org ([178.21.23.139]:38930) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h61P9-0000mM-Uq for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 19:10:55 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 477D62C292; Tue, 19 Mar 2019 00:10:50 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iam9GJ-lRVj7; Tue, 19 Mar 2019 00:10:48 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1552950648; bh=cLV4NUAgOTHAuW//kAz+EPy3Iw9tLglpG5YH1UQpeuc=; h=Date:From:Subject:To:Cc:In-Reply-To:References; b=JH8mgQWhKHY6oqwxvhQADZI3rxrC/Swo0OOkB4tKjaORUGVOcxR5RwPoOY0iXE8AP RECDhGKAgLhE+mcnEz/5G4MDmah4y0bMRXvIwmZfpRYYR9vf1KeIUcfG4TtFz8J09c j7uoMeKDHJt0Mi/+GcgobQ2JFYRJe5CNV3/BhMLnBn/dlZVdhw5K0KV3KmjG4Wg3iL F1jSrER9X88rOjdyKDGvAa9uZ/OPvGkCrs2W9Bdajq0H2fy21LhdQ9MB3BDJ1xHwy6 XK0YzUmqZtusJwX3qXkIfDM6o8ylfmOWVhB7f3WOoV9M7m/TaPe++tuEQn+0p5xHd4 96046khB4CUYg== Date: Mon, 18 Mar 2019 23:10:48 +0000 Content-Type: multipart/alternative; boundary="--=_RainLoop_231_772500090.1552950648" From: "Raghav Gururajan" Message-ID: <2d04774df83fe600777de7b8f26aca87@disroot.org> Subject: Re: bug#34861: TLS Error with Flatpak To: "Ricardo Wurmus" In-Reply-To: <87ef73yiyr.fsf@elephly.net> References: <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34861 Cc: =?utf-8?B?THVkb3ZpYyBDb3VydMOocw==?= , 34861@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) ----=_RainLoop_231_772500090.1552950648 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Ricardo!=0A=0APlease find the following information.=0A=0AFROM FLAT= PAK SOURECODE:=0A=0ASoupSession *=0Aflatpak_create_soup_session (const ch= ar *user_agent)=0A{=0ASoupSession *soup_session;=0Aconst char *http_proxy= ;=0A=0Asoup_session =3D soup_session_new_with_options (SOUP_SESSION_USER_= AGENT, user_agent,=0ASOUP_SESSION_SSL_USE_SYSTEM_CA_FILE, TRUE,=0ASOUP_SE= SSION_USE_THREAD_CONTEXT, TRUE,=0ASOUP_SESSION_TIMEOUT, 60,=0ASOUP_SESSIO= N_IDLE_TIMEOUT, 60,=0ANULL);=0Asoup_session_remove_feature_by_type (soup_= session, SOUP_TYPE_CONTENT_DECODER);=0Ahttp_proxy =3D g_getenv ("http_pro= xy");=0Aif (http_proxy)=0A{=0Ag_autoptr(SoupURI) proxy_uri =3D soup_uri_n= ew (http_proxy);=0Aif (!proxy_uri)=0Ag_warning ("Invalid proxy URI '%s'",= http_proxy);=0Aelse=0Ag_object_set (soup_session, SOUP_SESSION_PROXY_URI= , proxy_uri, NULL);=0A}=0A=0Aif (g_getenv ("OSTREE_DEBUG_HTTP"))=0Asoup_s= ession_add_feature (soup_session, (SoupSessionFeature *) soup_logger_new = (SOUP_LOGGER_LOG_BODY, 500));=0A=0Areturn soup_session;=0A}=0A=0AFROM LIB= SOUP MANUAL:=0A=0AThe =E2=80=9Cssl-use-system-ca-file=E2=80=9D property= =0A=0A=E2=80=9Cssl-use-system-ca-file=E2=80=9D gboolean=0A=0ASetting this= to TRUE is equivalent to setting =E2=80=9Ctls-database=E2=80=9D to the d= efault system CA database. (and likewise, setting =E2=80=9Ctls-database= =E2=80=9D to the default database by hand will cause this property to bec= ome TRUE).=0A=0ASetting this to FALSE (when it was previously TRUE) will = clear the =E2=80=9Ctls-database=E2=80=9D field.=0A=0ASee =E2=80=9Cssl-str= ict=E2=80=9D for more information on how https certificate validation is = handled.=0A=0AThe =E2=80=9Cssl-strict=E2=80=9D property=0A=0A=E2=80=9Cssl= -strict=E2=80=9D gboolean=0A=0ANormally, if =E2=80=9Ctls-database=E2=80= =9D is set (including if it was set via =E2=80=9Cssl-use-system-ca-file= =E2=80=9D or =E2=80=9Cssl-ca-file=E2=80=9D), then libsoup will reject any= certificate that is invalid (ie, expired) or that is not signed by one o= f the given CA certificates, and the SoupMessage will fail with the statu= s SOUP_STATUS_SSL_FAILED.=0A=0AIf you set =E2=80=9Cssl-strict=E2=80=9D to= FALSE, then all certificates will be accepted, and you will need to call= soup_message_get_https_status() to distinguish valid from invalid certif= icates. (This can be used, eg, if you want to accept invalid certificates= after giving some sort of warning.)=0A=0AFor a plain SoupSession, if the= session has no CA file or TLS database, and this property is TRUE, then = all certificates will be rejected.=0A=0A--=0ARegards,=0ARG.=0A=0AMarch 18= , 2019 9:24 PM, "Ricardo Wurmus" wrote:=0A Raghav Gururajan writes:=0A Yes, I did them. Still did not work.=0A=0AI did the fo= llowing to set env variables:=0A=0A$ guix package -i nss-certs=0A$ export= SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs"=0A$ export SSL_CERT_F= ILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"=0A$ export = GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" =0A=0AFlatpak uses libsoup with SOUP_SE= SSION_SSL_USE_SYSTEM_CA_FILE. libsoup=0Adelegates TLS handling to glib-ne= tworking.=0A=0ARaghav, could you trace flatpak to see what certificate fi= les it is=0Atrying to access?=0A=0A--=0ARicardo ----=_RainLoop_231_772500090.1552950648 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable
H= ello Ricardo!

Please find the following information.

FROM FLATPAK SOURECODE:

SoupSession *
flatpak_create= _soup_session (const char *user_agent)
{
SoupSession *soup_session;=
const char *http_proxy;

soup_session =3D soup_session_new_with= _options (SOUP_SESSION_USER_AGENT, user_agent,
SOUP_SESSION_SSL_USE_SY= STEM_CA_FILE, TRUE,
SOUP_SESSION_USE_THREAD_CONTEXT, TRUE,
SOUP_SES= SION_TIMEOUT, 60,
SOUP_SESSION_IDLE_TIMEOUT, 60,
NULL);
soup_ses= sion_remove_feature_by_type (soup_session, SOUP_TYPE_CONTENT_DECODER);http_proxy =3D g_getenv ("http_proxy");
if (http_proxy)
{
g_aut= optr(SoupURI) proxy_uri =3D soup_uri_new (http_proxy);
if (!proxy_uri)=
g_warning ("Invalid proxy URI '%s'", http_proxy);
else
g_object= _set (soup_session, SOUP_SESSION_PROXY_URI, proxy_uri, NULL);
}
if (g_getenv ("OSTREE_DEBUG_HTTP"))
soup_session_add_feature (soup_se= ssion, (SoupSessionFeature *) soup_logger_new (SOUP_LOGGER_LOG_BODY, 500)= );

return soup_session;
}

FROM LIBSOUP MANUAL:

The =E2=80=9Cssl-use-system-ca-file=E2=80=9D prope= rty

=E2=80=9Cssl-use-system-ca-file=E2=80=9D gboolean
=
Setting this to TRUE is equivalent to setting =E2=80=9Ctls-database= =E2=80=9D to the default system CA database. (and likewise, setting =E2= =80=9Ctls-database=E2=80=9D to the default database by hand will cause th= is property to become TRUE).

Setting this to FALSE (when it was pr= eviously TRUE) will clear the =E2=80=9Ctls-database=E2=80=9D field.
See =E2=80=9Cssl-strict=E2=80=9D for more information on how https cert= ificate validation is handled.

The =E2=80=9Cssl-strict=E2= =80=9D property

=E2=80=9Cssl-strict=E2=80=9D gboolean
=
Normally, if =E2=80=9Ctls-database=E2=80=9D is set (including if it w= as set via =E2=80=9Cssl-use-system-ca-file=E2=80=9D or =E2=80=9Cssl-ca-fi= le=E2=80=9D), then libsoup will reject any certificate that is invalid (i= e, expired) or that is not signed by one of the given CA certificates, an= d the SoupMessage will fail with the status SOUP_STATUS_SSL_FAILED.
If you set =E2=80=9Cssl-strict=E2=80=9D to FALSE, then all certificates= will be accepted, and you will need to call soup_message_get_https_statu= s() to distinguish valid from invalid certificates. (This can be used, eg= , if you want to accept invalid certificates after giving some sort of wa= rning.)

For a plain SoupSession, if the session has no CA file or = TLS database, and this property is TRUE, then all certificates will be re= jected.

--
Regards,
RG.

March 18, 2019 9:24 PM, "Rica= rdo Wurmus" <rekado@elephly.net> wrote:
Raghav Gururajan <rvgn@disroot.org> writes:
Yes, I did them. Still did not work.

I did the following= to set env variables:

$ guix package -i nss-certs
$ export SSL= _CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs"
$ export SSL_CERT_FILE= =3D"$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
$ export GI= T_SSL_CAINFO=3D"$SSL_CERT_FILE"

Flatpak uses libsoup= with SOUP_SESSION_SSL_USE_SYSTEM_CA_FILE. libsoup
delegates TLS handl= ing to glib-networking.

Raghav, could you trace flatpak to see wha= t certificate files it is
trying to access?

--
Ricardo
----=_RainLoop_231_772500090.1552950648-- From debbugs-submit-bounces@debbugs.gnu.org Mon Mar 18 20:43:09 2019 Received: (at 34861) by debbugs.gnu.org; 19 Mar 2019 00:43:09 +0000 Received: from localhost ([127.0.0.1]:49378 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h62qT-00030W-9k for submit@debbugs.gnu.org; Mon, 18 Mar 2019 20:43:09 -0400 Received: from knopi.disroot.org ([178.21.23.139]:50950) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h62qQ-00030L-EH for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 20:43:07 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id E18102C8C6; Tue, 19 Mar 2019 01:43:04 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lvG_t7GvevHF; Tue, 19 Mar 2019 01:43:03 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1552956183; bh=GUTgRhUCqr5WXU5t0isT2vN9iiFMG+TRVjd3FlFDAc8=; h=Date:From:Subject:To:Cc:In-Reply-To:References; b=glwUAr2VKKzsU8o/T9cZCTKEYpWJCAnvXo4hjCMC/WMHLZrUgpfl1YFLk6k1SmHKe FXVV3Z2EPrSs6lBBcxoDlfMTHmU/8PgXk2VKbbrS5gT9L3w75/R1hfmoxPiMS2YGzN w1x2YhG4oSNcCC2L8zdwzOpYP6IBVB2KkaVzLzxTSKsw+sMoC6epf3JxX06y3oH9Z9 IPjaqwde5fNd9FmJIN/MgrBc9Jtumm4IV0k89bWb+Ur2+qiwaQ2ZQ/8MYLGTi8TvLm IOl8+i1JR4t/qgyGGxiWqHJ14hpyMsiGLs/C9x5O1vHjeTR6hz0DM0tmYMWmVBKMe4 AcK/MG09Y01ZQ== Date: Tue, 19 Mar 2019 00:43:03 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: "Raghav Gururajan" Message-ID: Subject: Re: bug#34861: TLS Error with Flatpak To: "Ricardo Wurmus" In-Reply-To: <87d0mnn282.fsf@elephly.net> References: <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 34861 Cc: =?utf-8?B?THVkb3ZpYyBDb3VydMOocw==?= , 34861@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Ricardo!=0A=0APlease find the log at: https://bin.disroot.org/?597e32c= b7e42e40e#r9lqwZ6w7sIAWlY2mt6dsgKCKRO5q0ZVt9U69vnZVZs=3D=0A=0AThank you!= =0A=0ARegards,=0ARG.=0A=0AMarch 19, 2019 12:22 AM, "Ricardo Wurmus" wrote:=0A=0A> Hi Raghav,=0A> =0A>> Please find the follow= ing information. [=E2=80=A6]=0A> =0A> Unfortunately, this is not very hel= pful as it only shows that flatpak=0A> uses libsoup.=0A> =0A>> Raghav, co= uld you trace flatpak to see what certificate files it is=0A>> trying to = access?=0A> =0A> I meant: could you run the flatpak command with =E2=80= =9Cstrace -f -o log -s=0A> 2048 flatpak =E2=80=A6=E2=80=9D? This would sh= ow us what files it attempts to access,=0A> hopefully including certifica= te files.=0A> =0A> --=0A> Ricardo From debbugs-submit-bounces@debbugs.gnu.org Mon Mar 18 21:07:30 2019 Received: (at 34861) by debbugs.gnu.org; 19 Mar 2019 01:07:30 +0000 Received: from localhost ([127.0.0.1]:49383 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h63E2-0003Zi-Bh for submit@debbugs.gnu.org; Mon, 18 Mar 2019 21:07:30 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21014) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h63E0-0003ZZ-4K for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 21:07:28 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1552954881; cv=none; d=zoho.com; s=zohoarc; b=bQ78DoLnCWeVIDCt0Ia/dtH2vjS1XvJ4jD+sdUqlpQaYJFSslSWq6y3o/FOciQTFfwaTtfCIH31yUGiOx8HwlRxlzRfLSyYZ5owTvozZLPe6b4vS8pl5MXPlf0mH/W3ObSqXgEnR+EUFDn1mr0IFTJG64czdcbGr8S4c/EnQ1kE= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com; s=zohoarc; t=1552954881; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results; bh=062SeR25WnLB7dluej2v2JwzSEOU+u/Gmvlqi6EguVQ=; b=UlBvsmc6JLaDGZPAFevmtaQvKOto8O3TO8enkAZL+96EBZoyZoPBClwDUWhKfstZ+XyGwRpxtwtwdrxbRnNU19+0nbCS1TUssJfiRYaljF5l4VYoVVNrtIOSQuAsJMe8rL0phKIQYzufF19CpJh1AUtoekOdl+Hc46QpIr8QPkk= ARC-Authentication-Results: i=1; mx.zoho.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=rekado@elephly.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1552954881; s=zoho; d=elephly.net; i=rekado@elephly.net; h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding; l=477; bh=062SeR25WnLB7dluej2v2JwzSEOU+u/Gmvlqi6EguVQ=; b=F6Y7mdxw661K57tLhYQ7gNW0/P40YZHL0GgJ18YEWkHIP4pLReGVVrFUB68VJUgu F1sDSSOvIs4EWa6xUfzZ+Uo00AXldAe+89+JkwDGpjCHd8LwEQC2+p21z3kUNGlW/JR YD1rFF6H7rblKxdc990igcgK6k66VElmpiVA8ddE= Received: from localhost (p54AD4E7B.dip0.t-ipconnect.de [84.173.78.123]) by mx.zohomail.com with SMTPS id 1552954881106806.4156452422692; Mon, 18 Mar 2019 17:21:21 -0700 (PDT) References: <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> User-agent: mu4e 1.0; emacs 26.1 From: Ricardo Wurmus To: Raghav Gururajan Subject: Re: bug#34861: TLS Error with Flatpak In-reply-to: <2d04774df83fe600777de7b8f26aca87@disroot.org> X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Tue, 19 Mar 2019 01:21:17 +0100 Message-ID: <87d0mnn282.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-ZohoMailClient: External X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34861 Cc: Ludovic =?utf-8?Q?Court=C3=A8s?= , 34861@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Raghav, > Please find the following information. [=E2=80=A6] Unfortunately, this is not very helpful as it only shows that flatpak uses libsoup. > Raghav, could you trace flatpak to see what certificate files it is > trying to access? I meant: could you run the flatpak command with =E2=80=9Cstrace -f -o log -s 2048 flatpak =E2=80=A6=E2=80=9D? This would show us what files it attempts= to access, hopefully including certificate files. -- Ricardo From debbugs-submit-bounces@debbugs.gnu.org Fri Mar 22 17:15:20 2019 Received: (at 34861) by debbugs.gnu.org; 22 Mar 2019 21:15:21 +0000 Received: from localhost ([127.0.0.1]:54751 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7RVY-0000ZF-DA for submit@debbugs.gnu.org; Fri, 22 Mar 2019 17:15:20 -0400 Received: from eggs.gnu.org ([209.51.188.92]:42472) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7RVS-0000Ya-ET for 34861@debbugs.gnu.org; Fri, 22 Mar 2019 17:15:15 -0400 Received: from fencepost.gnu.org ([209.51.188.10]:37519) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h7RVA-00085c-Hj; Fri, 22 Mar 2019 17:15:04 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=51438 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1h7RH8-00073d-3W; Fri, 22 Mar 2019 17:00:26 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: "Raghav Gururajan" Subject: Re: bug#34861: TLS Error with Flatpak References: <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 2 Germinal an 227 de la =?utf-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Fri, 22 Mar 2019 22:00:23 +0100 In-Reply-To: (Raghav Gururajan's message of "Tue, 19 Mar 2019 00:43:03 +0000") Message-ID: <87mulm4obc.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34861 Cc: Ricardo Wurmus , 34861@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Raghav, "Raghav Gururajan" skribis: > Please find the log at: https://bin.disroot.org/?597e32cb7e42e40e#r9lqwZ6= w7sIAWlY2mt6dsgKCKRO5q0ZVt9U69vnZVZs=3D >=20 > 5462 connect(12, {sa_family=3DAF_INET, sin_port=3Dhtons(443), sin_addr= =3Dinet_addr("93.93.130.103")}, 16) =3D -1 EINPROGRESS (Operation now in pr= ogress) [...] > 5462 getsockopt(12, SOL_SOCKET, SO_ERROR, [0], [4]) =3D 0 > 5462 setsockopt(12, SOL_TCP, TCP_NODELAY, [1], 4) =3D 0 [...] > 5462 close(12) =3D 0 [...] > 5461 write(2, "\33[31m\33[1merror: \33[22m\33[0mTLS support is not avail= able\n", 54) =3D 54 Thanks for sending the strace output. That output shows that Flatpak never tries to access /etc/ssl/certs, ~/.guix-profile/etc/ssl/certs or anything like that. The error message comes from GLib, in gdummytlsbackend.c. AFAICS our GLib also includes the TLS (not dummy) backend: --8<---------------cut here---------------start------------->8--- $ objdump -T /gnu/store/0q9pq9flr76rh4bv2524niknknnl2kvq-glib-2.56.3/lib/li= bgio-2.0.so | grep g_tls_backend 0000000000093e90 g DF .text 0000000000000082 Base g_tls_backend_= get_default_database 0000000000093dd0 g DF .text 000000000000006f Base g_tls_backend_= supports_tls 0000000000093f40 g DF .text 000000000000001b Base g_tls_backend_= get_client_connection_type 0000000000093e40 g DF .text 0000000000000049 Base g_tls_backend_= supports_dtls 0000000000093db0 g DF .text 0000000000000015 Base g_tls_backend_= get_default 0000000000093f80 g DF .text 0000000000000072 Base g_tls_backend_= get_dtls_client_connection_type 0000000000093f60 g DF .text 000000000000001b Base g_tls_backend_= get_server_connection_type 0000000000094000 g DF .text 0000000000000072 Base g_tls_backend_= get_dtls_server_connection_type 0000000000094080 g DF .text 000000000000007f Base g_tls_backend_= get_file_database_type 0000000000093d20 g DF .text 0000000000000084 Base g_tls_backend_= get_type 0000000000093f20 g DF .text 000000000000001b Base g_tls_backend_= get_certificate_type --8<---------------cut here---------------end--------------->8--- Libsoup does this: --8<---------------cut here---------------start------------->8--- static gboolean soup_socket_setup_ssl (SoupSocket *sock, const char *ssl_host, GCancellable *cancellable, GError **error) { SoupSocketPrivate *priv =3D soup_socket_get_instance_private (sock); GTlsBackend *backend =3D g_tls_backend_get_default (); --8<---------------cut here---------------end--------------->8--- =E2=80=98g_tls_backend_get_default=E2=80=99 itself looks like this: --8<---------------cut here---------------start------------->8--- GTlsBackend * g_tls_backend_get_default (void) { return _g_io_module_get_default (G_TLS_BACKEND_EXTENSION_POINT_NAME, "GIO_USE_TLS", NULL); } --8<---------------cut here---------------end--------------->8--- Could you try setting the =E2=80=98GIO_USE_TLS=E2=80=99 environment variabl= e? Like: export GIO_USE_TLS=3Dtls or maybe: export GIO_USE_TLS=3DGTlsBackend and then run Flatpak in that environment? TIA, Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 23 00:02:34 2019 Received: (at 34861) by debbugs.gnu.org; 23 Mar 2019 04:02:34 +0000 Received: from localhost ([127.0.0.1]:54901 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7Xrc-0002fP-Sn for submit@debbugs.gnu.org; Sat, 23 Mar 2019 00:02:34 -0400 Received: from knopi.disroot.org ([178.21.23.139]:45650) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7XrY-0002fD-Kx for 34861@debbugs.gnu.org; Sat, 23 Mar 2019 00:02:31 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 3C8952CE52; Sat, 23 Mar 2019 05:02:27 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OJwhJJAM5bli; Sat, 23 Mar 2019 05:02:25 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1553313745; bh=XS200h9M1LA/wug7A+DJU20l0rZccPGWA1W0kgBrzXU=; h=Date:From:Subject:To:Cc:In-Reply-To:References; b=SeGqgwPuy/FNDT8dK2iVaddZoXlihV5VKIi2YyOdpPJQJaL1CpiTXBzeq142esbtG +qs37CTw1i4an/+qbZf8mu9yYVgxJ2h2HwSa7Bv/l5xHrKsUhRSICJOFVIq8mXs9cS +z1GyXvODLyb6YKhRuptKZwYRBgoMI7Df9EFbrV8Iar9LQt2S2ZBnEPsnDjbRVxpdA kmIkgFO4nX9IF6tAbe9YldsJ7yNyYylGeOQRfFvlg+2x4yt3zQMQ8gxscC1Gx56Tds MIHQ5t66bDTNnPA5edl4NClfjbCsHUu0/XyF8K+Per5R4oZw1b6EWzJRLNEA0Mfohs QGeJEnOgQDbJA== Date: Sat, 23 Mar 2019 04:02:25 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: "Raghav Gururajan" Message-ID: <1b38d1aece009c4dc9321811abeea14d@disroot.org> Subject: Re: bug#34861: TLS Error with Flatpak To: "=?utf-8?B?THVkb3ZpYyBDb3VydMOocw==?=" In-Reply-To: <87mulm4obc.fsf@gnu.org> References: <87mulm4obc.fsf@gnu.org> <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 34861 Cc: Ricardo Wurmus , 34861@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Thank you very much.=0A=0AShould I be running just "export GIO_USE_TLS=3D= tls" as it is mentioned or should I insert it in some other command/synta= x?=0A=0AThanks!=0A=0ARegards,=0ARG.=0A=0AMarch 22, 2019 5:15 PM, "Ludovic= Court=C3=A8s" wrote:=0A=0A> Hi Raghav,=0A> =0A> "Raghav G= ururajan" skribis:=0A> =0A>> Please find the log at:= =0A>> https://bin.disroot.org/?597e32cb7e42e40e#r9lqwZ6w7sIAWlY2mt6dsgKCK= RO5q0ZVt9U69vnZVZs=3D=0A>> =0A>> 5462 connect(12, {sa_family=3DAF_INET, s= in_port=3Dhtons(443), sin_addr=3Dinet_addr("93.93.130.103")}, 16)=0A>> = =3D -1 EINPROGRESS (Operation now in progress)=0A> =0A> [...]=0A> =0A>> 5= 462 getsockopt(12, SOL_SOCKET, SO_ERROR, [0], [4]) =3D 0=0A>> 5462 setsoc= kopt(12, SOL_TCP, TCP_NODELAY, [1], 4) =3D 0=0A> =0A> [...]=0A> =0A>> 546= 2 close(12) =3D 0=0A> =0A> [...]=0A> =0A>> 5461 write(2, "\33[31m\33[1mer= ror: \33[22m\33[0mTLS support is not available\n", 54) =3D 54=0A> =0A> Th= anks for sending the strace output. That output shows that Flatpak=0A> ne= ver tries to access /etc/ssl/certs, ~/.guix-profile/etc/ssl/certs or=0A> = anything like that.=0A> =0A> The error message comes from GLib, in gdummy= tlsbackend.c. AFAICS our=0A> GLib also includes the TLS (not dummy) backe= nd:=0A> =0A> --8<---------------cut here---------------start-------------= >8---=0A> $ objdump -T /gnu/store/0q9pq9flr76rh4bv2524niknknnl2kvq-glib-2= .56.3/lib/libgio-2.0.so | grep=0A> g_tls_backend=0A> 0000000000093e90 g D= F .text 0000000000000082 Base g_tls_backend_get_default_database=0A> 0000= 000000093dd0 g DF .text 000000000000006f Base g_tls_backend_supports_tls= =0A> 0000000000093f40 g DF .text 000000000000001b Base g_tls_backend_get_= client_connection_type=0A> 0000000000093e40 g DF .text 0000000000000049 B= ase g_tls_backend_supports_dtls=0A> 0000000000093db0 g DF .text 000000000= 0000015 Base g_tls_backend_get_default=0A> 0000000000093f80 g DF .text 00= 00000000000072 Base g_tls_backend_get_dtls_client_connection_type=0A> 000= 0000000093f60 g DF .text 000000000000001b Base g_tls_backend_get_server_c= onnection_type=0A> 0000000000094000 g DF .text 0000000000000072 Base g_tl= s_backend_get_dtls_server_connection_type=0A> 0000000000094080 g DF .text= 000000000000007f Base g_tls_backend_get_file_database_type=0A> 000000000= 0093d20 g DF .text 0000000000000084 Base g_tls_backend_get_type=0A> 00000= 00000093f20 g DF .text 000000000000001b Base g_tls_backend_get_certificat= e_type=0A> --8<---------------cut here---------------end--------------->8= ---=0A> =0A> Libsoup does this:=0A> =0A> --8<---------------cut here-----= ----------start------------->8---=0A> static gboolean=0A> soup_socket_set= up_ssl (SoupSocket *sock,=0A> const char *ssl_host,=0A> GCancellable *can= cellable,=0A> GError **error)=0A> {=0A> SoupSocketPrivate *priv =3D soup_= socket_get_instance_private (sock);=0A> GTlsBackend *backend =3D g_tls_ba= ckend_get_default ();=0A> --8<---------------cut here---------------end--= ------------->8---=0A> =0A> =E2=80=98g_tls_backend_get_default=E2=80=99 i= tself looks like this:=0A> =0A> --8<---------------cut here--------------= -start------------->8---=0A> GTlsBackend *=0A> g_tls_backend_get_default = (void)=0A> {=0A> return _g_io_module_get_default (G_TLS_BACKEND_EXTENSION= _POINT_NAME,=0A> "GIO_USE_TLS", NULL);=0A> }=0A> --8<---------------cut h= ere---------------end--------------->8---=0A> =0A> Could you try setting = the =E2=80=98GIO_USE_TLS=E2=80=99 environment variable? Like:=0A> =0A> ex= port GIO_USE_TLS=3Dtls=0A> =0A> or maybe:=0A> =0A> export GIO_USE_TLS=3DG= TlsBackend=0A> =0A> and then run Flatpak in that environment?=0A> =0A> TI= A,=0A> Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 23 04:06:13 2019 Received: (at 34861) by debbugs.gnu.org; 23 Mar 2019 08:06:14 +0000 Received: from localhost ([127.0.0.1]:54986 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7bfR-0008WR-Nc for submit@debbugs.gnu.org; Sat, 23 Mar 2019 04:06:13 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21142) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7bfP-0008WJ-Oo for 34861@debbugs.gnu.org; Sat, 23 Mar 2019 04:06:12 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1553328342; cv=none; d=zoho.com; s=zohoarc; b=JMDxVt4/UqN0v6eT7e7sKczMIq2FzDIOmflt/gGYx3X96mn8Q0OII/kV8UXxRUtsVXhCNikUuYZSzsaPyaKYzPGJHDbsnChN7KUo/0Nq5bUcBV9AulidmGYKx4WA1UctID16HvhPVVOnFZFgtOoalSGPXKhlMR4BlNiJ/UtEM8Y= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com; s=zohoarc; t=1553328342; h=Content-Type:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results; bh=RdIqa96rU3TiWkAnyk18XHlGLcN1uqFiFN8iEQ6iyOI=; b=mVttydGfUPMPaDeRDpLDybAmpEQq8F9mftHkADkkbsp6yBHZCA+Ozd/Ap+CyTRiaIvH+AwAjVt+UKfcpaCUQCKCJA1xkNoXTnlX3+ubuQrWvVJl3XXmwpS4ZZ327SyoKcqkzzGdNiRof8PSkJvKVePcmbfimmW0cC14NHfEYqVc= ARC-Authentication-Results: i=1; mx.zoho.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=rekado@elephly.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1553328342; s=zoho; d=elephly.net; i=rekado@elephly.net; h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type; l=277; bh=RdIqa96rU3TiWkAnyk18XHlGLcN1uqFiFN8iEQ6iyOI=; b=HhCmGdU0OoQs9NOFCPHK38H7ZboyOUMPhcwQJcdGMR3qZqdbkfn3AQzPE8PF+PvK sEb6rp/C34Utvqunqo7PEo/gG9kV+pmAh4Z1xmi/wSI8N24Wy9FpBdT/WZ5jMAmrdF/ qR+N60DeOgdigYay6A91RcNE73fAUufTGA/4iO8Y= Received: from localhost (p54AD429D.dip0.t-ipconnect.de [84.173.66.157]) by mx.zohomail.com with SMTPS id 1553328340149583.1405595687785; Sat, 23 Mar 2019 01:05:40 -0700 (PDT) References: <87mulm4obc.fsf@gnu.org> <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> <1b38d1aece009c4dc9321811abeea14d@disroot.org> User-agent: mu4e 1.0; emacs 26.1 From: Ricardo Wurmus To: Raghav Gururajan Subject: Re: bug#34861: TLS Error with Flatpak In-reply-to: <1b38d1aece009c4dc9321811abeea14d@disroot.org> X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Sat, 23 Mar 2019 09:05:35 +0100 Message-ID: <87va0a5834.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain X-ZohoMailClient: External X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34861 Cc: Ludovic =?utf-8?Q?Court=C3=A8s?= , 34861@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Raghav Gururajan writes: > Should I be running just "export GIO_USE_TLS=tls" as it is mentioned > or should I insert it in some other command/syntax? Just that. And then after that run the flatpak command in the same shell session. -- Ricardo From debbugs-submit-bounces@debbugs.gnu.org Sun Mar 24 02:48:19 2019 Received: (at 34861) by debbugs.gnu.org; 24 Mar 2019 06:48:19 +0000 Received: from localhost ([127.0.0.1]:55991 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7wva-0004EC-UG for submit@debbugs.gnu.org; Sun, 24 Mar 2019 02:48:19 -0400 Received: from knopi.disroot.org ([178.21.23.139]:48340) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7wvW-0004E1-94 for 34861@debbugs.gnu.org; Sun, 24 Mar 2019 02:48:16 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 623732CF8E; Sun, 24 Mar 2019 07:48:12 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DylItCRLl-P7; Sun, 24 Mar 2019 07:48:11 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1553410091; bh=M/iU3+BZlon4AaRc+osWsQYzD9D4h1BgwjKomxNtG9o=; h=Date:From:Subject:To:Cc:In-Reply-To:References; b=N6ks6J38iwCubTh6q/c8DEWIaCdPx1yIkUMfLSfqPEYxFO2egRQuqJQkyCxkPgvO8 3EPZ18CEFrWAynaiM8dMvbGNvWsMBy4U4cn9J0k+4486jc2ElAxpwGOzltSSkc7EMV AzXR0Q3g5BmBW+qpyYVq1QCKsjDKr0f1+HE/ywKjQe+3zYQ2tO5oAjWIHekucGH458 3cJMsD6hPyp9oxSK8NJC1PQhx2H87rv2E7ovc9vN4QPJmug4ARXi5Fj1WhEIuOu8SA YToph2BkAbtIZp7YVyo0M8hVG0llEPeTqszw4pT6uDPYPMj3flNGBn9xXzmMf8BsGQ dKtfBL3WLeJkA== Date: Sun, 24 Mar 2019 06:48:11 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: "Raghav Gururajan" Message-ID: Subject: Re: bug#34861: TLS Error with Flatpak To: "Ricardo Wurmus" In-Reply-To: <87va0a5834.fsf@elephly.net> References: <87va0a5834.fsf@elephly.net> <87mulm4obc.fsf@gnu.org> <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> <1b38d1aece009c4dc9321811abeea14d@disroot.org> X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 34861 Cc: =?utf-8?B?THVkb3ZpYyBDb3VydMOocw==?= , 34861@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello!=0A=0AAdding remote repo in Flatpak is working now. Thank you very = much. Can you make export variable information mentioned at the end "guix= package -i flatpak" process?=0A=0ARegards,=0ARG.=0A=0AMarch 23, 2019 8:0= 6 AM, "Ricardo Wurmus" wrote:=0A=0A> Raghav Gururaja= n writes:=0A> =0A>> Should I be running just "export G= IO_USE_TLS=3Dtls" as it is mentioned=0A>> or should I insert it in some o= ther command/syntax?=0A> =0A> Just that. And then after that run the flat= pak command in the same=0A> shell session.=0A> =0A> --=0A> Ricardo From debbugs-submit-bounces@debbugs.gnu.org Sun Mar 24 18:13:15 2019 Received: (at 34861-done) by debbugs.gnu.org; 24 Mar 2019 22:13:15 +0000 Received: from localhost ([127.0.0.1]:57230 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h8BMh-0005W0-GL for submit@debbugs.gnu.org; Sun, 24 Mar 2019 18:13:15 -0400 Received: from eggs.gnu.org ([209.51.188.92]:40147) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h8BMe-0005Vl-Gv for 34861-done@debbugs.gnu.org; Sun, 24 Mar 2019 18:13:12 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:52962) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h8BMY-00024V-Bk; Sun, 24 Mar 2019 18:13:06 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=52576 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1h8BMX-0000iB-Rv; Sun, 24 Mar 2019 18:13:06 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: "Raghav Gururajan" Subject: Re: bug#34861: TLS Error with Flatpak References: <87va0a5834.fsf@elephly.net> <87mulm4obc.fsf@gnu.org> <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> <1b38d1aece009c4dc9321811abeea14d@disroot.org> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 4 Germinal an 227 de la =?utf-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Sun, 24 Mar 2019 23:13:03 +0100 In-Reply-To: (Raghav Gururajan's message of "Sun, 24 Mar 2019 06:48:11 +0000") Message-ID: <87y353syz4.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34861-done Cc: Ricardo Wurmus , 34861-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello, "Raghav Gururajan" skribis: > Adding remote repo in Flatpak is working now. Thank you very much. Nice! > Can you make export variable information mentioned at the end "guix packa= ge -i flatpak" process? I think we should rather find out why GIO uses the =E2=80=9Cdummy=E2=80=9D = TLS backend by default. The GnuTLS backend is part of =E2=80=98glib-networking=E2=80= =99, not GLib, and =E2=80=98GIO_EXTRA_MODULES=E2=80=99 was not being set, which is why the= correct TLS backend wasn=E2=80=99t found. Fixed in commit 16360cc884030eb69590dc18d9694b04c67273f6. Once you=E2=80=99ve upgraded you should no longer need to set =E2=80=98GIO_= USE_TLS=E2=80=99. Thanks! Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Sun Mar 24 18:13:30 2019 Received: (at 34861-done) by debbugs.gnu.org; 24 Mar 2019 22:13:30 +0000 Received: from localhost ([127.0.0.1]:57233 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h8BMu-0005WT-OZ for submit@debbugs.gnu.org; Sun, 24 Mar 2019 18:13:30 -0400 Received: from eggs.gnu.org ([209.51.188.92]:40177) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h8BMt-0005WE-9Q for 34861-done@debbugs.gnu.org; Sun, 24 Mar 2019 18:13:27 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:52964) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h8BMo-00029r-3N; Sun, 24 Mar 2019 18:13:22 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=52582 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1h8BMn-0000iP-HH; Sun, 24 Mar 2019 18:13:21 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: "Raghav Gururajan" Subject: Re: bug#34861: TLS Error with Flatpak In-Reply-To: (Raghav Gururajan's message of "Sun, 24 Mar 2019 06:48:11 +0000") References: <87va0a5834.fsf@elephly.net> <87mulm4obc.fsf@gnu.org> <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> <1b38d1aece009c4dc9321811abeea14d@disroot.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 4 Germinal an 227 de la =?utf-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Sun, 24 Mar 2019 23:13:19 +0100 Message-ID: <87woknsyyo.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34861-done Cc: Ricardo Wurmus , 34861-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello, "Raghav Gururajan" skribis: > Adding remote repo in Flatpak is working now. Thank you very much. Nice! > Can you make export variable information mentioned at the end "guix packa= ge -i flatpak" process? I think we should rather find out why GIO uses the =E2=80=9Cdummy=E2=80=9D = TLS backend by default. The GnuTLS backend is part of =E2=80=98glib-networking=E2=80= =99, not GLib, and =E2=80=98GIO_EXTRA_MODULES=E2=80=99 was not being set, which is why the= correct TLS backend wasn=E2=80=99t found. Fixed in commit 16360cc884030eb69590dc18d9694b04c67273f6. Once you=E2=80=99ve upgraded you should no longer need to set =E2=80=98GIO_= USE_TLS=E2=80=99. Thanks! Ludo=E2=80=99. From unknown Sat Aug 09 09:34:54 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Mon, 22 Apr 2019 11:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator