From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: "Raghav Gururajan" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 14 Mar 2019 20:44:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 34861@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.15525962044511 (code B ref -1); Thu, 14 Mar 2019 20:44:01 +0000 Received: (at submit) by debbugs.gnu.org; 14 Mar 2019 20:43:24 +0000 Received: from localhost ([127.0.0.1]:44111 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h4XCF-0001Ag-Lr for submit@debbugs.gnu.org; Thu, 14 Mar 2019 16:43:23 -0400 Received: from eggs.gnu.org ([209.51.188.92]:58237) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h4XCB-0001AR-Oy for submit@debbugs.gnu.org; Thu, 14 Mar 2019 16:43:22 -0400 Received: from lists.gnu.org ([209.51.188.17]:51878) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1h4XC6-00015p-Du for submit@debbugs.gnu.org; Thu, 14 Mar 2019 16:43:14 -0400 Received: from eggs.gnu.org ([209.51.188.92]:44039) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h4XC5-0001X1-CW for bug-guix@gnu.org; Thu, 14 Mar 2019 16:43:14 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,HTML_MESSAGE, RCVD_IN_DNSWL_NONE,URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1h4X68-00026E-Vc for bug-guix@gnu.org; Thu, 14 Mar 2019 16:37:05 -0400 Received: from knopi.disroot.org ([178.21.23.139]:50704) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1h4X68-000236-0F for bug-guix@gnu.org; Thu, 14 Mar 2019 16:37:04 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 307B72C368 for ; Thu, 14 Mar 2019 21:37:00 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SVYsVDzh4Zrt for ; Thu, 14 Mar 2019 21:36:58 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1552595818; bh=IquL4TLseCKH9oHqUnSfxSJuGE1s4sd4cH0/pr3Xq0U=; h=Date:From:Subject:To; b=IOj1sAxPxiGgKXulX+Y8Ivguck/myI/1fM7T9Ox+7mIIUaTR8EyQ7DrqG9eb1iKD2 Oxw8jD/nhyz6H9kPszTgPUYl2jIvCOyWMSMVM13tTW+QvbFRxfbeiV/tEe/IrJpD0n 668r2tlMjqEuNGBHbKrWpPp4UkIG9UzhpkF6HvsjK4mH7euKAg1Nvzv2INQnr/HoRx VLI2FdRf0EOj2Po2TsCZai/JTMeS5akrfGG+XR/IYL9XZD5lhYh9jJZ2jx7/5Zg54P Xun7LHNmRI8/Tv5KYYwQwLOhMlfTspeDyqg4e8N8Lp3FexdODm5nPEIQlYibXHPoPo CnqX0VhiUa6mg== Date: Thu, 14 Mar 2019 20:36:58 +0000 Content-Type: multipart/alternative; boundary="--=_RainLoop_957_212577591.1552595818" From: "Raghav Gururajan" Message-ID: <002a84964102ac2171089fa7dc007092@disroot.org> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 178.21.23.139 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Spam-Score: 0.9 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) ----=_RainLoop_957_212577591.1552595818 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Guix!=0A=0APackage: flatpak=0A=0AWhenever I try "flatpak remote-add= --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo"; I= keep getting the error "Can't load uri https://flathub.org/repo/flathub.= flatpakrepo: TLS support is not available".=0A=0AI even tried following s= teps mentioned at https://www.gnu.org/software/guix/manual/en/guix.html#i= ndex-TLS. Still not working.=0A=0AUnless this is fixed, flatpak in guix w= ill be unusable with remote repositories.=0A=0ARegards,=0ARG. ----=_RainLoop_957_212577591.1552595818 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable
H= ello Guix!

Package: flatpak

Whenever I try "flatpak remote-= add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo"= ; I keep getting the error "Can't load uri https://flathub.org/repo/flath= ub.flatpakrepo: TLS support is not available".

I even tried follow= ing steps mentioned at https://www.gnu.org/software/guix/manual/en/guix.h= tml#index-TLS. Still not working.

Unless this is fixed, flatpak in= guix will be unusable with remote repositories.

Regards,
RG. ----=_RainLoop_957_212577591.1552595818-- From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 18 Mar 2019 09:50:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "Raghav Gururajan" Cc: 34861@debbugs.gnu.org Received: via spool by 34861-submit@debbugs.gnu.org id=B34861.155290258330897 (code B ref 34861); Mon, 18 Mar 2019 09:50:02 +0000 Received: (at 34861) by debbugs.gnu.org; 18 Mar 2019 09:49:43 +0000 Received: from localhost ([127.0.0.1]:48119 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5otr-00082H-0A for submit@debbugs.gnu.org; Mon, 18 Mar 2019 05:49:43 -0400 Received: from eggs.gnu.org ([209.51.188.92]:59784) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5otp-000824-6h for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 05:49:42 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:33912) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h5otj-0008Rz-Hn; Mon, 18 Mar 2019 05:49:35 -0400 Received: from [2001:660:6102:320:e120:2c8f:8909:cdfe] (port=53582 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1h5oti-0005oO-SW; Mon, 18 Mar 2019 05:49:35 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <002a84964102ac2171089fa7dc007092@disroot.org> Date: Mon, 18 Mar 2019 10:49:33 +0100 In-Reply-To: <002a84964102ac2171089fa7dc007092@disroot.org> (Raghav Gururajan's message of "Thu, 14 Mar 2019 20:36:58 +0000") Message-ID: <87imwgpl5e.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello, "Raghav Gururajan" skribis: > Whenever I try "flatpak remote-add --if-not-exists flathub https://flathu= b.org/repo/flathub.flatpakrepo"; I keep getting the error "Can't load uri h= ttps://flathub.org/repo/flathub.flatpakrepo: TLS support is not available". > > I even tried following steps mentioned at https://www.gnu.org/software/gu= ix/manual/en/guix.html#index-TLS. Still not working. To be more specific, did you install =E2=80=98nss-certs=E2=80=99? If you did is it installed system-wide in /etc/ssl/certs, or per-user? Did you set =E2=80=98SSL_CERT_DIR=E2=80=99, =E2=80=98SSL_CERT_FILE=E2=80=99= , or related environment variables? Thanks, Ludo=E2=80=99. From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: "Raghav Gururajan" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 18 Mar 2019 17:33:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "Ludovic =?UTF-8?Q?Court=C3=A8s?=" Cc: 34861@debbugs.gnu.org Received: via spool by 34861-submit@debbugs.gnu.org id=B34861.15529303223058 (code B ref 34861); Mon, 18 Mar 2019 17:33:01 +0000 Received: (at 34861) by debbugs.gnu.org; 18 Mar 2019 17:32:02 +0000 Received: from localhost ([127.0.0.1]:49154 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5w7E-0000my-3G for submit@debbugs.gnu.org; Mon, 18 Mar 2019 13:32:00 -0400 Received: from knopi.disroot.org ([178.21.23.139]:38096) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5w7B-0000mn-Uc for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 13:31:59 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 5C7442C874; Mon, 18 Mar 2019 18:31:56 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bMEX15DZOj1M; Mon, 18 Mar 2019 18:31:54 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1552930314; bh=XOtVfIz9H+yTLLH1rfm4o8x9gj67sa19c2mJ21Yt94Q=; h=Date:From:Subject:To:Cc:In-Reply-To:References; b=A2RQRP7PNx4EgkAwoz/wqECk6cOff9KaXlGBw1s4SwmUoayZY8F8+fGIzctIjiVS9 W6aHIvF7Y20FbnGHq7d0SsFIriwPYlF6R5EtPL3seCZ9JsCBrsqpCM48hoZVULr8y1 xgTA1yvqhzXxQVzIUWww7FCoJkuLJ5QZ3jaKptwKlO8jfPN6eO9T1XkgyG2u6a5htB tavw5RvkL8qtFC4eKKX1lcS+l4seUUUJAH+DpKSVxV3rUHDfD9QvhaFh+WwVrIwsZe nv7Ih5569xzX5wTQrbVVqc4rzxJgEfd5Vbvl6jaS4zwxcC+36uff/Jdpn919tGgF6K /JXilgTxWgKXA== Date: Mon, 18 Mar 2019 17:31:54 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: "Raghav Gururajan" Message-ID: In-Reply-To: <87imwgpl5e.fsf@gnu.org> References: <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello Ludovic!=0A=0AYes, I did them. Still did not work.=0A=0AI did the f= ollowing to set env variables:=0A=0A$ guix package -i nss-certs=0A$ expor= t SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs"=0A$ export SSL_CERT_= FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"=0A$ export= GIT_SSL_CAINFO=3D"$SSL_CERT_FILE"=0A=0ARegards,=0ARG.=0A=0AMarch 18, 201= 9 9:49 AM, "Ludovic Court=C3=A8s" wrote:=0A=0A> Hello,=0A>= =0A> "Raghav Gururajan" skribis:=0A> =0A>> Whenever I= try "flatpak remote-add --if-not-exists flathub=0A>> https://flathub.org= /repo/flathub.flatpakrepo"; I keep getting the error "Can't load uri=0A>>= https://flathub.org/repo/flathub.flatpakrepo: TLS support is not availab= le".=0A>> =0A>> I even tried following steps mentioned at=0A>> https://ww= w.gnu.org/software/guix/manual/en/guix.html#index-TLS. Still not working.= =0A> =0A> To be more specific, did you install =E2=80=98nss-certs=E2=80= =99?=0A> =0A> If you did is it installed system-wide in /etc/ssl/certs, o= r per-user?=0A> =0A> Did you set =E2=80=98SSL_CERT_DIR=E2=80=99, =E2=80= =98SSL_CERT_FILE=E2=80=99, or related environment=0A> variables?=0A> =0A>= Thanks,=0A> Ludo=E2=80=99. From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: Ricardo Wurmus Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 18 Mar 2019 21:25:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Raghav Gururajan Cc: Ludovic =?UTF-8?Q?Court=C3=A8s?= , 34861@debbugs.gnu.org Received: via spool by 34861-submit@debbugs.gnu.org id=B34861.155294429225210 (code B ref 34861); Mon, 18 Mar 2019 21:25:03 +0000 Received: (at 34861) by debbugs.gnu.org; 18 Mar 2019 21:24:52 +0000 Received: from localhost ([127.0.0.1]:49268 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5zka-0006YY-Ge for submit@debbugs.gnu.org; Mon, 18 Mar 2019 17:24:52 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21115) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h5zkY-0006YP-QY for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 17:24:51 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1552944263; cv=none; d=zoho.com; s=zohoarc; b=iF5GeAD/WgbkFnrXPgb7rQwGB5Hp74lUej4qyIHaNmRpLWEbExABHm3iqfbGGjqz36clLKBrLjSX71GbRlDkoWF1SMM5mmk17fRVA+gpWhgpTluJD4hWL+fhre11JyNeLTv35Pr56OR7XsNOwjWCsHD5p339mYKKBzOon0Ay73w= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com; s=zohoarc; t=1552944263; h=Content-Type:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results; bh=2D6nc/vu9lzl7hrN5Y4tXV5jUzCp+VeLAegUhcPw2oM=; b=c1YzMXaB2ijuX+fqNSyJa7+HA2cM2+vBUo0TP9HfjylCjLf+5pIz4iZCJx3IYucyz2rDhdKTaOL+gswf2sb9VL/d9QxjYekbWrQ437BaWXR4kEY4c3AnMkxk/+xiJZAzR2zecPgzDefMcxMVCRPvlvZLZITJbILOIKEBuGuB7iM= ARC-Authentication-Results: i=1; mx.zoho.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=rekado@elephly.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1552944263; s=zoho; d=elephly.net; i=rekado@elephly.net; h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type; l=581; bh=2D6nc/vu9lzl7hrN5Y4tXV5jUzCp+VeLAegUhcPw2oM=; b=VkHPFTAvBqmJLgPp/G3Em4Ejj9bmt9BCe7NRhnm974O8SHaIPXXakEB35+rw2/Fr UZz/SqvmFeDic4n17Ap6+hoeruNo+qaPRT/bi1OZlyGbA+YohOup21/Y81XFcJYKYhl HyjU7xRSJwV9I44ZzaIJ92I9Vkn8fMSbCy/5yvss= Received: from localhost (p54AD4E7B.dip0.t-ipconnect.de [84.173.78.123]) by mx.zohomail.com with SMTPS id 1552944261482695.5759285468879; Mon, 18 Mar 2019 14:24:21 -0700 (PDT) References: <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> User-agent: mu4e 1.0; emacs 26.1 From: Ricardo Wurmus In-reply-to: X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Mon, 18 Mar 2019 22:24:12 +0100 Message-ID: <87ef73yiyr.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain X-ZohoMailClient: External X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Raghav Gururajan writes: > Yes, I did them. Still did not work. > > I did the following to set env variables: > > $ guix package -i nss-certs > $ export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs" > $ export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt" > $ export GIT_SSL_CAINFO="$SSL_CERT_FILE" Flatpak uses libsoup with SOUP_SESSION_SSL_USE_SYSTEM_CA_FILE. libsoup delegates TLS handling to glib-networking. Raghav, could you trace flatpak to see what certificate files it is trying to access? -- Ricardo From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: "Raghav Gururajan" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 18 Mar 2019 23:11:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "Ricardo Wurmus" Cc: Ludovic =?UTF-8?Q?Court=C3=A8s?= , 34861@debbugs.gnu.org Received: via spool by 34861-submit@debbugs.gnu.org id=B34861.15529506563014 (code B ref 34861); Mon, 18 Mar 2019 23:11:01 +0000 Received: (at 34861) by debbugs.gnu.org; 18 Mar 2019 23:10:56 +0000 Received: from localhost ([127.0.0.1]:49344 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h61PE-0000mY-9s for submit@debbugs.gnu.org; Mon, 18 Mar 2019 19:10:56 -0400 Received: from knopi.disroot.org ([178.21.23.139]:38930) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h61P9-0000mM-Uq for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 19:10:55 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 477D62C292; Tue, 19 Mar 2019 00:10:50 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iam9GJ-lRVj7; Tue, 19 Mar 2019 00:10:48 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1552950648; bh=cLV4NUAgOTHAuW//kAz+EPy3Iw9tLglpG5YH1UQpeuc=; h=Date:From:Subject:To:Cc:In-Reply-To:References; b=JH8mgQWhKHY6oqwxvhQADZI3rxrC/Swo0OOkB4tKjaORUGVOcxR5RwPoOY0iXE8AP RECDhGKAgLhE+mcnEz/5G4MDmah4y0bMRXvIwmZfpRYYR9vf1KeIUcfG4TtFz8J09c j7uoMeKDHJt0Mi/+GcgobQ2JFYRJe5CNV3/BhMLnBn/dlZVdhw5K0KV3KmjG4Wg3iL F1jSrER9X88rOjdyKDGvAa9uZ/OPvGkCrs2W9Bdajq0H2fy21LhdQ9MB3BDJ1xHwy6 XK0YzUmqZtusJwX3qXkIfDM6o8ylfmOWVhB7f3WOoV9M7m/TaPe++tuEQn+0p5xHd4 96046khB4CUYg== Date: Mon, 18 Mar 2019 23:10:48 +0000 Content-Type: multipart/alternative; boundary="--=_RainLoop_231_772500090.1552950648" From: "Raghav Gururajan" Message-ID: <2d04774df83fe600777de7b8f26aca87@disroot.org> In-Reply-To: <87ef73yiyr.fsf@elephly.net> References: <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) ----=_RainLoop_231_772500090.1552950648 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Ricardo!=0A=0APlease find the following information.=0A=0AFROM FLAT= PAK SOURECODE:=0A=0ASoupSession *=0Aflatpak_create_soup_session (const ch= ar *user_agent)=0A{=0ASoupSession *soup_session;=0Aconst char *http_proxy= ;=0A=0Asoup_session =3D soup_session_new_with_options (SOUP_SESSION_USER_= AGENT, user_agent,=0ASOUP_SESSION_SSL_USE_SYSTEM_CA_FILE, TRUE,=0ASOUP_SE= SSION_USE_THREAD_CONTEXT, TRUE,=0ASOUP_SESSION_TIMEOUT, 60,=0ASOUP_SESSIO= N_IDLE_TIMEOUT, 60,=0ANULL);=0Asoup_session_remove_feature_by_type (soup_= session, SOUP_TYPE_CONTENT_DECODER);=0Ahttp_proxy =3D g_getenv ("http_pro= xy");=0Aif (http_proxy)=0A{=0Ag_autoptr(SoupURI) proxy_uri =3D soup_uri_n= ew (http_proxy);=0Aif (!proxy_uri)=0Ag_warning ("Invalid proxy URI '%s'",= http_proxy);=0Aelse=0Ag_object_set (soup_session, SOUP_SESSION_PROXY_URI= , proxy_uri, NULL);=0A}=0A=0Aif (g_getenv ("OSTREE_DEBUG_HTTP"))=0Asoup_s= ession_add_feature (soup_session, (SoupSessionFeature *) soup_logger_new = (SOUP_LOGGER_LOG_BODY, 500));=0A=0Areturn soup_session;=0A}=0A=0AFROM LIB= SOUP MANUAL:=0A=0AThe =E2=80=9Cssl-use-system-ca-file=E2=80=9D property= =0A=0A=E2=80=9Cssl-use-system-ca-file=E2=80=9D gboolean=0A=0ASetting this= to TRUE is equivalent to setting =E2=80=9Ctls-database=E2=80=9D to the d= efault system CA database. (and likewise, setting =E2=80=9Ctls-database= =E2=80=9D to the default database by hand will cause this property to bec= ome TRUE).=0A=0ASetting this to FALSE (when it was previously TRUE) will = clear the =E2=80=9Ctls-database=E2=80=9D field.=0A=0ASee =E2=80=9Cssl-str= ict=E2=80=9D for more information on how https certificate validation is = handled.=0A=0AThe =E2=80=9Cssl-strict=E2=80=9D property=0A=0A=E2=80=9Cssl= -strict=E2=80=9D gboolean=0A=0ANormally, if =E2=80=9Ctls-database=E2=80= =9D is set (including if it was set via =E2=80=9Cssl-use-system-ca-file= =E2=80=9D or =E2=80=9Cssl-ca-file=E2=80=9D), then libsoup will reject any= certificate that is invalid (ie, expired) or that is not signed by one o= f the given CA certificates, and the SoupMessage will fail with the statu= s SOUP_STATUS_SSL_FAILED.=0A=0AIf you set =E2=80=9Cssl-strict=E2=80=9D to= FALSE, then all certificates will be accepted, and you will need to call= soup_message_get_https_status() to distinguish valid from invalid certif= icates. (This can be used, eg, if you want to accept invalid certificates= after giving some sort of warning.)=0A=0AFor a plain SoupSession, if the= session has no CA file or TLS database, and this property is TRUE, then = all certificates will be rejected.=0A=0A--=0ARegards,=0ARG.=0A=0AMarch 18= , 2019 9:24 PM, "Ricardo Wurmus" wrote:=0A Raghav Gururajan writes:=0A Yes, I did them. Still did not work.=0A=0AI did the fo= llowing to set env variables:=0A=0A$ guix package -i nss-certs=0A$ export= SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs"=0A$ export SSL_CERT_F= ILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"=0A$ export = GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" =0A=0AFlatpak uses libsoup with SOUP_SE= SSION_SSL_USE_SYSTEM_CA_FILE. libsoup=0Adelegates TLS handling to glib-ne= tworking.=0A=0ARaghav, could you trace flatpak to see what certificate fi= les it is=0Atrying to access?=0A=0A--=0ARicardo ----=_RainLoop_231_772500090.1552950648 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable
H= ello Ricardo!

Please find the following information.

FROM FLATPAK SOURECODE:

SoupSession *
flatpak_create= _soup_session (const char *user_agent)
{
SoupSession *soup_session;=
const char *http_proxy;

soup_session =3D soup_session_new_with= _options (SOUP_SESSION_USER_AGENT, user_agent,
SOUP_SESSION_SSL_USE_SY= STEM_CA_FILE, TRUE,
SOUP_SESSION_USE_THREAD_CONTEXT, TRUE,
SOUP_SES= SION_TIMEOUT, 60,
SOUP_SESSION_IDLE_TIMEOUT, 60,
NULL);
soup_ses= sion_remove_feature_by_type (soup_session, SOUP_TYPE_CONTENT_DECODER);http_proxy =3D g_getenv ("http_proxy");
if (http_proxy)
{
g_aut= optr(SoupURI) proxy_uri =3D soup_uri_new (http_proxy);
if (!proxy_uri)=
g_warning ("Invalid proxy URI '%s'", http_proxy);
else
g_object= _set (soup_session, SOUP_SESSION_PROXY_URI, proxy_uri, NULL);
}
if (g_getenv ("OSTREE_DEBUG_HTTP"))
soup_session_add_feature (soup_se= ssion, (SoupSessionFeature *) soup_logger_new (SOUP_LOGGER_LOG_BODY, 500)= );

return soup_session;
}

FROM LIBSOUP MANUAL:

The =E2=80=9Cssl-use-system-ca-file=E2=80=9D prope= rty

=E2=80=9Cssl-use-system-ca-file=E2=80=9D gboolean
=
Setting this to TRUE is equivalent to setting =E2=80=9Ctls-database= =E2=80=9D to the default system CA database. (and likewise, setting =E2= =80=9Ctls-database=E2=80=9D to the default database by hand will cause th= is property to become TRUE).

Setting this to FALSE (when it was pr= eviously TRUE) will clear the =E2=80=9Ctls-database=E2=80=9D field.
See =E2=80=9Cssl-strict=E2=80=9D for more information on how https cert= ificate validation is handled.

The =E2=80=9Cssl-strict=E2= =80=9D property

=E2=80=9Cssl-strict=E2=80=9D gboolean
=
Normally, if =E2=80=9Ctls-database=E2=80=9D is set (including if it w= as set via =E2=80=9Cssl-use-system-ca-file=E2=80=9D or =E2=80=9Cssl-ca-fi= le=E2=80=9D), then libsoup will reject any certificate that is invalid (i= e, expired) or that is not signed by one of the given CA certificates, an= d the SoupMessage will fail with the status SOUP_STATUS_SSL_FAILED.
If you set =E2=80=9Cssl-strict=E2=80=9D to FALSE, then all certificates= will be accepted, and you will need to call soup_message_get_https_statu= s() to distinguish valid from invalid certificates. (This can be used, eg= , if you want to accept invalid certificates after giving some sort of wa= rning.)

For a plain SoupSession, if the session has no CA file or = TLS database, and this property is TRUE, then all certificates will be re= jected.

--
Regards,
RG.

March 18, 2019 9:24 PM, "Rica= rdo Wurmus" <rekado@elephly.net> wrote:
Raghav Gururajan <rvgn@disroot.org> writes:
Yes, I did them. Still did not work.

I did the following= to set env variables:

$ guix package -i nss-certs
$ export SSL= _CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs"
$ export SSL_CERT_FILE= =3D"$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
$ export GI= T_SSL_CAINFO=3D"$SSL_CERT_FILE"

Flatpak uses libsoup= with SOUP_SESSION_SSL_USE_SYSTEM_CA_FILE. libsoup
delegates TLS handl= ing to glib-networking.

Raghav, could you trace flatpak to see wha= t certificate files it is
trying to access?

--
Ricardo
----=_RainLoop_231_772500090.1552950648-- From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: "Raghav Gururajan" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 19 Mar 2019 00:44:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "Ricardo Wurmus" Cc: Ludovic =?UTF-8?Q?Court=C3=A8s?= , 34861@debbugs.gnu.org Received: via spool by 34861-submit@debbugs.gnu.org id=B34861.155295618911569 (code B ref 34861); Tue, 19 Mar 2019 00:44:02 +0000 Received: (at 34861) by debbugs.gnu.org; 19 Mar 2019 00:43:09 +0000 Received: from localhost ([127.0.0.1]:49378 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h62qT-00030W-9k for submit@debbugs.gnu.org; Mon, 18 Mar 2019 20:43:09 -0400 Received: from knopi.disroot.org ([178.21.23.139]:50950) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h62qQ-00030L-EH for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 20:43:07 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id E18102C8C6; Tue, 19 Mar 2019 01:43:04 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lvG_t7GvevHF; Tue, 19 Mar 2019 01:43:03 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1552956183; bh=GUTgRhUCqr5WXU5t0isT2vN9iiFMG+TRVjd3FlFDAc8=; h=Date:From:Subject:To:Cc:In-Reply-To:References; b=glwUAr2VKKzsU8o/T9cZCTKEYpWJCAnvXo4hjCMC/WMHLZrUgpfl1YFLk6k1SmHKe FXVV3Z2EPrSs6lBBcxoDlfMTHmU/8PgXk2VKbbrS5gT9L3w75/R1hfmoxPiMS2YGzN w1x2YhG4oSNcCC2L8zdwzOpYP6IBVB2KkaVzLzxTSKsw+sMoC6epf3JxX06y3oH9Z9 IPjaqwde5fNd9FmJIN/MgrBc9Jtumm4IV0k89bWb+Ur2+qiwaQ2ZQ/8MYLGTi8TvLm IOl8+i1JR4t/qgyGGxiWqHJ14hpyMsiGLs/C9x5O1vHjeTR6hz0DM0tmYMWmVBKMe4 AcK/MG09Y01ZQ== Date: Tue, 19 Mar 2019 00:43:03 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: "Raghav Gururajan" Message-ID: In-Reply-To: <87d0mnn282.fsf@elephly.net> References: <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Ricardo!=0A=0APlease find the log at: https://bin.disroot.org/?597e32c= b7e42e40e#r9lqwZ6w7sIAWlY2mt6dsgKCKRO5q0ZVt9U69vnZVZs=3D=0A=0AThank you!= =0A=0ARegards,=0ARG.=0A=0AMarch 19, 2019 12:22 AM, "Ricardo Wurmus" wrote:=0A=0A> Hi Raghav,=0A> =0A>> Please find the follow= ing information. [=E2=80=A6]=0A> =0A> Unfortunately, this is not very hel= pful as it only shows that flatpak=0A> uses libsoup.=0A> =0A>> Raghav, co= uld you trace flatpak to see what certificate files it is=0A>> trying to = access?=0A> =0A> I meant: could you run the flatpak command with =E2=80= =9Cstrace -f -o log -s=0A> 2048 flatpak =E2=80=A6=E2=80=9D? This would sh= ow us what files it attempts to access,=0A> hopefully including certifica= te files.=0A> =0A> --=0A> Ricardo From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: Ricardo Wurmus Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 19 Mar 2019 01:08:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Raghav Gururajan Cc: Ludovic =?UTF-8?Q?Court=C3=A8s?= , 34861@debbugs.gnu.org Received: via spool by 34861-submit@debbugs.gnu.org id=B34861.155295765013750 (code B ref 34861); Tue, 19 Mar 2019 01:08:01 +0000 Received: (at 34861) by debbugs.gnu.org; 19 Mar 2019 01:07:30 +0000 Received: from localhost ([127.0.0.1]:49383 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h63E2-0003Zi-Bh for submit@debbugs.gnu.org; Mon, 18 Mar 2019 21:07:30 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21014) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h63E0-0003ZZ-4K for 34861@debbugs.gnu.org; Mon, 18 Mar 2019 21:07:28 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1552954881; cv=none; d=zoho.com; s=zohoarc; b=bQ78DoLnCWeVIDCt0Ia/dtH2vjS1XvJ4jD+sdUqlpQaYJFSslSWq6y3o/FOciQTFfwaTtfCIH31yUGiOx8HwlRxlzRfLSyYZ5owTvozZLPe6b4vS8pl5MXPlf0mH/W3ObSqXgEnR+EUFDn1mr0IFTJG64czdcbGr8S4c/EnQ1kE= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com; s=zohoarc; t=1552954881; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results; bh=062SeR25WnLB7dluej2v2JwzSEOU+u/Gmvlqi6EguVQ=; b=UlBvsmc6JLaDGZPAFevmtaQvKOto8O3TO8enkAZL+96EBZoyZoPBClwDUWhKfstZ+XyGwRpxtwtwdrxbRnNU19+0nbCS1TUssJfiRYaljF5l4VYoVVNrtIOSQuAsJMe8rL0phKIQYzufF19CpJh1AUtoekOdl+Hc46QpIr8QPkk= ARC-Authentication-Results: i=1; mx.zoho.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=rekado@elephly.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1552954881; s=zoho; d=elephly.net; i=rekado@elephly.net; h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding; l=477; bh=062SeR25WnLB7dluej2v2JwzSEOU+u/Gmvlqi6EguVQ=; b=F6Y7mdxw661K57tLhYQ7gNW0/P40YZHL0GgJ18YEWkHIP4pLReGVVrFUB68VJUgu F1sDSSOvIs4EWa6xUfzZ+Uo00AXldAe+89+JkwDGpjCHd8LwEQC2+p21z3kUNGlW/JR YD1rFF6H7rblKxdc990igcgK6k66VElmpiVA8ddE= Received: from localhost (p54AD4E7B.dip0.t-ipconnect.de [84.173.78.123]) by mx.zohomail.com with SMTPS id 1552954881106806.4156452422692; Mon, 18 Mar 2019 17:21:21 -0700 (PDT) References: <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> User-agent: mu4e 1.0; emacs 26.1 From: Ricardo Wurmus In-reply-to: <2d04774df83fe600777de7b8f26aca87@disroot.org> X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Tue, 19 Mar 2019 01:21:17 +0100 Message-ID: <87d0mnn282.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-ZohoMailClient: External X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Raghav, > Please find the following information. [=E2=80=A6] Unfortunately, this is not very helpful as it only shows that flatpak uses libsoup. > Raghav, could you trace flatpak to see what certificate files it is > trying to access? I meant: could you run the flatpak command with =E2=80=9Cstrace -f -o log -s 2048 flatpak =E2=80=A6=E2=80=9D? This would show us what files it attempts= to access, hopefully including certificate files. -- Ricardo From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 22 Mar 2019 21:16:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "Raghav Gururajan" Cc: Ricardo Wurmus , 34861@debbugs.gnu.org Received: via spool by 34861-submit@debbugs.gnu.org id=B34861.15532893212191 (code B ref 34861); Fri, 22 Mar 2019 21:16:06 +0000 Received: (at 34861) by debbugs.gnu.org; 22 Mar 2019 21:15:21 +0000 Received: from localhost ([127.0.0.1]:54751 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7RVY-0000ZF-DA for submit@debbugs.gnu.org; Fri, 22 Mar 2019 17:15:20 -0400 Received: from eggs.gnu.org ([209.51.188.92]:42472) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7RVS-0000Ya-ET for 34861@debbugs.gnu.org; Fri, 22 Mar 2019 17:15:15 -0400 Received: from fencepost.gnu.org ([209.51.188.10]:37519) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h7RVA-00085c-Hj; Fri, 22 Mar 2019 17:15:04 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=51438 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1h7RH8-00073d-3W; Fri, 22 Mar 2019 17:00:26 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 2 Germinal an 227 de la =?UTF-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Fri, 22 Mar 2019 22:00:23 +0100 In-Reply-To: (Raghav Gururajan's message of "Tue, 19 Mar 2019 00:43:03 +0000") Message-ID: <87mulm4obc.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Raghav, "Raghav Gururajan" skribis: > Please find the log at: https://bin.disroot.org/?597e32cb7e42e40e#r9lqwZ6= w7sIAWlY2mt6dsgKCKRO5q0ZVt9U69vnZVZs=3D >=20 > 5462 connect(12, {sa_family=3DAF_INET, sin_port=3Dhtons(443), sin_addr= =3Dinet_addr("93.93.130.103")}, 16) =3D -1 EINPROGRESS (Operation now in pr= ogress) [...] > 5462 getsockopt(12, SOL_SOCKET, SO_ERROR, [0], [4]) =3D 0 > 5462 setsockopt(12, SOL_TCP, TCP_NODELAY, [1], 4) =3D 0 [...] > 5462 close(12) =3D 0 [...] > 5461 write(2, "\33[31m\33[1merror: \33[22m\33[0mTLS support is not avail= able\n", 54) =3D 54 Thanks for sending the strace output. That output shows that Flatpak never tries to access /etc/ssl/certs, ~/.guix-profile/etc/ssl/certs or anything like that. The error message comes from GLib, in gdummytlsbackend.c. AFAICS our GLib also includes the TLS (not dummy) backend: --8<---------------cut here---------------start------------->8--- $ objdump -T /gnu/store/0q9pq9flr76rh4bv2524niknknnl2kvq-glib-2.56.3/lib/li= bgio-2.0.so | grep g_tls_backend 0000000000093e90 g DF .text 0000000000000082 Base g_tls_backend_= get_default_database 0000000000093dd0 g DF .text 000000000000006f Base g_tls_backend_= supports_tls 0000000000093f40 g DF .text 000000000000001b Base g_tls_backend_= get_client_connection_type 0000000000093e40 g DF .text 0000000000000049 Base g_tls_backend_= supports_dtls 0000000000093db0 g DF .text 0000000000000015 Base g_tls_backend_= get_default 0000000000093f80 g DF .text 0000000000000072 Base g_tls_backend_= get_dtls_client_connection_type 0000000000093f60 g DF .text 000000000000001b Base g_tls_backend_= get_server_connection_type 0000000000094000 g DF .text 0000000000000072 Base g_tls_backend_= get_dtls_server_connection_type 0000000000094080 g DF .text 000000000000007f Base g_tls_backend_= get_file_database_type 0000000000093d20 g DF .text 0000000000000084 Base g_tls_backend_= get_type 0000000000093f20 g DF .text 000000000000001b Base g_tls_backend_= get_certificate_type --8<---------------cut here---------------end--------------->8--- Libsoup does this: --8<---------------cut here---------------start------------->8--- static gboolean soup_socket_setup_ssl (SoupSocket *sock, const char *ssl_host, GCancellable *cancellable, GError **error) { SoupSocketPrivate *priv =3D soup_socket_get_instance_private (sock); GTlsBackend *backend =3D g_tls_backend_get_default (); --8<---------------cut here---------------end--------------->8--- =E2=80=98g_tls_backend_get_default=E2=80=99 itself looks like this: --8<---------------cut here---------------start------------->8--- GTlsBackend * g_tls_backend_get_default (void) { return _g_io_module_get_default (G_TLS_BACKEND_EXTENSION_POINT_NAME, "GIO_USE_TLS", NULL); } --8<---------------cut here---------------end--------------->8--- Could you try setting the =E2=80=98GIO_USE_TLS=E2=80=99 environment variabl= e? Like: export GIO_USE_TLS=3Dtls or maybe: export GIO_USE_TLS=3DGTlsBackend and then run Flatpak in that environment? TIA, Ludo=E2=80=99. From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: "Raghav Gururajan" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 23 Mar 2019 04:03:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "Ludovic =?UTF-8?Q?Court=C3=A8s?=" Cc: Ricardo Wurmus , 34861@debbugs.gnu.org Received: via spool by 34861-submit@debbugs.gnu.org id=B34861.155331375410261 (code B ref 34861); Sat, 23 Mar 2019 04:03:02 +0000 Received: (at 34861) by debbugs.gnu.org; 23 Mar 2019 04:02:34 +0000 Received: from localhost ([127.0.0.1]:54901 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7Xrc-0002fP-Sn for submit@debbugs.gnu.org; Sat, 23 Mar 2019 00:02:34 -0400 Received: from knopi.disroot.org ([178.21.23.139]:45650) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7XrY-0002fD-Kx for 34861@debbugs.gnu.org; Sat, 23 Mar 2019 00:02:31 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 3C8952CE52; Sat, 23 Mar 2019 05:02:27 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OJwhJJAM5bli; Sat, 23 Mar 2019 05:02:25 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1553313745; bh=XS200h9M1LA/wug7A+DJU20l0rZccPGWA1W0kgBrzXU=; h=Date:From:Subject:To:Cc:In-Reply-To:References; b=SeGqgwPuy/FNDT8dK2iVaddZoXlihV5VKIi2YyOdpPJQJaL1CpiTXBzeq142esbtG +qs37CTw1i4an/+qbZf8mu9yYVgxJ2h2HwSa7Bv/l5xHrKsUhRSICJOFVIq8mXs9cS +z1GyXvODLyb6YKhRuptKZwYRBgoMI7Df9EFbrV8Iar9LQt2S2ZBnEPsnDjbRVxpdA kmIkgFO4nX9IF6tAbe9YldsJ7yNyYylGeOQRfFvlg+2x4yt3zQMQ8gxscC1Gx56Tds MIHQ5t66bDTNnPA5edl4NClfjbCsHUu0/XyF8K+Per5R4oZw1b6EWzJRLNEA0Mfohs QGeJEnOgQDbJA== Date: Sat, 23 Mar 2019 04:02:25 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: "Raghav Gururajan" Message-ID: <1b38d1aece009c4dc9321811abeea14d@disroot.org> In-Reply-To: <87mulm4obc.fsf@gnu.org> References: <87mulm4obc.fsf@gnu.org> <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Thank you very much.=0A=0AShould I be running just "export GIO_USE_TLS=3D= tls" as it is mentioned or should I insert it in some other command/synta= x?=0A=0AThanks!=0A=0ARegards,=0ARG.=0A=0AMarch 22, 2019 5:15 PM, "Ludovic= Court=C3=A8s" wrote:=0A=0A> Hi Raghav,=0A> =0A> "Raghav G= ururajan" skribis:=0A> =0A>> Please find the log at:= =0A>> https://bin.disroot.org/?597e32cb7e42e40e#r9lqwZ6w7sIAWlY2mt6dsgKCK= RO5q0ZVt9U69vnZVZs=3D=0A>> =0A>> 5462 connect(12, {sa_family=3DAF_INET, s= in_port=3Dhtons(443), sin_addr=3Dinet_addr("93.93.130.103")}, 16)=0A>> = =3D -1 EINPROGRESS (Operation now in progress)=0A> =0A> [...]=0A> =0A>> 5= 462 getsockopt(12, SOL_SOCKET, SO_ERROR, [0], [4]) =3D 0=0A>> 5462 setsoc= kopt(12, SOL_TCP, TCP_NODELAY, [1], 4) =3D 0=0A> =0A> [...]=0A> =0A>> 546= 2 close(12) =3D 0=0A> =0A> [...]=0A> =0A>> 5461 write(2, "\33[31m\33[1mer= ror: \33[22m\33[0mTLS support is not available\n", 54) =3D 54=0A> =0A> Th= anks for sending the strace output. That output shows that Flatpak=0A> ne= ver tries to access /etc/ssl/certs, ~/.guix-profile/etc/ssl/certs or=0A> = anything like that.=0A> =0A> The error message comes from GLib, in gdummy= tlsbackend.c. AFAICS our=0A> GLib also includes the TLS (not dummy) backe= nd:=0A> =0A> --8<---------------cut here---------------start-------------= >8---=0A> $ objdump -T /gnu/store/0q9pq9flr76rh4bv2524niknknnl2kvq-glib-2= .56.3/lib/libgio-2.0.so | grep=0A> g_tls_backend=0A> 0000000000093e90 g D= F .text 0000000000000082 Base g_tls_backend_get_default_database=0A> 0000= 000000093dd0 g DF .text 000000000000006f Base g_tls_backend_supports_tls= =0A> 0000000000093f40 g DF .text 000000000000001b Base g_tls_backend_get_= client_connection_type=0A> 0000000000093e40 g DF .text 0000000000000049 B= ase g_tls_backend_supports_dtls=0A> 0000000000093db0 g DF .text 000000000= 0000015 Base g_tls_backend_get_default=0A> 0000000000093f80 g DF .text 00= 00000000000072 Base g_tls_backend_get_dtls_client_connection_type=0A> 000= 0000000093f60 g DF .text 000000000000001b Base g_tls_backend_get_server_c= onnection_type=0A> 0000000000094000 g DF .text 0000000000000072 Base g_tl= s_backend_get_dtls_server_connection_type=0A> 0000000000094080 g DF .text= 000000000000007f Base g_tls_backend_get_file_database_type=0A> 000000000= 0093d20 g DF .text 0000000000000084 Base g_tls_backend_get_type=0A> 00000= 00000093f20 g DF .text 000000000000001b Base g_tls_backend_get_certificat= e_type=0A> --8<---------------cut here---------------end--------------->8= ---=0A> =0A> Libsoup does this:=0A> =0A> --8<---------------cut here-----= ----------start------------->8---=0A> static gboolean=0A> soup_socket_set= up_ssl (SoupSocket *sock,=0A> const char *ssl_host,=0A> GCancellable *can= cellable,=0A> GError **error)=0A> {=0A> SoupSocketPrivate *priv =3D soup_= socket_get_instance_private (sock);=0A> GTlsBackend *backend =3D g_tls_ba= ckend_get_default ();=0A> --8<---------------cut here---------------end--= ------------->8---=0A> =0A> =E2=80=98g_tls_backend_get_default=E2=80=99 i= tself looks like this:=0A> =0A> --8<---------------cut here--------------= -start------------->8---=0A> GTlsBackend *=0A> g_tls_backend_get_default = (void)=0A> {=0A> return _g_io_module_get_default (G_TLS_BACKEND_EXTENSION= _POINT_NAME,=0A> "GIO_USE_TLS", NULL);=0A> }=0A> --8<---------------cut h= ere---------------end--------------->8---=0A> =0A> Could you try setting = the =E2=80=98GIO_USE_TLS=E2=80=99 environment variable? Like:=0A> =0A> ex= port GIO_USE_TLS=3Dtls=0A> =0A> or maybe:=0A> =0A> export GIO_USE_TLS=3DG= TlsBackend=0A> =0A> and then run Flatpak in that environment?=0A> =0A> TI= A,=0A> Ludo=E2=80=99. From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: Ricardo Wurmus Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 23 Mar 2019 08:07:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Raghav Gururajan Cc: Ludovic =?UTF-8?Q?Court=C3=A8s?= , 34861@debbugs.gnu.org Received: via spool by 34861-submit@debbugs.gnu.org id=B34861.155332837432767 (code B ref 34861); Sat, 23 Mar 2019 08:07:02 +0000 Received: (at 34861) by debbugs.gnu.org; 23 Mar 2019 08:06:14 +0000 Received: from localhost ([127.0.0.1]:54986 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7bfR-0008WR-Nc for submit@debbugs.gnu.org; Sat, 23 Mar 2019 04:06:13 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21142) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7bfP-0008WJ-Oo for 34861@debbugs.gnu.org; Sat, 23 Mar 2019 04:06:12 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1553328342; cv=none; d=zoho.com; s=zohoarc; b=JMDxVt4/UqN0v6eT7e7sKczMIq2FzDIOmflt/gGYx3X96mn8Q0OII/kV8UXxRUtsVXhCNikUuYZSzsaPyaKYzPGJHDbsnChN7KUo/0Nq5bUcBV9AulidmGYKx4WA1UctID16HvhPVVOnFZFgtOoalSGPXKhlMR4BlNiJ/UtEM8Y= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com; s=zohoarc; t=1553328342; h=Content-Type:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results; bh=RdIqa96rU3TiWkAnyk18XHlGLcN1uqFiFN8iEQ6iyOI=; b=mVttydGfUPMPaDeRDpLDybAmpEQq8F9mftHkADkkbsp6yBHZCA+Ozd/Ap+CyTRiaIvH+AwAjVt+UKfcpaCUQCKCJA1xkNoXTnlX3+ubuQrWvVJl3XXmwpS4ZZ327SyoKcqkzzGdNiRof8PSkJvKVePcmbfimmW0cC14NHfEYqVc= ARC-Authentication-Results: i=1; mx.zoho.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=rekado@elephly.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1553328342; s=zoho; d=elephly.net; i=rekado@elephly.net; h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type; l=277; bh=RdIqa96rU3TiWkAnyk18XHlGLcN1uqFiFN8iEQ6iyOI=; b=HhCmGdU0OoQs9NOFCPHK38H7ZboyOUMPhcwQJcdGMR3qZqdbkfn3AQzPE8PF+PvK sEb6rp/C34Utvqunqo7PEo/gG9kV+pmAh4Z1xmi/wSI8N24Wy9FpBdT/WZ5jMAmrdF/ qR+N60DeOgdigYay6A91RcNE73fAUufTGA/4iO8Y= Received: from localhost (p54AD429D.dip0.t-ipconnect.de [84.173.66.157]) by mx.zohomail.com with SMTPS id 1553328340149583.1405595687785; Sat, 23 Mar 2019 01:05:40 -0700 (PDT) References: <87mulm4obc.fsf@gnu.org> <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> <1b38d1aece009c4dc9321811abeea14d@disroot.org> User-agent: mu4e 1.0; emacs 26.1 From: Ricardo Wurmus In-reply-to: <1b38d1aece009c4dc9321811abeea14d@disroot.org> X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Sat, 23 Mar 2019 09:05:35 +0100 Message-ID: <87va0a5834.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain X-ZohoMailClient: External X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Raghav Gururajan writes: > Should I be running just "export GIO_USE_TLS=tls" as it is mentioned > or should I insert it in some other command/syntax? Just that. And then after that run the flatpak command in the same shell session. -- Ricardo From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: "Raghav Gururajan" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sun, 24 Mar 2019 06:49:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "Ricardo Wurmus" Cc: Ludovic =?UTF-8?Q?Court=C3=A8s?= , 34861@debbugs.gnu.org Received: via spool by 34861-submit@debbugs.gnu.org id=B34861.155341009916261 (code B ref 34861); Sun, 24 Mar 2019 06:49:01 +0000 Received: (at 34861) by debbugs.gnu.org; 24 Mar 2019 06:48:19 +0000 Received: from localhost ([127.0.0.1]:55991 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7wva-0004EC-UG for submit@debbugs.gnu.org; Sun, 24 Mar 2019 02:48:19 -0400 Received: from knopi.disroot.org ([178.21.23.139]:48340) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h7wvW-0004E1-94 for 34861@debbugs.gnu.org; Sun, 24 Mar 2019 02:48:16 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 623732CF8E; Sun, 24 Mar 2019 07:48:12 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DylItCRLl-P7; Sun, 24 Mar 2019 07:48:11 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1553410091; bh=M/iU3+BZlon4AaRc+osWsQYzD9D4h1BgwjKomxNtG9o=; h=Date:From:Subject:To:Cc:In-Reply-To:References; b=N6ks6J38iwCubTh6q/c8DEWIaCdPx1yIkUMfLSfqPEYxFO2egRQuqJQkyCxkPgvO8 3EPZ18CEFrWAynaiM8dMvbGNvWsMBy4U4cn9J0k+4486jc2ElAxpwGOzltSSkc7EMV AzXR0Q3g5BmBW+qpyYVq1QCKsjDKr0f1+HE/ywKjQe+3zYQ2tO5oAjWIHekucGH458 3cJMsD6hPyp9oxSK8NJC1PQhx2H87rv2E7ovc9vN4QPJmug4ARXi5Fj1WhEIuOu8SA YToph2BkAbtIZp7YVyo0M8hVG0llEPeTqszw4pT6uDPYPMj3flNGBn9xXzmMf8BsGQ dKtfBL3WLeJkA== Date: Sun, 24 Mar 2019 06:48:11 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: "Raghav Gururajan" Message-ID: In-Reply-To: <87va0a5834.fsf@elephly.net> References: <87va0a5834.fsf@elephly.net> <87mulm4obc.fsf@gnu.org> <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> <1b38d1aece009c4dc9321811abeea14d@disroot.org> X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello!=0A=0AAdding remote repo in Flatpak is working now. Thank you very = much. Can you make export variable information mentioned at the end "guix= package -i flatpak" process?=0A=0ARegards,=0ARG.=0A=0AMarch 23, 2019 8:0= 6 AM, "Ricardo Wurmus" wrote:=0A=0A> Raghav Gururaja= n writes:=0A> =0A>> Should I be running just "export G= IO_USE_TLS=3Dtls" as it is mentioned=0A>> or should I insert it in some o= ther command/syntax?=0A> =0A> Just that. And then after that run the flat= pak command in the same=0A> shell session.=0A> =0A> --=0A> Ricardo From unknown Sat Aug 09 01:10:43 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: "Raghav Gururajan" Subject: bug#34861: closed (Re: bug#34861: TLS Error with Flatpak) Message-ID: References: <87y353syz4.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> X-Gnu-PR-Message: they-closed 34861 X-Gnu-PR-Package: guix Reply-To: 34861@debbugs.gnu.org Date: Sun, 24 Mar 2019 22:14:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1553465642-21290-1" This is a multi-part message in MIME format... ------------=_1553465642-21290-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #34861: TLS Error with Flatpak which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 34861@debbugs.gnu.org. --=20 34861: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D34861 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1553465642-21290-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 34861-done) by debbugs.gnu.org; 24 Mar 2019 22:13:15 +0000 Received: from localhost ([127.0.0.1]:57230 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h8BMh-0005W0-GL for submit@debbugs.gnu.org; Sun, 24 Mar 2019 18:13:15 -0400 Received: from eggs.gnu.org ([209.51.188.92]:40147) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h8BMe-0005Vl-Gv for 34861-done@debbugs.gnu.org; Sun, 24 Mar 2019 18:13:12 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:52962) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h8BMY-00024V-Bk; Sun, 24 Mar 2019 18:13:06 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=52576 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1h8BMX-0000iB-Rv; Sun, 24 Mar 2019 18:13:06 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: "Raghav Gururajan" Subject: Re: bug#34861: TLS Error with Flatpak References: <87va0a5834.fsf@elephly.net> <87mulm4obc.fsf@gnu.org> <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> <1b38d1aece009c4dc9321811abeea14d@disroot.org> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 4 Germinal an 227 de la =?utf-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Sun, 24 Mar 2019 23:13:03 +0100 In-Reply-To: (Raghav Gururajan's message of "Sun, 24 Mar 2019 06:48:11 +0000") Message-ID: <87y353syz4.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34861-done Cc: Ricardo Wurmus , 34861-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello, "Raghav Gururajan" skribis: > Adding remote repo in Flatpak is working now. Thank you very much. Nice! > Can you make export variable information mentioned at the end "guix packa= ge -i flatpak" process? I think we should rather find out why GIO uses the =E2=80=9Cdummy=E2=80=9D = TLS backend by default. The GnuTLS backend is part of =E2=80=98glib-networking=E2=80= =99, not GLib, and =E2=80=98GIO_EXTRA_MODULES=E2=80=99 was not being set, which is why the= correct TLS backend wasn=E2=80=99t found. Fixed in commit 16360cc884030eb69590dc18d9694b04c67273f6. Once you=E2=80=99ve upgraded you should no longer need to set =E2=80=98GIO_= USE_TLS=E2=80=99. Thanks! Ludo=E2=80=99. ------------=_1553465642-21290-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 14 Mar 2019 20:43:24 +0000 Received: from localhost ([127.0.0.1]:44111 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h4XCF-0001Ag-Lr for submit@debbugs.gnu.org; Thu, 14 Mar 2019 16:43:23 -0400 Received: from eggs.gnu.org ([209.51.188.92]:58237) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h4XCB-0001AR-Oy for submit@debbugs.gnu.org; Thu, 14 Mar 2019 16:43:22 -0400 Received: from lists.gnu.org ([209.51.188.17]:51878) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1h4XC6-00015p-Du for submit@debbugs.gnu.org; Thu, 14 Mar 2019 16:43:14 -0400 Received: from eggs.gnu.org ([209.51.188.92]:44039) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h4XC5-0001X1-CW for bug-guix@gnu.org; Thu, 14 Mar 2019 16:43:14 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,HTML_MESSAGE, RCVD_IN_DNSWL_NONE,URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1h4X68-00026E-Vc for bug-guix@gnu.org; Thu, 14 Mar 2019 16:37:05 -0400 Received: from knopi.disroot.org ([178.21.23.139]:50704) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1h4X68-000236-0F for bug-guix@gnu.org; Thu, 14 Mar 2019 16:37:04 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 307B72C368 for ; Thu, 14 Mar 2019 21:37:00 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SVYsVDzh4Zrt for ; Thu, 14 Mar 2019 21:36:58 +0100 (CET) Mime-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1552595818; bh=IquL4TLseCKH9oHqUnSfxSJuGE1s4sd4cH0/pr3Xq0U=; h=Date:From:Subject:To; b=IOj1sAxPxiGgKXulX+Y8Ivguck/myI/1fM7T9Ox+7mIIUaTR8EyQ7DrqG9eb1iKD2 Oxw8jD/nhyz6H9kPszTgPUYl2jIvCOyWMSMVM13tTW+QvbFRxfbeiV/tEe/IrJpD0n 668r2tlMjqEuNGBHbKrWpPp4UkIG9UzhpkF6HvsjK4mH7euKAg1Nvzv2INQnr/HoRx VLI2FdRf0EOj2Po2TsCZai/JTMeS5akrfGG+XR/IYL9XZD5lhYh9jJZ2jx7/5Zg54P Xun7LHNmRI8/Tv5KYYwQwLOhMlfTspeDyqg4e8N8Lp3FexdODm5nPEIQlYibXHPoPo CnqX0VhiUa6mg== Date: Thu, 14 Mar 2019 20:36:58 +0000 Content-Type: multipart/alternative; boundary="--=_RainLoop_957_212577591.1552595818" From: "Raghav Gururajan" Message-ID: <002a84964102ac2171089fa7dc007092@disroot.org> Subject: TLS Error with Flatpak To: bug-guix@gnu.org X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 178.21.23.139 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Spam-Score: 0.9 (/) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) ----=_RainLoop_957_212577591.1552595818 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Guix!=0A=0APackage: flatpak=0A=0AWhenever I try "flatpak remote-add= --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo"; I= keep getting the error "Can't load uri https://flathub.org/repo/flathub.= flatpakrepo: TLS support is not available".=0A=0AI even tried following s= teps mentioned at https://www.gnu.org/software/guix/manual/en/guix.html#i= ndex-TLS. Still not working.=0A=0AUnless this is fixed, flatpak in guix w= ill be unusable with remote repositories.=0A=0ARegards,=0ARG. ----=_RainLoop_957_212577591.1552595818 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable
H= ello Guix!

Package: flatpak

Whenever I try "flatpak remote-= add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo"= ; I keep getting the error "Can't load uri https://flathub.org/repo/flath= ub.flatpakrepo: TLS support is not available".

I even tried follow= ing steps mentioned at https://www.gnu.org/software/guix/manual/en/guix.h= tml#index-TLS. Still not working.

Unless this is fixed, flatpak in= guix will be unusable with remote repositories.

Regards,
RG. ----=_RainLoop_957_212577591.1552595818-- ------------=_1553465642-21290-1-- From unknown Sat Aug 09 01:10:43 2025 X-Loop: help-debbugs@gnu.org Subject: bug#34861: TLS Error with Flatpak Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sun, 24 Mar 2019 22:14:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 34861 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "Raghav Gururajan" Cc: Ricardo Wurmus , 34861-done@debbugs.gnu.org Received: via spool by 34861-done@debbugs.gnu.org id=D34861.155346561021239 (code D ref 34861); Sun, 24 Mar 2019 22:14:03 +0000 Received: (at 34861-done) by debbugs.gnu.org; 24 Mar 2019 22:13:30 +0000 Received: from localhost ([127.0.0.1]:57233 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h8BMu-0005WT-OZ for submit@debbugs.gnu.org; Sun, 24 Mar 2019 18:13:30 -0400 Received: from eggs.gnu.org ([209.51.188.92]:40177) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h8BMt-0005WE-9Q for 34861-done@debbugs.gnu.org; Sun, 24 Mar 2019 18:13:27 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:52964) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h8BMo-00029r-3N; Sun, 24 Mar 2019 18:13:22 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=52582 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1h8BMn-0000iP-HH; Sun, 24 Mar 2019 18:13:21 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= In-Reply-To: (Raghav Gururajan's message of "Sun, 24 Mar 2019 06:48:11 +0000") References: <87va0a5834.fsf@elephly.net> <87mulm4obc.fsf@gnu.org> <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> <1b38d1aece009c4dc9321811abeea14d@disroot.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 4 Germinal an 227 de la =?UTF-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Sun, 24 Mar 2019 23:13:19 +0100 Message-ID: <87woknsyyo.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello, "Raghav Gururajan" skribis: > Adding remote repo in Flatpak is working now. Thank you very much. Nice! > Can you make export variable information mentioned at the end "guix packa= ge -i flatpak" process? I think we should rather find out why GIO uses the =E2=80=9Cdummy=E2=80=9D = TLS backend by default. The GnuTLS backend is part of =E2=80=98glib-networking=E2=80= =99, not GLib, and =E2=80=98GIO_EXTRA_MODULES=E2=80=99 was not being set, which is why the= correct TLS backend wasn=E2=80=99t found. Fixed in commit 16360cc884030eb69590dc18d9694b04c67273f6. Once you=E2=80=99ve upgraded you should no longer need to set =E2=80=98GIO_= USE_TLS=E2=80=99. Thanks! Ludo=E2=80=99.