Subject: Re: bug#34861: TLS Error with Flatpak

From: Ricardo Wurmus <[email-masked]>
Date: Mon, 18 Mar 2019 22:24:12 +0100

Raghav Gururajan <[email-masked]> writes:

> Yes, I did them. Still did not work.
>
> I did the following to set env variables:
>
> $ guix package -i nss-certs
> $ export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
> $ export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
> $ export GIT_SSL_CAINFO="$SSL_CERT_FILE"

Flatpak uses libsoup with SOUP_SESSION_SSL_USE_SYSTEM_CA_FILE.  libsoup
delegates TLS handling to glib-networking.

Raghav, could you trace flatpak to see what certificate files it is
trying to access?

--
Ricardo