From debbugs-submit-bounces@debbugs.gnu.org Mon Nov 18 04:32:57 2019 Received: (at submit) by debbugs.gnu.org; 18 Nov 2019 09:32:57 +0000 Received: from localhost ([127.0.0.1]:43159 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1iWdOz-0004ZT-B0 for submit@debbugs.gnu.org; Mon, 18 Nov 2019 04:32:57 -0500 Received: from lists.gnu.org ([209.51.188.17]:36945) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1iWdOx-0004ZG-5J for submit@debbugs.gnu.org; Mon, 18 Nov 2019 04:32:55 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:58698) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iWdOr-0000Z4-GL for bug-Guix@gnu.org; Mon, 18 Nov 2019 04:32:54 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-5.5 required=5.0 tests=BAYES_05,RCVD_IN_DNSWL_HI autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iWdOp-0003TL-Gk for bug-Guix@gnu.org; Mon, 18 Nov 2019 04:32:48 -0500 Received: from mail3-relais-sop.national.inria.fr ([192.134.164.104]:36837) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1iWdOp-0003Sm-74 for bug-Guix@gnu.org; Mon, 18 Nov 2019 04:32:47 -0500 X-IronPort-AV: E=Sophos;i="5.68,319,1569276000"; d="scan'208";a="327076548" Received: from unknown (HELO ribbon) ([193.50.110.131]) by mail3-relais-sop.national.inria.fr with ESMTP/TLS/AES256-GCM-SHA384; 18 Nov 2019 10:29:07 +0100 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: bug-Guix@gnu.org Subject: Download code should honor /etc/ssl/certs/*.crt X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 28 Brumaire an 228 de la =?utf-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Mon, 18 Nov 2019 10:29:06 +0100 Message-ID: <87h831lehp.fsf@inria.fr> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 192.134.164.104 X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hello, Some distros such as CentOS 7 with its =E2=80=98ca-certificates=E2=80=99 pa= ckage provide nothing but a certificate bundle in /etc/ssl: --8<---------------cut here---------------start------------->8--- $ ls -l /etc/ssl/certs/ total 12 lrwxrwxrwx. 1 root root 49 8 nov. 16:44 ca-bundle.crt -> /etc/pki/ca-tr= ust/extracted/pem/tls-ca-bundle.pem lrwxrwxrwx. 1 root root 55 8 nov. 16:44 ca-bundle.trust.crt -> /etc/pki= /ca-trust/extracted/openssl/ca-bundle.trust.crt -rwxr-xr-x. 1 root root 610 30 oct. 2018 make-dummy-cert -rw-r--r--. 1 root root 2516 30 oct. 2018 Makefile -rwxr-xr-x. 1 root root 829 30 oct. 2018 renew-dummy-cert --8<---------------cut here---------------end--------------->8--- As of commit 9c9982dc0c8c38ce3821b154b7e92509c1564317, =E2=80=98guix downlo= ad=E2=80=99 & co. (anything that relies on (guix build download)) fail because they looks for /etc/ssl/certs/*.pem by default and there=E2=80=99s no such file. Thanks, Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Mon Nov 18 06:21:49 2019 Received: (at 38254-done) by debbugs.gnu.org; 18 Nov 2019 11:21:49 +0000 Received: from localhost ([127.0.0.1]:43254 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1iWf6L-0004gq-CB for submit@debbugs.gnu.org; Mon, 18 Nov 2019 06:21:49 -0500 Received: from eggs.gnu.org ([209.51.188.92]:40409) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1iWf6J-0004gb-3s for 38254-done@debbugs.gnu.org; Mon, 18 Nov 2019 06:21:47 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]:51552) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1iWf6D-0000tG-V8 for 38254-done@debbugs.gnu.org; Mon, 18 Nov 2019 06:21:42 -0500 Received: from nat-eduroam-36-gw-01-bso.bordeaux.inria.fr ([194.199.1.36]:54224 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1iWf6D-0001Ml-CE for 38254-done@debbugs.gnu.org; Mon, 18 Nov 2019 06:21:41 -0500 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: 38254-done@debbugs.gnu.org Subject: Re: bug#38254: Download code should honor /etc/ssl/certs/*.crt References: <87h831lehp.fsf@inria.fr> Date: Mon, 18 Nov 2019 12:21:38 +0100 In-Reply-To: <87h831lehp.fsf@inria.fr> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22\?\= \=\?utf-8\?Q\?'s\?\= message of "Mon, 18 Nov 2019 10:29:06 +0100") Message-ID: <87muctjupp.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 38254-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Ludovic Court=C3=A8s skribis: > Some distros such as CentOS 7 with its =E2=80=98ca-certificates=E2=80=99 = package provide > nothing but a certificate bundle in /etc/ssl: > > $ ls -l /etc/ssl/certs/ > total 12 > lrwxrwxrwx. 1 root root 49 8 nov. 16:44 ca-bundle.crt -> /etc/pki/ca-= trust/extracted/pem/tls-ca-bundle.pem > lrwxrwxrwx. 1 root root 55 8 nov. 16:44 ca-bundle.trust.crt -> /etc/p= ki/ca-trust/extracted/openssl/ca-bundle.trust.crt > -rwxr-xr-x. 1 root root 610 30 oct. 2018 make-dummy-cert > -rw-r--r--. 1 root root 2516 30 oct. 2018 Makefile > -rwxr-xr-x. 1 root root 829 30 oct. 2018 renew-dummy-cert > > As of commit 9c9982dc0c8c38ce3821b154b7e92509c1564317, =E2=80=98guix down= load=E2=80=99 & > co. (anything that relies on (guix build download)) fail because they > looks for /etc/ssl/certs/*.pem by default and there=E2=80=99s no such fil= e. Fixed in 0d78d0f09c10f5c7a25ac2ab4da4197913cd3321. Ludo'. From unknown Tue Sep 09 21:33:24 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Mon, 16 Dec 2019 12:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator