From unknown Sat Jun 14 19:09:26 2025 X-Loop: help-debbugs@gnu.org Subject: bug#39615: LetsEncrypt root certificate hash changed Resent-From: Christopher Baines Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 15 Feb 2020 15:34:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 39615 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 39615@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.158178080314857 (code B ref -1); Sat, 15 Feb 2020 15:34:01 +0000 Received: (at submit) by debbugs.gnu.org; 15 Feb 2020 15:33:23 +0000 Received: from localhost ([127.0.0.1]:36297 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j2zRb-0003rZ-Hz for submit@debbugs.gnu.org; Sat, 15 Feb 2020 10:33:23 -0500 Received: from lists.gnu.org ([209.51.188.17]:55290) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j2zRa-0003rR-F0 for submit@debbugs.gnu.org; Sat, 15 Feb 2020 10:33:22 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:43387) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1j2zRZ-0005nO-4r for bug-guix@gnu.org; Sat, 15 Feb 2020 10:33:22 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.4 required=5.0 tests=BAYES_00,PDS_BTC_ID, UNPARSEABLE_RELAY,URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1j2zRY-00052l-5M for bug-guix@gnu.org; Sat, 15 Feb 2020 10:33:21 -0500 Received: from mira.cbaines.net ([2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27]:34565) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1j2zRX-00050D-W7 for bug-guix@gnu.org; Sat, 15 Feb 2020 10:33:20 -0500 Received: from localhost (unknown [46.237.163.35]) by mira.cbaines.net (Postfix) with ESMTPSA id 14D7B168C9 for ; Sat, 15 Feb 2020 15:33:18 +0000 (GMT) Received: from localhost (localhost [local]) by localhost (OpenSMTPD) with ESMTPA id d1cd4e09 for ; Sat, 15 Feb 2020 15:33:15 +0000 (UTC) User-agent: mu4e 1.2.0; emacs 26.3 From: Christopher Baines Date: Sat, 15 Feb 2020 15:33:13 +0000 Message-ID: <871rqv27d2.fsf@cbaines.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27 X-Spam-Score: 0.8 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.2 (/) --=-=-= Content-Type: text/plain ~$ guix pull building /gnu/store/1r2cj292vvjvhbb92bri568p7dia7cp1-isrgrootx1.pem.drv... building /gnu/store/dhlb62lpf1ggcrax62hm7l7rlcf5c4fi-letsencryptauthorityx3.pem.drv... downloading from https://letsencrypt.org/certs/isrgrootx1.pem... -sha256 hash mismatch for /gnu/store/ahiiz5x04rqr214sw840ifz0d3jzmnsb-isrgrootx1.pem: expected hash: 0zycy85ff9ga53z1q03df89ka9iihb9p8bjhw056rq2y4rn3b6ac actual hash: 1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92 hash mismatch for store item '/gnu/store/ahiiz5x04rqr214sw840ifz0d3jzmnsb-isrgrootx1.pem' build of /gnu/store/1r2cj292vvjvhbb92bri568p7dia7cp1-isrgrootx1.pem.drv failed View build log at '/var/log/guix/drvs/1r/2cj292vvjvhbb92bri568p7dia7cp1-isrgrootx1.pem.drv.bz2'. cannot build derivation `/gnu/store/lv78345x77bv6103l9ssqkx4l3v7z0xj-le-certs-0.drv': 1 dependencies couldn't be built guix pull: error: build of `/gnu/store/lv78345x77bv6103l9ssqkx4l3v7z0xj-le-certs-0.drv' failed --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEPonu50WOcg2XVOCyXiijOwuE9XcFAl5IDzlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcACgkQXiijOwuE 9XeQgw/+Ib52EXttuWAzHYm+IOx6OeJvwyD4ol0uKZlEqQ2Mv7NTtjLUuk3btspj jBjdzZa1OcYTDJYdS5inxsRUWoHJFRjte66IOYcD1MWZjnPv+Z2u+Q4P0ymNAVZk I2YVdBgWUa+gDsqPF6iG9kibgnqnodgGNfqKr9axjTQMaz0lK4OPJHoe46dGT79V E6TJsmIPn4M277mJQo7TqJ3WdiRepdEYyqnWNev/SKN65Eqd9uVCXmmQo6UoemNI IiNlp2W69dEoTzdIdmWKgd2R4Ifxkykjn4C2kujexVuL1sfVGxVIQJzdpYCwU32Z KIiMK32HD1jJERR2cdbFIt+O/MVm5SbwVHaLHc3ql7dVT0DppungX6AS1+y2fCnR SNeC4Hsut6VZAn656iCveiGuRcMxi0fk/T7mkfkgbkNkrUWPuikw6KZiYiwqX57g K4Vem2X0ete42Axla7fAL9XMI9ZlgyL1j/HRiU3IpN4a1wh0BMqse2ZMfUYTWhnx hTeWyWS2mL9BFUzSz0d0jQicHr6zF/vX1Xu68sbIsJPuZnBTJdZkSo6ZRjQF/p/A nKBkB6VwS/OQZu2N/PHn7aotwmgFOrMu5FPffwVZfPm7T2CnZvB7dvH4v4eX6iZK t7WlqhztO1CH3Xt8wNyMrjGaN/hkaTHelWhAofGMF2M6IUvfnew= =LZUm -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 14 19:09:26 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Christopher Baines Subject: bug#39615: closed (Re: bug#39615: LetsEncrypt root certificate hash changed) Message-ID: References: <878sl3hlbi.fsf@nckx> <871rqv27d2.fsf@cbaines.net> X-Gnu-PR-Message: they-closed 39615 X-Gnu-PR-Package: guix Reply-To: 39615@debbugs.gnu.org Date: Sat, 15 Feb 2020 16:23:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1581783782-19360-1" This is a multi-part message in MIME format... ------------=_1581783782-19360-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #39615: LetsEncrypt root certificate hash changed which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 39615@debbugs.gnu.org. --=20 39615: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D39615 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1581783782-19360-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 39615-done) by debbugs.gnu.org; 15 Feb 2020 16:22:27 +0000 Received: from localhost ([127.0.0.1]:36316 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j30D5-00051F-2l for submit@debbugs.gnu.org; Sat, 15 Feb 2020 11:22:27 -0500 Received: from tobias.gr ([80.241.217.52]:50958) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j30D0-000514-Uk for 39615-done@debbugs.gnu.org; Sat, 15 Feb 2020 11:22:25 -0500 Received: by tobias.gr (OpenSMTPD) with ESMTP id 78a78c9b for <39615-done@debbugs.gnu.org>; Sat, 15 Feb 2020 16:22:20 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=tobias.gr; h=from:to :subject:references:in-reply-to:date:message-id:mime-version :content-type; s=2018; i=me@tobias.gr; bh=4bmWuNvFJ1xfEbHp6Qj3qT jHmZVo1YSSOxcmtSnh6B0=; b=Tzd3Qod58Dh23nQLy7Kui93YPwpin5nXkIEMsS qIsgJ6GYV3fC+NkTsZUxzSC0+eKn/sex+8uH4ukW2Yy/cPNmc39v0MHovdCDGDxD /UZ7VRXNGL9qkNofq4FVK1Evr1yStIAywAmLN2IPgFCnygPCCH+s8eUf5QE8AlJy Xlqb13YyaFH/R6uTnm+YLyZTjiSHvlcXPWzmiuCt6GCjk+rfq/XeCZQt7CH8JSTf JrFiBSwZSTwhg7yDf8Yj9Fg/i1L4Tk7e2UZImeT4FoWTXZR2J4Ex08rOeEXf1nR7 h21zYOtSkClesRjrSVckxcZBC0sNYpf0w794/TYkLI8Shttg== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id a974efcd (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO) for <39615-done@debbugs.gnu.org>; Sat, 15 Feb 2020 16:22:20 +0000 (UTC) From: Tobias Geerinckx-Rice To: 39615-done@debbugs.gnu.org Subject: Re: bug#39615: LetsEncrypt root certificate hash changed References: <871rqv27d2.fsf@cbaines.net> In-reply-to: <871rqv27d2.fsf@cbaines.net> Date: Sat, 15 Feb 2020 17:22:41 +0100 Message-ID: <878sl3hlbi.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="==-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -0.9 (/) X-Debbugs-Envelope-To: 39615-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.9 (-) --==-=-= Content-Type: multipart/mixed; boundary="=-=-=" --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Chris, Christopher Baines =E5=86=99=E9=81=93=EF=BC=9A > ~$ guix pull > building=20 > /gnu/store/1r2cj292vvjvhbb92bri568p7dia7cp1-isrgrootx1.pem.drv... > building=20 > /gnu/store/dhlb62lpf1ggcrax62hm7l7rlcf5c4fi-letsencryptauthorityx3.pem.dr= v... > downloading from https://letsencrypt.org/certs/isrgrootx1.pem... > -sha256 hash mismatch for=20 > /gnu/store/ahiiz5x04rqr214sw840ifz0d3jzmnsb-isrgrootx1.pem: > expected hash:=20 > 0zycy85ff9ga53z1q03df89ka9iihb9p8bjhw056rq2y4rn3b6ac > actual hash:=20 > 1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92 Thanks! I ran into this issue myself and updated the hashes in=20 505b2631a9c35bbaa5ba6771ad4f646086f23cad. One'd assume this to be caused by a tweaked expiry date somewhere,=20 but the =E2=80=98contents=E2=80=99 of both old and new PEM files is actuall= y the=20 same: --=-=-= Content-Type: text/plain; format=flowed Content-Disposition: inline Certificate: Data: Version: 3 (0x2) Serial Number: 82:10:cf:b0:d2:40:e3:59:44:63:e0:bb:63:82:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X1 Validity Not Before: Jun 4 11:04:38 2015 GMT Not After : Jun 4 11:04:38 2035 GMT Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (4096 bit) Modulus: 00:ad:e8:24:73:f4:14:37:f3:9b:9e:2b:57:28:1c: 87:be:dc:b7:df:38:90:8c:6e:3c:e6:57:a0:78:f7: 75:c2:a2:fe:f5:6a:6e:f6:00:4f:28:db:de:68:86: 6c:44:93:b6:b1:63:fd:14:12:6b:bf:1f:d2:ea:31: 9b:21:7e:d1:33:3c:ba:48:f5:dd:79:df:b3:b8:ff: 12:f1:21:9a:4b:c1:8a:86:71:69:4a:66:66:6c:8f: 7e:3c:70:bf:ad:29:22:06:f3:e4:c0:e6:80:ae:e2: 4b:8f:b7:99:7e:94:03:9f:d3:47:97:7c:99:48:23: 53:e8:38:ae:4f:0a:6f:83:2e:d1:49:57:8c:80:74: b6:da:2f:d0:38:8d:7b:03:70:21:1b:75:f2:30:3c: fa:8f:ae:dd:da:63:ab:eb:16:4f:c2:8e:11:4b:7e: cf:0b:e8:ff:b5:77:2e:f4:b2:7b:4a:e0:4c:12:25: 0c:70:8d:03:29:a0:e1:53:24:ec:13:d9:ee:19:bf: 10:b3:4a:8c:3f:89:a3:61:51:de:ac:87:07:94:f4: 63:71:ec:2e:e2:6f:5b:98:81:e1:89:5c:34:79:6c: 76:ef:3b:90:62:79:e6:db:a4:9a:2f:26:c5:d0:10: e1:0e:de:d9:10:8e:16:fb:b7:f7:a8:f7:c7:e5:02: 07:98:8f:36:08:95:e7:e2:37:96:0d:36:75:9e:fb: 0e:72:b1:1d:9b:bc:03:f9:49:05:d8:81:dd:05:b4: 2a:d6:41:e9:ac:01:76:95:0a:0f:d8:df:d5:bd:12: 1f:35:2f:28:17:6c:d2:98:c1:a8:09:64:77:6e:47: 37:ba:ce:ac:59:5e:68:9d:7f:72:d6:89:c5:06:41: 29:3e:59:3e:dd:26:f5:24:c9:11:a7:5a:a3:4c:40: 1f:46:a1:99:b5:a7:3a:51:6e:86:3b:9e:7d:72:a7: 12:05:78:59:ed:3e:51:78:15:0b:03:8f:8d:d0:2f: 05:b2:3e:7b:4a:1c:4b:73:05:12:fc:c6:ea:e0:50: 13:7c:43:93:74:b3:ca:74:e7:8e:1f:01:08:d0:30: d4:5b:71:36:b4:07:ba:c1:30:30:5c:48:b7:82:3b: 98:a6:7d:60:8a:a2:a3:29:82:cc:ba:bd:83:04:1b: a2:83:03:41:a1:d6:05:f1:1b:c2:b6:f0:a8:7c:86: 3b:46:a8:48:2a:88:dc:76:9a:76:bf:1f:6a:a5:3d: 19:8f:eb:38:f3:64:de:c8:2b:0d:0a:28:ff:f7:db: e2:15:42:d4:22:d0:27:5d:e1:79:fe:18:e7:70:88: ad:4e:e6:d9:8b:3a:c6:dd:27:51:6e:ff:bc:64:f5: 33:43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E Signature Algorithm: sha256WithRSAEncryption 55:1f:58:a9:bc:b2:a8:50:d0:0c:b1:d8:1a:69:20:27:29:08: ac:61:75:5c:8a:6e:f8:82:e5:69:2f:d5:f6:56:4b:b9:b8:73: 10:59:d3:21:97:7e:e7:4c:71:fb:b2:d2:60:ad:39:a8:0b:ea: 17:21:56:85:f1:50:0e:59:eb:ce:e0:59:e9:ba:c9:15:ef:86: 9d:8f:84:80:f6:e4:e9:91:90:dc:17:9b:62:1b:45:f0:66:95: d2:7c:6f:c2:ea:3b:ef:1f:cf:cb:d6:ae:27:f1:a9:b0:c8:ae: fd:7d:7e:9a:fa:22:04:eb:ff:d9:7f:ea:91:2b:22:b1:17:0e: 8f:f2:8a:34:5b:58:d8:fc:01:c9:54:b9:b8:26:cc:8a:88:33: 89:4c:2d:84:3c:82:df:ee:96:57:05:ba:2c:bb:f7:c4:b7:c7: 4e:3b:82:be:31:c8:22:73:73:92:d1:c2:80:a4:39:39:10:33: 23:82:4c:3c:9f:86:b2:55:98:1d:be:29:86:8c:22:9b:9e:e2: 6b:3b:57:3a:82:70:4d:dc:09:c7:89:cb:0a:07:4d:6c:e8:5d: 8e:c9:ef:ce:ab:c7:bb:b5:2b:4e:45:d6:4a:d0:26:cc:e5:72: ca:08:6a:a5:95:e3:15:a1:f7:a4:ed:c9:2c:5f:a5:fb:ff:ac: 28:02:2e:be:d7:7b:bb:e3:71:7b:90:16:d3:07:5e:46:53:7c: 37:07:42:8c:d3:c4:96:9c:d5:99:b5:2a:e0:95:1a:80:48:ae: 4c:39:07:ce:cc:47:a4:52:95:2b:ba:b8:fb:ad:d2:33:53:7d: e5:1d:4d:6d:d5:a1:b1:c7:42:6f:e6:40:27:35:5c:a3:28:b7: 07:8d:e7:8d:33:90:e7:23:9f:fb:50:9c:79:6c:46:d5:b4:15: b3:96:6e:7e:9b:0c:96:3a:b8:52:2d:3f:d6:5b:e1:fb:08:c2: 84:fe:24:a8:a3:89:da:ac:6a:e1:18:2a:b1:a8:43:61:5b:d3: 1f:dc:3b:8d:76:f2:2d:e8:8d:75:df:17:33:6c:3d:53:fb:7b: cb:41:5f:ff:dc:a2:d0:61:38:e1:96:b8:ac:5d:8b:37:d7:75: d5:33:c0:99:11:ae:9d:41:c1:72:75:84:be:02:41:42:5f:67: 24:48:94:d1:9b:27:be:07:3f:b9:b8:4f:81:74:51:e1:7a:b7: ed:9d:23:e2:be:e0:d5:28:04:13:3c:31:03:9e:dd:7a:6c:8f: c6:07:18:c6:7f:de:47:8e:3f:28:9e:04:06:cf:a5:54:34:77: bd:ec:89:9b:e9:17:43:df:5b:db:5f:fe:8e:1e:57:a2:cd:40: 9d:7e:62:22:da:de:18:27 -----BEGIN CERTIFICATE----- MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4 WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+ 0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ 3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5 ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq 4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc= -----END CERTIFICATE----- --=-=-= Content-Type: text/plain; format=flowed I don't know what to make of that. Kind regards, T G-R --=-=-=-- --==-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfo+u0AlEeO9y5k0W2Imw8BjFSTwFAl5IGtIACgkQ2Imw8BjF STwhShAAhtpQ0MfxuvK5Y5WuckkrpZ/xAtskrrSjvKcyVHpXgpoVt6+TmZPXYN1t M4DGBN5+8Daxuhj6YGmL+jR/UMPdImvlG+wGCDO+cMMWFD7XOh8mfLM/nflC6clB /Gx4sgIxVmiyYCwdTNX4GJzPl83XzhXU/ToRrp0SF3IMInopOEuSAtOFhD3oED5i 5swY/KL71kEPF9LRq8wPO5MC2bBJ+yAb77sx1GUEu22oG0DjTCJiGIxL7yyEclPU ZF0P1y7JlLjrCTumbwHI9GLQM8nbb2u9Iw1PJsTkXJl2teGX8HrzhPpNtba9pogk yFQuaDNhdk1RLvJ68wZKitxAIt0OtOMVDGYNsgCtMO+c8VG+Z40JMS2WeVYkmlgL T8gN+ceBkNk1gbrnvPK3zplQijLx1B/dcgIg4GzmeOdWJ2Ce2lPvnII8DA+WLiMN YTtokWBUHhZhVJXx6Nm55R01q7gw4YyLnIbPHWdxCoL4GegOaD4L9nS3M7CPdYJp /y4DZa7VmgO7LUgHK+TCrCHH5mXYngLLXkiTQKBKZZCTO7YhZhirj6VZudFkFHWs 0D7b/lK/LlavC5gLNQdx5gZHWFoh1uB0Fo4bRRNySjkSzPRnrcecoSImjg1OhnKe HBThxwipLs9qPB8yUZO7CC2EGjNl+ozzQjL7j8hY3Xqsv1Z2f54= =VzpM -----END PGP SIGNATURE----- --==-=-=-- ------------=_1581783782-19360-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 15 Feb 2020 15:33:23 +0000 Received: from localhost ([127.0.0.1]:36297 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j2zRb-0003rZ-Hz for submit@debbugs.gnu.org; Sat, 15 Feb 2020 10:33:23 -0500 Received: from lists.gnu.org ([209.51.188.17]:55290) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j2zRa-0003rR-F0 for submit@debbugs.gnu.org; Sat, 15 Feb 2020 10:33:22 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:43387) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1j2zRZ-0005nO-4r for bug-guix@gnu.org; Sat, 15 Feb 2020 10:33:22 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.4 required=5.0 tests=BAYES_00,PDS_BTC_ID, UNPARSEABLE_RELAY,URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1j2zRY-00052l-5M for bug-guix@gnu.org; Sat, 15 Feb 2020 10:33:21 -0500 Received: from mira.cbaines.net ([2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27]:34565) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1j2zRX-00050D-W7 for bug-guix@gnu.org; Sat, 15 Feb 2020 10:33:20 -0500 Received: from localhost (unknown [46.237.163.35]) by mira.cbaines.net (Postfix) with ESMTPSA id 14D7B168C9 for ; Sat, 15 Feb 2020 15:33:18 +0000 (GMT) Received: from localhost (localhost [local]) by localhost (OpenSMTPD) with ESMTPA id d1cd4e09 for ; Sat, 15 Feb 2020 15:33:15 +0000 (UTC) User-agent: mu4e 1.2.0; emacs 26.3 From: Christopher Baines To: bug-guix@gnu.org Subject: LetsEncrypt root certificate hash changed Date: Sat, 15 Feb 2020 15:33:13 +0000 Message-ID: <871rqv27d2.fsf@cbaines.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27 X-Spam-Score: 0.8 (/) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.2 (/) --=-=-= Content-Type: text/plain ~$ guix pull building /gnu/store/1r2cj292vvjvhbb92bri568p7dia7cp1-isrgrootx1.pem.drv... building /gnu/store/dhlb62lpf1ggcrax62hm7l7rlcf5c4fi-letsencryptauthorityx3.pem.drv... downloading from https://letsencrypt.org/certs/isrgrootx1.pem... -sha256 hash mismatch for /gnu/store/ahiiz5x04rqr214sw840ifz0d3jzmnsb-isrgrootx1.pem: expected hash: 0zycy85ff9ga53z1q03df89ka9iihb9p8bjhw056rq2y4rn3b6ac actual hash: 1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92 hash mismatch for store item '/gnu/store/ahiiz5x04rqr214sw840ifz0d3jzmnsb-isrgrootx1.pem' build of /gnu/store/1r2cj292vvjvhbb92bri568p7dia7cp1-isrgrootx1.pem.drv failed View build log at '/var/log/guix/drvs/1r/2cj292vvjvhbb92bri568p7dia7cp1-isrgrootx1.pem.drv.bz2'. cannot build derivation `/gnu/store/lv78345x77bv6103l9ssqkx4l3v7z0xj-le-certs-0.drv': 1 dependencies couldn't be built guix pull: error: build of `/gnu/store/lv78345x77bv6103l9ssqkx4l3v7z0xj-le-certs-0.drv' failed --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEPonu50WOcg2XVOCyXiijOwuE9XcFAl5IDzlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcACgkQXiijOwuE 9XeQgw/+Ib52EXttuWAzHYm+IOx6OeJvwyD4ol0uKZlEqQ2Mv7NTtjLUuk3btspj jBjdzZa1OcYTDJYdS5inxsRUWoHJFRjte66IOYcD1MWZjnPv+Z2u+Q4P0ymNAVZk I2YVdBgWUa+gDsqPF6iG9kibgnqnodgGNfqKr9axjTQMaz0lK4OPJHoe46dGT79V E6TJsmIPn4M277mJQo7TqJ3WdiRepdEYyqnWNev/SKN65Eqd9uVCXmmQo6UoemNI IiNlp2W69dEoTzdIdmWKgd2R4Ifxkykjn4C2kujexVuL1sfVGxVIQJzdpYCwU32Z KIiMK32HD1jJERR2cdbFIt+O/MVm5SbwVHaLHc3ql7dVT0DppungX6AS1+y2fCnR SNeC4Hsut6VZAn656iCveiGuRcMxi0fk/T7mkfkgbkNkrUWPuikw6KZiYiwqX57g K4Vem2X0ete42Axla7fAL9XMI9ZlgyL1j/HRiU3IpN4a1wh0BMqse2ZMfUYTWhnx hTeWyWS2mL9BFUzSz0d0jQicHr6zF/vX1Xu68sbIsJPuZnBTJdZkSo6ZRjQF/p/A nKBkB6VwS/OQZu2N/PHn7aotwmgFOrMu5FPffwVZfPm7T2CnZvB7dvH4v4eX6iZK t7WlqhztO1CH3Xt8wNyMrjGaN/hkaTHelWhAofGMF2M6IUvfnew= =LZUm -----END PGP SIGNATURE----- --=-=-=-- ------------=_1581783782-19360-1-- From unknown Sat Jun 14 19:09:26 2025 X-Loop: help-debbugs@gnu.org Subject: bug#39615: LetsEncrypt root certificate hash changed Resent-From: Christopher Baines Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sun, 16 Feb 2020 08:27:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 39615 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Tobias Geerinckx-Rice Cc: 39615@debbugs.gnu.org Received: via spool by 39615-submit@debbugs.gnu.org id=B39615.15818415951511 (code B ref 39615); Sun, 16 Feb 2020 08:27:02 +0000 Received: (at 39615) by debbugs.gnu.org; 16 Feb 2020 08:26:35 +0000 Received: from localhost ([127.0.0.1]:36697 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j3FG6-0000OJ-W1 for submit@debbugs.gnu.org; Sun, 16 Feb 2020 03:26:35 -0500 Received: from mira.cbaines.net ([212.71.252.8]:56854) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j3FG5-0000OA-K9 for 39615@debbugs.gnu.org; Sun, 16 Feb 2020 03:26:34 -0500 Received: from localhost (unknown [46.237.163.35]) by mira.cbaines.net (Postfix) with ESMTPSA id A7CBB168D0; Sun, 16 Feb 2020 08:26:32 +0000 (GMT) Received: from localhost (localhost [local]) by localhost (OpenSMTPD) with ESMTPA id 2bd9eb3b; Sun, 16 Feb 2020 08:26:30 +0000 (UTC) References: <871rqv27d2.fsf@cbaines.net> <878sl3hlbi.fsf@nckx> User-agent: mu4e 1.2.0; emacs 26.3 From: Christopher Baines In-reply-to: <878sl3hlbi.fsf@nckx> Date: Sun, 16 Feb 2020 08:26:28 +0000 Message-ID: <87zhdjym2z.fsf@cbaines.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 0.5 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.5 (/) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Tobias Geerinckx-Rice via Bug reports for GNU Guix write= s: > Chris, > > Christopher Baines =E5=86=99=E9=81=93=EF=BC=9A >> ~$ guix pull >> building >> /gnu/store/1r2cj292vvjvhbb92bri568p7dia7cp1-isrgrootx1.pem.drv... >> building >> /gnu/store/dhlb62lpf1ggcrax62hm7l7rlcf5c4fi-letsencryptauthorityx3.pem.d= rv... >> downloading from https://letsencrypt.org/certs/isrgrootx1.pem... >> -sha256 hash mismatch for >> /gnu/store/ahiiz5x04rqr214sw840ifz0d3jzmnsb-isrgrootx1.pem: >> expected hash: >> 0zycy85ff9ga53z1q03df89ka9iihb9p8bjhw056rq2y4rn3b6ac >> actual hash: >> 1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92 > > Thanks! I ran into this issue myself and updated the hashes in > 505b2631a9c35bbaa5ba6771ad4f646086f23cad. Great, thanks. However, while this change might avoid the problem with guix pull in the future, I still a bit stuck. I got this from a fresh install of Guix on the Overdrive machine I have (aarch64-linux). I'm hoping that I'll be able to install git and the Guix dependencies, download the repository, and then get a newer version of Guix that way, but I'm guessing this will still be a problem for other aarch64-linux machines unless there's a substitute out there somewhere. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEPonu50WOcg2XVOCyXiijOwuE9XcFAl5I/LRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcACgkQXiijOwuE 9Xd+whAAmn1HB00nxUgV4p+g3g/KpKxG6wPdzP/eqC4AaXt4a2s7jPegypDBnKJJ +ALidm4sAdIebDynGQitKaeIcaeDYafNPb9Ost//9WVxIreAgplIK1ulRrWfDh+c 1PquNcwap3r842qARD+N7UAN3f2Ng6h4qAwc6pb1W/SXqioSWZPpcaToEcY8CiNG m+lmWmxfJz3Tb29+ZoeM+NBvPFBIysr5HwxmDt0JzRSO6o8IIIZUQdDBka5v3seT KBtUnX6Nh11tgp8b7Dg27vaMYGTncd1QQnoGeFXeybSsyBNSHWIGo9XyFKMBkQrD 3gL6L0x0dVbb+sEY1vIR2PzKBZ/UoJNzJ107O8FJFnhhWh6yw5MNU86huqJnY7Kp SjQJoPQefYYw0eBNlh7W6FnA/i23MBXNH2o4M4a+HpIgOiX5y8Ape4yZUIzrSQli F9Vnz6Y1qKouzy7yy4jpiL3p49FrGOHbwKIfHZ7RdIz6JaJ6tC/kamfBZhu4dZIP +ofrk63+7B7slMd/KE4t9TKQiCMkOjlDfVTwevPhHkuVN9oZgmHZGqR079LfBmuU XOWuvS3J2bLb1hjXH5nm3hO2fnkMvC6MeJYfTmMi8m4Ze0MxBRDKBHdvqAHPIZ2D OABTcXz5a1Tmn2A5mZNK0O9AaUKq+ppCb6Fen3/Bh9bv6MwXBq8= =+0Wn -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 14 19:09:26 2025 X-Loop: help-debbugs@gnu.org Subject: bug#39615: LetsEncrypt root certificate hash changed Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sun, 16 Feb 2020 09:52:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 39615 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Christopher Baines Cc: 39615@debbugs.gnu.org Received: via spool by 39615-submit@debbugs.gnu.org id=B39615.15818467039106 (code B ref 39615); Sun, 16 Feb 2020 09:52:01 +0000 Received: (at 39615) by debbugs.gnu.org; 16 Feb 2020 09:51:43 +0000 Received: from localhost ([127.0.0.1]:36709 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j3GaV-0002Mo-KN for submit@debbugs.gnu.org; Sun, 16 Feb 2020 04:51:43 -0500 Received: from tobias.gr ([80.241.217.52]:53394) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j3GaU-0002Mf-4j for 39615@debbugs.gnu.org; Sun, 16 Feb 2020 04:51:42 -0500 Received: by tobias.gr (OpenSMTPD) with ESMTP id a3b7d51a; Sun, 16 Feb 2020 09:51:40 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=tobias.gr; h=from:to:cc :subject:references:in-reply-to:date:message-id:mime-version :content-type; s=2018; i=me@tobias.gr; bh=zZW9J6/cEyJUjsbSceWutE Wc10nBOBuIc4XDopRFn/8=; b=C6e/Du5D3oeEZIzg2hCWff97Otbt1d1w5I9oKR IFAD3xKu7g/npA6EXsLvxhwybLpDH1HZEmZ5x0IK1SmS9Cr+SlVDFzlqiQOXFz/R BnwJnbsReuWePslOTQZc6zQ1vqUH1kvLJlGbySEufsH1yJBKv82gpfV4xbK4zW5Q lh+0iB1Gp7CJnEif003tdNm8u6onJX0j2RMSpkr6PJdSfnqzbMqDdD65ovFOk6LP i5d2DSCYnOf6LUbfFf6Q0qG9V5hGjTay7lhtOBZQYHBaQcZptdWj+r8owKX11b9U MV8BaJOohT8ajhSzlbMUDtLB1/2jZoW3uGprHx8LP3Vg8waw== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 1914f0b5 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO); Sun, 16 Feb 2020 09:51:39 +0000 (UTC) From: Tobias Geerinckx-Rice References: <871rqv27d2.fsf@cbaines.net> <878sl3hlbi.fsf@nckx> <87zhdjym2z.fsf@cbaines.net> In-reply-to: <87zhdjym2z.fsf@cbaines.net> Date: Sun, 16 Feb 2020 10:52:00 +0100 Message-ID: <87h7zq97wf.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Chris, Christopher Baines =E5=86=99=E9=81=93=EF=BC=9A > However, while this change might avoid the problem with guix=20 > pull in the > future, I still a bit stuck. I got this from a fresh install of=20 > Guix on > the Overdrive machine I have (aarch64-linux). I guess I've found my purpose this week and it's =E2=80=98mirroring old=20 shit=E2=80=99. This is not at all a solution, but you can =E2=80=98guix download=E2=80=99 = the old=20 .pem files here[0] and hopefully be on your merry way. > I'm hoping that I'll be able to install git and the Guix=20 > dependencies, > download the repository, and then get a newer version of Guix=20 > that way, > but I'm guessing this will still be a problem for other=20 > aarch64-linux > machines unless there's a substitute out there somewhere. Indeed, and not just aarch64=E2=80=A6 Kind regards, T G-R [0]: https://www.tobias.gr/guix --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfo+u0AlEeO9y5k0W2Imw8BjFSTwFAl5JEMAACgkQ2Imw8BjF STxNSA//SxC5kgeaAwRHy7QMfqP6kSsNK4fm/abuFHZ2kfnfSmF7/Qf59YtapWpF YSZ6Gxn4ClwdkCsL9MZlAQ/HILjvxz6o80oRGANv8TjHBGkVEYyHhNm7s5kF3n/l YA/4UdDGMcOqDAkS9Sn8O6OAkoRTs5YjoOruGAlM8hW86BVfn0w7kzdJNdY+ome9 2gu+5NBHkquz/ii2YUB1wcd9+c+6e9ZwWhZcMSkBa3aL8OayVTKdZpV6Ip7dDLR1 m6GZSF5MOaL6Au0SBoOTeq9rJt7W0lnB9WDsdL752kufQ3gkfW1wHUBWihemSXkJ I2OQaBDI/Rz8RbejHV7K1adz3OmYs6P9u/U0y+PxS+Fy6yRmSEexhNwE8boPbEPA rZMsraJb5akymQmYItLcuprSHX4jGagPM2v0HqyRZohjWVUhCONoq//m8am7T6gM F6JRhE9/j6w+B3YqtNH38GRK1kxUysErho4fEHiwS4VpmC/ggPQAAg70QPOmZ4Tl ZjzuDaG6XWYjURt1Hppx8T9GADy5XGZpGWxwmxGtrHMsSMPta6O9aYHKEgR/FHmT CPyVT6buE5RXrQ94CZPqMqAkvozmictyR7CCzjtc6IHY/98hn8VROqNoXB6S58AK FQcrkLw6+NrCfLPyWxCIIEWM+ED2MnNvm9SjJPIshMcMN4VYHbk= =Rel2 -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 14 19:09:26 2025 X-Loop: help-debbugs@gnu.org Subject: bug#39615: LetsEncrypt root certificate hash changed Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sun, 16 Feb 2020 10:12:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 39615 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Christopher Baines , 39615@debbugs.gnu.org Received: via spool by 39615-submit@debbugs.gnu.org id=B39615.158184788910834 (code B ref 39615); Sun, 16 Feb 2020 10:12:02 +0000 Received: (at 39615) by debbugs.gnu.org; 16 Feb 2020 10:11:29 +0000 Received: from localhost ([127.0.0.1]:36718 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j3Gtd-0002of-IT for submit@debbugs.gnu.org; Sun, 16 Feb 2020 05:11:29 -0500 Received: from tobias.gr ([80.241.217.52]:54116) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j3Gta-0002oV-DT for 39615@debbugs.gnu.org; Sun, 16 Feb 2020 05:11:27 -0500 Received: by tobias.gr (OpenSMTPD) with ESMTP id 0ce44256; Sun, 16 Feb 2020 10:11:24 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=tobias.gr; h=from:to :subject:references:in-reply-to:date:message-id:mime-version :content-type; s=2018; i=me@tobias.gr; bh=vL8HMAyW+KRXdutFVEd4n7 JF3i+89ZcU0UVpreiX68A=; b=TvY7OEla5vZ57+H8LN9fFauoZ2O4c7OgosdGwv wq2tQl65dG7DuGFPrUmDWLlfHbAuDfEdhMqJaLoAvqXzfOi1OWN/Nbqa7JIQH+SS jKd418wv45UWsiq9b91aOl8mQ87FncfYi6Tcb0Ol4knluTBUoeosJgsgoanHxFHl SFfQ1IWlyV9SkoOvZT8b+5fc5auvr0K3KYzkJqiyBkfHsJ0JjGpv5FmBfhcKgkMk k6YiTyP2sO2ZXRVd+rbM+9pwSnAQ5xugLMe3R43uPXcbVTZzFZSWawOE7H6N9TSh n/RmsqMnyViF+HIb2sXYxrJHABcx48ETm3mLh94xJyXe9mhQ== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 5bc10682 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO); Sun, 16 Feb 2020 10:11:24 +0000 (UTC) From: Tobias Geerinckx-Rice References: <871rqv27d2.fsf@cbaines.net> <878sl3hlbi.fsf@nckx> <87zhdjym2z.fsf@cbaines.net> <87h7zq97wf.fsf@nckx> In-reply-to: <87h7zq97wf.fsf@nckx> Date: Sun, 16 Feb 2020 11:11:45 +0100 Message-ID: <87ftfa96zi.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Chris, Guix, Tobias Geerinckx-Rice via Bug reports for GNU Guix =E5=86=99=E9=81=93=EF=BC= =9A > This is not at all a solution, but you can =E2=80=98guix download=E2=80= =99 the=20 > old > .pem files here[0] and hopefully be on your merry way. Actually: this shouldn't be necessary now, since I've copied these=20 files to berlin (and created gcroots) which ought to serve them as=20 substitutes. Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfo+u0AlEeO9y5k0W2Imw8BjFSTwFAl5JFWEACgkQ2Imw8BjF STwJPA/+Nz6QPZgbykBS+UUoDXV+hhZOjNhOIaP7JPi3bIZsGTxys01MWyMvOyUI 5EtznNgCraG5eko1SO6FAdhceakYXP33YFZG9v5axsbR6H5humALFr9VIR+PcW4H /N2YN2XG/APdtAYAIfklR6tPqB/iMFRsMXprdgi4t+lxhM3ruH3pcqGmzLCk9tfu Kyn6gohOSlgn0dZwAkLXMvuvYonRnckYNFWtMpdwSqeyMzRX1YN7t+Bpze8FFaSx 9e3WU+OjQ2dPnjl7oNBTZGB0FLMAlpHMOr4vzxW8xvM5riLdP8+ochSH9PVC2IGP USMY7uIUgeByh4NcrEzsPmROKXvSMljT+Fp7Pfa1OuwKJ6G2/eSgVXVJh9GJqMBU y03Y3nXqgtoVRvCOTBDkDT6tAUlaudBv/gXrehQ3dWmgIZtrQL/RI16578cL8EpK dZ30N5UiN4xz8AVXACu/aQffRItrHOjhG3c6WuBjjm2IvitmIa+X820295WrzNAa U9E5+YtybC6JzS1IYkFMu+BBk35xZ+2j7PQ6T0ezQI7pEK/hWtuPmADtsYYVbvW5 8YXKzGrFgFtUBXTqB6GrHc5AKrayua9VvxM4zVEnBuw82Xpo+9L54dPGNbUpU7v3 8puKgC6baQF+rXJhm0+f/aB/KVdLERqcVixwSeRAHH8+EJt+pCc= =60B2 -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 14 19:09:26 2025 X-Loop: help-debbugs@gnu.org Subject: bug#39615: LetsEncrypt root certificate hash changed Resent-From: Christopher Baines Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sun, 16 Feb 2020 10:47:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 39615 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Tobias Geerinckx-Rice Cc: 39615@debbugs.gnu.org Received: via spool by 39615-submit@debbugs.gnu.org id=B39615.158184997113969 (code B ref 39615); Sun, 16 Feb 2020 10:47:01 +0000 Received: (at 39615) by debbugs.gnu.org; 16 Feb 2020 10:46:11 +0000 Received: from localhost ([127.0.0.1]:36729 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j3HRC-0003dF-Mm for submit@debbugs.gnu.org; Sun, 16 Feb 2020 05:46:10 -0500 Received: from mira.cbaines.net ([212.71.252.8]:56926) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1j3HR9-0003d6-Tw for 39615@debbugs.gnu.org; Sun, 16 Feb 2020 05:46:08 -0500 Received: from localhost (unknown [46.237.163.35]) by mira.cbaines.net (Postfix) with ESMTPSA id E341E27BBE4; Sun, 16 Feb 2020 10:46:06 +0000 (GMT) Received: from localhost (localhost [local]) by localhost (OpenSMTPD) with ESMTPA id 9c004d0c; Sun, 16 Feb 2020 10:46:04 +0000 (UTC) References: <871rqv27d2.fsf@cbaines.net> <878sl3hlbi.fsf@nckx> <87zhdjym2z.fsf@cbaines.net> <87h7zq97wf.fsf@nckx> User-agent: mu4e 1.2.0; emacs 26.3 From: Christopher Baines In-reply-to: <87h7zq97wf.fsf@nckx> Date: Sun, 16 Feb 2020 10:46:02 +0000 Message-ID: <87wo8mzu6t.fsf@cbaines.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Tobias Geerinckx-Rice writes: > Christopher Baines =E5=86=99=E9=81=93=EF=BC=9A >> However, while this change might avoid the problem with guix pull in >> the >> future, I still a bit stuck. I got this from a fresh install of Guix >> on >> the Overdrive machine I have (aarch64-linux). > > I guess I've found my purpose this week and it's =E2=80=98mirroring old s= hit=E2=80=99. > > This is not at all a solution, but you can =E2=80=98guix download=E2=80= =99 the old > .pem files here[0] and hopefully be on your merry way. Awesome, I've managed to download them and guix pull no longer fails with that error which is great :) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEPonu50WOcg2XVOCyXiijOwuE9XcFAl5JHWpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcACgkQXiijOwuE 9Xe2nQ//cnGx+NDuQsSnrCpgmoudP4/bt0bGHWOS+IqPRG8TqfDB8GhhphVy32zP XRnI5auB6CQ5+Ds8uCsiihtL/zMokJEkn5Vjz0D31HjbRqdCuTSmaz0lxDGGcnTf vEMCcvmM2zLhkIdXF38QBAEM9TFwUYesBziks8z8STDN1HTxSLxbTsr7B5e1eh0N abidXX2RcZrFHmTyDghGGOGy9nVSNhVGbcoNLd7gB9ChEk6tHgU+xIdjcvksoSbu 0rIVWrfco5rkvv6qmc3ZpvVt5ZbrF7vj1lJ4GsojkKW9meWttQAzeXAaw/1aMLbX cJol2yLBztNyfEqc+dQdB+k7s5fcPEmZKW3qMU5E3kEDUK5RcRJqSGqT0fI5P8we iQsn/Obu+U56T6us0uUp8tz8QmBDUIEkuOfb2MlW1Uq55TywjvpXz5u8N/oVazdB KhC+PvgvxP6kgjrOCYmGNZHRBHvbVZEAl1P/p4oW6ru4fGO3qZlkdOhAQeTqZcUU C/ErPQfsDYK/fMeABCxFs+Im+2/mEI0PZBgr2DzB7ZEbJEvVw0MMDRE2obFBIEsz K957CDonoICiVmzNV3rsfSJHQ3ho83glvNerU6Xv63pWdrHZpCIMWhXsJ5cCj6rZ j0m6CnDMiiOdkKRiiBPhMxrN76aX1UI+hjtIjyJ6irBoWwqiOg0= =4gf5 -----END PGP SIGNATURE----- --=-=-=--