From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 22 03:29:37 2022 Received: (at submit) by debbugs.gnu.org; 22 Feb 2022 08:29:37 +0000 Received: from localhost ([127.0.0.1]:39943 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nMQYC-000143-Qz for submit@debbugs.gnu.org; Tue, 22 Feb 2022 03:29:37 -0500 Received: from lists.gnu.org ([209.51.188.17]:51858) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nMNEL-0003rB-NM for submit@debbugs.gnu.org; Mon, 21 Feb 2022 23:56:54 -0500 Received: from eggs.gnu.org ([209.51.188.92]:51190) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nMNEL-0007CP-FQ for bug-guix@gnu.org; Mon, 21 Feb 2022 23:56:53 -0500 Received: from wout5-smtp.messagingengine.com ([64.147.123.21]:39479) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nMNEJ-0006bP-Rv for bug-guix@gnu.org; Mon, 21 Feb 2022 23:56:53 -0500 Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.west.internal (Postfix) with ESMTP id 7ABE23200F81 for ; Mon, 21 Feb 2022 23:56:50 -0500 (EST) Received: from imap43 ([10.202.2.93]) by compute5.internal (MEProxy); Mon, 21 Feb 2022 23:56:50 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:sender:subject :subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm2; bh=cmya4Bu2ydjFUZpowTBXmi91ofBBV55FaVNnaSOB1 oM=; b=QuddOgDJX1dyWeklNp74wdxh4ixbeadbBsZTwHcMHr3Vpzw+4DKMUvalw WUo4Dez01DOwMmzOvoXG8DLF1pkTO6E9PL/VjKcvoVICMKbkN5ITBIoDDcCWTn6F m8AoH2t+MhFA9VP/ql0H6UsQa1b5iPrF3XRXL9cZDMnc/5RycmaHL1eaGDY88437 LqskFvWkXTKM98s5s7Gu6pxejiaY8qGqBpILV3aPfjmdE0gsOHSaJgc0B9Yu3CcO DygPk1nrFsBvG4XdV2zgaa6t4Fiv+yQ6kwzTVJMtppCPz2ktuHL9unpxC82FY/3x VM7Ob5AjLC3cx8e16gMtkSsUQrCvg== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvvddrkeejgdejiecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepofgfggfkfffhvffutgesthdtredtre ertdenucfhrhhomhepfdffrghvihguucetrhhrohihohdfuceouggrvhhiugesrghqfigr rhhirdhnvghtqeenucggtffrrghtthgvrhhnpeehjeeltdetjeefgedvgfffueevtdegtd etffetvefhteekgefgteeuteekudduieenucffohhmrghinhepghhithhhuhgsrdgtohhm necuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepuggrvh hiugesrghqfigrrhhirdhnvght X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 501) id C6F67AC0E99; Mon, 21 Feb 2022 23:56:49 -0500 (EST) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.5.0-alpha0-4778-g14fba9972e-fm-20220217.001-g14fba997 Mime-Version: 1.0 Message-Id: <775ea9f0-6247-4b0e-a89f-dc9e9ba9d75d@www.fastmail.com> Date: Mon, 21 Feb 2022 23:56:29 -0500 From: "David Arroyo" To: bug-guix@gnu.org Subject: SSL_CERT_DIR is not always unary Content-Type: text/plain Received-SPF: pass client-ip=64.147.123.21; envelope-from=david@aqwari.net; helo=wout5-smtp.messagingengine.com X-Spam_score_int: -25 X-Spam_score: -2.6 X-Spam_bar: -- X-Spam_report: (-2.6 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Tue, 22 Feb 2022 03:29:36 -0500 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) The guix shell profile, at least on non-guix SD systems, contains the line export SSL_CERT_DIR="${GUIX_PROFILE:-/gnu/store/xxxx-profile}/etc/ssl/certs${SSL_CERT_DIR:+:}$SSL_CERT_DIR" Since it prepends to the SSL_CERT_DIR variable, if a silly user were to accidentally source this file twice, say, to pick up changes they've made to a file that sources this file, the variable will contain duplicate paths. However, several locations in the guix source assume SSL_CERT_DIR is a single directory. As an example, I ran into this issue when attempting to use `guix import opam -r faraday`: Starting download of /tmp/guix-file.XFPss4 From https://github.com/inhabitedtype/faraday/archive/0.8.1.tar.gz... X.509 certificate of 'github.com' could not be verified: signer-not-found invalid Running the command with `strace -f` showed that guix was attempting to open $SSL_CERT_DIR, rather than the first colon-delimited item in $SSL_CERT_DIR. It might be better to clobber this variable in the guix shell profile, rather than render it unusable for some subcommands. If not that, then we should remove the assumption that it contains a single path element. (apologies if this is a duplicate email; I sent this earlier before subscribing to the list) From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 22 12:15:06 2022 Received: (at control) by debbugs.gnu.org; 22 Feb 2022 17:15:06 +0000 Received: from localhost ([127.0.0.1]:42508 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nMYkk-0003WS-Hf for submit@debbugs.gnu.org; Tue, 22 Feb 2022 12:15:06 -0500 Received: from tobias.gr ([80.241.217.52]:45576) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nMYkh-0003Vv-IQ for control@debbugs.gnu.org; Tue, 22 Feb 2022 12:15:05 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=h8uS5x+FBcqBs ak9SvWXaUTG5PFJ85F4tL9BxuEaAnw=; h=subject:to:from:date; d=tobias.gr; b=AL0JIiLQ1oJavIS8IEkFebVem3ljRSqlEyKA7juA5u9KMi3viyMIgeQdXh4EQGI++dUr KCw+RKJHNvW2rzoVyJvfNrCfHovLomNl01piYRqcwDMnGa8QXk3wIRYnrXvWhuEJkKC9re sJ+QBFsYXy6Twjm5kiI75sjKGpHc3Ls9p58GqUhMdMsqCWJdNA0iKw+4H5KdLh0ko4R2jR 5WSt+i5XQiord20ZU/WsV03X7FYStNjLNtbuLkk5mHoh7lpE+nr41c+uqdXGRDghOh17t6 BKQ0daUd3Z+qcxySj80mxhfmXma01tKYP92qwJFTCYCF+cr/RV233BEYdr63/eOw== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 5b6073bc (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO) for ; Tue, 22 Feb 2022 17:14:58 +0000 (UTC) Date: Tue, 22 Feb 2022 17:14:59 +0000 From: Tobias Geerinckx-Rice To: control@debbugs.gnu.org Subject: Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 2.0 (++) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: merge 54101 54102 Kind regards, T G-R Content analysis details: (2.0 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 2.0 BLANK_SUBJECT Subject is present but empty -0.0 T_SCC_BODY_TEXT_LINE No description available. X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.0 (+) merge 54101 54102 Kind regards, T G-R Sent on the go=2E Excuse or enjoy my brevity=2E