From unknown Sun Jun 22 00:53:51 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#62506] [PATCH] doc: Regarding SSL certs, clarify when we write about Guix System. Resent-From: Florian Pelz Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 28 Mar 2023 18:40:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 62506 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 62506@debbugs.gnu.org Cc: Florian Pelz X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.168002879013439 (code B ref -1); Tue, 28 Mar 2023 18:40:02 +0000 Received: (at submit) by debbugs.gnu.org; 28 Mar 2023 18:39:50 +0000 Received: from localhost ([127.0.0.1]:50697 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1phEEX-0003Uh-NO for submit@debbugs.gnu.org; Tue, 28 Mar 2023 14:39:50 -0400 Received: from lists.gnu.org ([209.51.188.17]:51660) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1phEEV-0003UX-T8 for submit@debbugs.gnu.org; Tue, 28 Mar 2023 14:39:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1phEEV-00061p-Hp for guix-patches@gnu.org; Tue, 28 Mar 2023 14:39:47 -0400 Received: from relay.yourmailgateway.de ([185.244.194.184]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1phEET-00085o-7G for guix-patches@gnu.org; Tue, 28 Mar 2023 14:39:46 -0400 Received: from relay01-mors.netcup.net (localhost [127.0.0.1]) by relay01-mors.netcup.net (Postfix) with ESMTPS id 4PmJPm544Dz8wxc for ; Tue, 28 Mar 2023 20:39:40 +0200 (CEST) Authentication-Results: relay01-mors.netcup.net; dkim=permerror (bad message/signature format) Received: from policy01-mors.netcup.net (unknown [46.38.225.35]) by relay01-mors.netcup.net (Postfix) with ESMTPS id 4PmJPm4fr4z7v2p for ; Tue, 28 Mar 2023 20:39:40 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at policy01-mors.netcup.net X-Spam-Flag: NO X-Spam-Score: -2.9 X-Spam-Level: X-Spam-Status: No, score=-2.9 required=6.31 tests=[ALL_TRUSTED=-1, BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mxe217.netcup.net (unknown [10.243.12.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by policy01-mors.netcup.net (Postfix) with ESMTPS id 4PmJPm1q4Wz8scS for ; Tue, 28 Mar 2023 20:39:40 +0200 (CEST) Received: from florianrock64.fritz.box (ip92344de0.dynamic.kabel-deutschland.de [146.52.77.224]) by mxe217.netcup.net (Postfix) with ESMTPSA id 0C75380C44; Tue, 28 Mar 2023 20:39:39 +0200 (CEST) From: Florian Pelz Date: Tue, 28 Mar 2023 20:37:38 +0200 Message-Id: <20230328183739.19186-1-pelzflorian@pelzflorian.de> X-Mailer: git-send-email 2.39.2 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-NC-CID: 5kApxkQI5dHh/WWdBfri4oCcDwywuedLPFPRX+fVL/4yEw1bzI/VxCea Received-SPF: none client-ip=185.244.194.184; envelope-from=pelzflorian@pelzflorian.de; helo=relay.yourmailgateway.de X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Rationale: Even though the section 'X.509 Certificates' is part of the System Configuration chapter, readers might also come here from a cross-reference when reading about Application Setup on a foreign distro. * doc/guix.texi (System Configuration)[X.509 Certificates]: Clarify. --- doc/guix.texi | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/doc/guix.texi b/doc/guix.texi index c49e51b72e..9ce244a6ee 100644 --- a/doc/guix.texi +++ b/doc/guix.texi @@ -60,7 +60,7 @@ Copyright @copyright{} 2018, 2021 Oleg Pykhalov@* Copyright @copyright{} 2018 Mike Gerwitz@* Copyright @copyright{} 2018 Pierre-Antoine Rouby@* Copyright @copyright{} 2018, 2019 Gábor Boskovits@* -Copyright @copyright{} 2018, 2019, 2020, 2022 Florian Pelz@* +Copyright @copyright{} 2018, 2019, 2020, 2022, 2023 Florian Pelz@* Copyright @copyright{} 2018 Laura Lazzati@* Copyright @copyright{} 2018 Alex Vong@* Copyright @copyright{} 2019 Josh Holland@* @@ -38639,11 +38639,12 @@ However, most other programs that can talk HTTPS---@command{wget}, certificates can be found. @cindex @code{nss-certs} -In Guix, this is done by adding a package that provides certificates -to the @code{packages} field of the @code{operating-system} declaration -(@pxref{operating-system Reference}). Guix includes one such package, -@code{nss-certs}, which is a set of CA certificates provided as part of -Mozilla's Network Security Services. +For users of Guix System, this is done by adding a package that +provides certificates to the @code{packages} field of the +@code{operating-system} declaration (@pxref{operating-system +Reference}). Guix includes one such package, @code{nss-certs}, which +is a set of CA certificates provided as part of Mozilla's Network +Security Services. Note that it is @emph{not} part of @code{%base-packages}, so you need to explicitly add it. The @file{/etc/ssl/certs} directory, which is where base-commit: c9af27d4ca733b20f09019f1465d3e5fdc1ec724 -- 2.39.2 From unknown Sun Jun 22 00:53:51 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Florian Pelz Subject: bug#62506: closed (Re: [PATCH] doc: Regarding SSL certs, clarify when we write about Guix System.) Message-ID: References: <87mt3fobdi.fsf@pelzflorian.de> <20230328183739.19186-1-pelzflorian@pelzflorian.de> X-Gnu-PR-Message: they-closed 62506 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 62506@debbugs.gnu.org Date: Mon, 10 Apr 2023 18:12:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1681150322-24883-1" This is a multi-part message in MIME format... ------------=_1681150322-24883-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #62506: [PATCH] doc: Regarding SSL certs, clarify when we write about Guix = System. which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 62506@debbugs.gnu.org. --=20 62506: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D62506 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1681150322-24883-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 62506-done) by debbugs.gnu.org; 10 Apr 2023 18:12:00 +0000 Received: from localhost ([127.0.0.1]:35874 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1plvzj-0006T8-Rf for submit@debbugs.gnu.org; Mon, 10 Apr 2023 14:12:00 -0400 Received: from relay.yourmailgateway.de ([188.68.63.170]:52019) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1plvzh-0006Sx-DF for 62506-done@debbugs.gnu.org; Mon, 10 Apr 2023 14:11:58 -0400 Received: from mors-relay8203.netcup.net (localhost [127.0.0.1]) by mors-relay8203.netcup.net (Postfix) with ESMTPS id 4PwH9l2Xphz8Z6Y for <62506-done@debbugs.gnu.org>; Mon, 10 Apr 2023 18:11:55 +0000 (UTC) Authentication-Results: mors-relay8203.netcup.net; dkim=permerror (bad message/signature format) Received: from policy02-mors.netcup.net (unknown [46.38.225.35]) by mors-relay8203.netcup.net (Postfix) with ESMTPS id 4PwH9l1rCSz8Z5q for <62506-done@debbugs.gnu.org>; Mon, 10 Apr 2023 18:11:55 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at policy02-mors.netcup.net X-Spam-Flag: NO X-Spam-Score: -2.9 X-Spam-Level: X-Spam-Status: No, score=-2.9 required=6.31 tests=[ALL_TRUSTED=-1, BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mxe217.netcup.net (unknown [10.243.12.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by policy02-mors.netcup.net (Postfix) with ESMTPS id 4PwH9k5tT9z8scr for <62506-done@debbugs.gnu.org>; Mon, 10 Apr 2023 20:11:54 +0200 (CEST) Received: from florianrock64 (ip92344de0.dynamic.kabel-deutschland.de [146.52.77.224]) by mxe217.netcup.net (Postfix) with ESMTPSA id 6437B809B6 for <62506-done@debbugs.gnu.org>; Mon, 10 Apr 2023 20:11:54 +0200 (CEST) From: "pelzflorian (Florian Pelz)" To: 62506-done@debbugs.gnu.org Subject: Re: [PATCH] doc: Regarding SSL certs, clarify when we write about Guix System. References: <20230328183739.19186-1-pelzflorian@pelzflorian.de> Date: Mon, 10 Apr 2023 20:11:53 +0200 In-Reply-To: <20230328183739.19186-1-pelzflorian@pelzflorian.de> (Florian Pelz's message of "Tue, 28 Mar 2023 20:37:38 +0200") Message-ID: <87mt3fobdi.fsf@pelzflorian.de> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Rspamd-Queue-Id: 6437B809B6 X-Spamd-Result: default: False [-5.60 / 15.00]; BAYES_HAM(-5.50)[99.99%]; MIME_GOOD(-0.10)[text/plain]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:3209, ipnet:146.52.0.0/16, country:DE]; RCVD_COUNT_ZERO(0.00)[0]; RCPT_COUNT_ONE(0.00)[1]; TO_DN_NONE(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; ARC_NA(0.00)[] X-Rspamd-Server: rspamd-worker-8404 X-NC-CID: I/epgWh0/XDg261y1RZpqUcMaJeX0jEkRsCZhKB2DXC/DNghjsCNG4wt X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 62506-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Pushed as 309d8294e93ddf46eb690e7cf4202857ad5f7f55. Regards, Florian ------------=_1681150322-24883-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 28 Mar 2023 18:39:50 +0000 Received: from localhost ([127.0.0.1]:50697 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1phEEX-0003Uh-NO for submit@debbugs.gnu.org; Tue, 28 Mar 2023 14:39:50 -0400 Received: from lists.gnu.org ([209.51.188.17]:51660) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1phEEV-0003UX-T8 for submit@debbugs.gnu.org; Tue, 28 Mar 2023 14:39:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1phEEV-00061p-Hp for guix-patches@gnu.org; Tue, 28 Mar 2023 14:39:47 -0400 Received: from relay.yourmailgateway.de ([185.244.194.184]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1phEET-00085o-7G for guix-patches@gnu.org; Tue, 28 Mar 2023 14:39:46 -0400 Received: from relay01-mors.netcup.net (localhost [127.0.0.1]) by relay01-mors.netcup.net (Postfix) with ESMTPS id 4PmJPm544Dz8wxc for ; Tue, 28 Mar 2023 20:39:40 +0200 (CEST) Authentication-Results: relay01-mors.netcup.net; dkim=permerror (bad message/signature format) Received: from policy01-mors.netcup.net (unknown [46.38.225.35]) by relay01-mors.netcup.net (Postfix) with ESMTPS id 4PmJPm4fr4z7v2p for ; Tue, 28 Mar 2023 20:39:40 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at policy01-mors.netcup.net X-Spam-Flag: NO X-Spam-Score: -2.9 X-Spam-Level: X-Spam-Status: No, score=-2.9 required=6.31 tests=[ALL_TRUSTED=-1, BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mxe217.netcup.net (unknown [10.243.12.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by policy01-mors.netcup.net (Postfix) with ESMTPS id 4PmJPm1q4Wz8scS for ; Tue, 28 Mar 2023 20:39:40 +0200 (CEST) Received: from florianrock64.fritz.box (ip92344de0.dynamic.kabel-deutschland.de [146.52.77.224]) by mxe217.netcup.net (Postfix) with ESMTPSA id 0C75380C44; Tue, 28 Mar 2023 20:39:39 +0200 (CEST) From: Florian Pelz To: guix-patches@gnu.org Subject: [PATCH] doc: Regarding SSL certs, clarify when we write about Guix System. Date: Tue, 28 Mar 2023 20:37:38 +0200 Message-Id: <20230328183739.19186-1-pelzflorian@pelzflorian.de> X-Mailer: git-send-email 2.39.2 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-NC-CID: 5kApxkQI5dHh/WWdBfri4oCcDwywuedLPFPRX+fVL/4yEw1bzI/VxCea Received-SPF: none client-ip=185.244.194.184; envelope-from=pelzflorian@pelzflorian.de; helo=relay.yourmailgateway.de X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: submit Cc: Florian Pelz X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Rationale: Even though the section 'X.509 Certificates' is part of the System Configuration chapter, readers might also come here from a cross-reference when reading about Application Setup on a foreign distro. * doc/guix.texi (System Configuration)[X.509 Certificates]: Clarify. --- doc/guix.texi | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/doc/guix.texi b/doc/guix.texi index c49e51b72e..9ce244a6ee 100644 --- a/doc/guix.texi +++ b/doc/guix.texi @@ -60,7 +60,7 @@ Copyright @copyright{} 2018, 2021 Oleg Pykhalov@* Copyright @copyright{} 2018 Mike Gerwitz@* Copyright @copyright{} 2018 Pierre-Antoine Rouby@* Copyright @copyright{} 2018, 2019 Gábor Boskovits@* -Copyright @copyright{} 2018, 2019, 2020, 2022 Florian Pelz@* +Copyright @copyright{} 2018, 2019, 2020, 2022, 2023 Florian Pelz@* Copyright @copyright{} 2018 Laura Lazzati@* Copyright @copyright{} 2018 Alex Vong@* Copyright @copyright{} 2019 Josh Holland@* @@ -38639,11 +38639,12 @@ However, most other programs that can talk HTTPS---@command{wget}, certificates can be found. @cindex @code{nss-certs} -In Guix, this is done by adding a package that provides certificates -to the @code{packages} field of the @code{operating-system} declaration -(@pxref{operating-system Reference}). Guix includes one such package, -@code{nss-certs}, which is a set of CA certificates provided as part of -Mozilla's Network Security Services. +For users of Guix System, this is done by adding a package that +provides certificates to the @code{packages} field of the +@code{operating-system} declaration (@pxref{operating-system +Reference}). Guix includes one such package, @code{nss-certs}, which +is a set of CA certificates provided as part of Mozilla's Network +Security Services. Note that it is @emph{not} part of @code{%base-packages}, so you need to explicitly add it. The @file{/etc/ssl/certs} directory, which is where base-commit: c9af27d4ca733b20f09019f1465d3e5fdc1ec724 -- 2.39.2 ------------=_1681150322-24883-1--