Subject: bug#74776: closed (Re: [bug#74776] [PATCH 0/7] Adding '--no-check-certificate' to 'pull' and 'time-machine')

From: [email-masked] (GNU bug Tracking System)
Date: Wed, 25 Dec 2024 22:55:02 +0000

Your bug report

#74776: [PATCH 0/7] Adding '--no-check-certificate' to 'pull' and 'time-machine'

which was filed against the guix-patches package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
74776: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=74776
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: [bug#74776] [PATCH 0/7] Adding '--no-check-certificate' to 'pull' and 'time-machine'
From: Ludovic Courtès <[email-masked]>
To: [email-masked]
Cc: Josselin Poiret <[email-masked]>, Nicolas Graves <[email-masked]>, Simon Tournier <[email-masked]>, Mathieu Othacehe <[email-masked]>, Tobias Geerinckx-Rice <[email-masked]>, Christopher Baines <[email-masked]>
Date: Wed, 25 Dec 2024 23:54:24 +0100
List-Id: <debbugs-submit.debbugs.gnu.org>

Ludovic Courtès <[email-masked]> skribis:

>   git: Remove Guile-Git < 0.4.0 compatibility fallback.
>   git: Allow X.509 certificate verification to be disabled.
>   guix download: Honor ‘--no-check-certificate’ for ‘--git’.
>   channels: Add #:verify-certificate? and honor it.
>   pull: Add ‘--no-check-certificate’.
>   inferior: Add #:verify-certificate? to ‘cached-channel-instance’.
>   time-machine: Add ‘--no-check-certificate’.

Pushed as e16cdcf37d8223b3634ec5e658356c3b7f154859.

Ludo’.

Subject: [PATCH 0/7] Adding '--no-check-certificate' to 'pull' and 'time-machine'
From: Ludovic Courtès <[email-masked]>
To: [email-masked]
Cc: Ludovic Courtès <[email-masked]>, Nicolas Graves <[email-masked]>
Date: Wed, 11 Dec 2024 00:33:22 +0100
List-Id: <debbugs-submit.debbugs.gnu.org>

Hello,

As discussed with Nicolas in <https://issues.guix.gnu.org/74711>, being
able to skip X.509 certificate verification in ‘guix pull’ & co. can
be useful in emergency situations.

This patch series:

  • fixes ‘guix download --git --no-check-certificate’ so that
    ‘--no-check-certificate’ is actually honored;

  • adds ‘--no-check-certificate’ to ‘pull’ and ‘time-machine’.

Thoughts?

Ludo’.

Ludovic Courtès (7):
  git: Remove Guile-Git < 0.4.0 compatibility fallback.
  git: Allow X.509 certificate verification to be disabled.
  guix download: Honor ‘--no-check-certificate’ for ‘--git’.
  channels: Add #:verify-certificate? and honor it.
  pull: Add ‘--no-check-certificate’.
  inferior: Add #:verify-certificate? to ‘cached-channel-instance’.
  time-machine: Add ‘--no-check-certificate’.

 doc/guix.texi                 |  8 ++++
 guix/channels.scm             | 22 ++++++++---
 guix/git.scm                  | 72 ++++++++++++++++++++++++-----------
 guix/inferior.scm             | 24 ++++++++----
 guix/scripts/download.scm     | 34 +++++++++--------
 guix/scripts/pull.scm         | 16 ++++++--
 guix/scripts/time-machine.scm | 14 ++++++-
 7 files changed, 134 insertions(+), 56 deletions(-)

base-commit: dcaccc8b722cee279c00bb321baa48ae73563931
-- 
2.46.0