From mboxrd@z Thu Jan 1 00:00:00 1970 From: Hank Donnay Subject: bug#25240: weechat-1.6: curl error 60 Date: Tue, 20 Dec 2016 17:08:32 -0500 Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=94eb2c06137ae72a9005441e4661 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:51876) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cJT0t-0000Ty-5f for bug-guix@gnu.org; Tue, 20 Dec 2016 17:36:04 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cJT0s-0007m2-5e for bug-guix@gnu.org; Tue, 20 Dec 2016 17:36:03 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:34013) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cJT0s-0007lS-0l for bug-guix@gnu.org; Tue, 20 Dec 2016 17:36:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1cJT0r-0007hF-M3 for bug-guix@gnu.org; Tue, 20 Dec 2016 17:36:01 -0500 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([2001:4830:134:3::10]:40900) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cJSaJ-000073-Tc for bug-guix@gnu.org; Tue, 20 Dec 2016 17:08:36 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cJSaI-0008KC-WF for bug-guix@gnu.org; Tue, 20 Dec 2016 17:08:35 -0500 Received: from mail-qk0-x232.google.com ([2607:f8b0:400d:c09::232]:34938) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cJSaI-0008Ir-SN for bug-guix@gnu.org; Tue, 20 Dec 2016 17:08:34 -0500 Received: by mail-qk0-x232.google.com with SMTP id u25so52786814qki.2 for ; Tue, 20 Dec 2016 14:08:33 -0800 (PST) List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 25240@debbugs.gnu.org --94eb2c06137ae72a9005441e4661 Content-Type: text/plain; charset=UTF-8 Weechat seems to be unable to do HTTPS, and fails with "curl error 60". Setting SSL_CERT_{DIR,FILE} doesn't make a difference. The actual error is: script: error downloading list of scripts: curl error 60 (server certificate verification failed. CAfile: none CRLfile: none) (URL: " https://weechat.org/files/plugins.xml.gz") I have nss-certs installed, and the files pointed to ($GUIX_PROFILE/etc/ssl/certs and $GUIX_PROFILE/etc/ssl/certs/ca-certificates.crt) both exist. Any pointers on where to look to fix this would be appreciated. --94eb2c06137ae72a9005441e4661 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Weechat seems to be unable to do HTTPS, and fail= s with "curl error 60". Setting SSL_CERT_{DIR,FILE} doesn't m= ake a difference. The actual error is:

=C2=A0=C2=A0=C2=A0 script: er= ror downloading list of scripts: curl error 60 (server certificate verifica= tion failed. CAfile: none CRLfile: none) (URL: "https://weechat.org/files/plugins.xml.gz= ")

I have nss-certs installed, and the files pointed to (= $GUIX_PROFILE/etc/ssl/certs and $GUIX_PROFILE/etc/ssl/certs/ca-certificates= .crt) both exist.

Any pointers on where to look to fix this wo= uld be appreciated.
--94eb2c06137ae72a9005441e4661-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=) Subject: bug#25240: weechat-1.6: curl error 60 Date: Wed, 25 Jan 2017 12:10:01 +0100 Message-ID: <87o9yv1jli.fsf@gnu.org> References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:53221) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cWLTl-00025p-Ud for bug-guix@gnu.org; Wed, 25 Jan 2017 06:11:11 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cWLTh-0007Bg-VS for bug-guix@gnu.org; Wed, 25 Jan 2017 06:11:05 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:43412) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cWLTh-0007Bc-RU for bug-guix@gnu.org; Wed, 25 Jan 2017 06:11:01 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1cWLTh-0002SD-MC for bug-guix@gnu.org; Wed, 25 Jan 2017 06:11:01 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: (Hank Donnay's message of "Tue, 20 Dec 2016 17:08:32 -0500") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Hank Donnay Cc: 25240@debbugs.gnu.org Hello, Hank Donnay skribis: > Weechat seems to be unable to do HTTPS, and fails with "curl error 60". > Setting SSL_CERT_{DIR,FILE} doesn't make a difference. The actual error i= s: > > script: error downloading list of scripts: curl error 60 (server > certificate verification failed. CAfile: none CRLfile: none) (URL: " > https://weechat.org/files/plugins.xml.gz") > > I have nss-certs installed, and the files pointed to > ($GUIX_PROFILE/etc/ssl/certs and > $GUIX_PROFILE/etc/ssl/certs/ca-certificates.crt) both exist. > > Any pointers on where to look to fix this would be appreciated. Weechat uses libcurl, which uses GnuTLS and does not honor =E2=80=98SSL_CERT_DIR=E2=80=99, =E2=80=98SSL_CERT_FILE=E2=80=99, and =E2=80= =98CURL_CA_BUNDLE=E2=80=99. Instead, GnuTLS defaults to looking for certificates in /etc/ssl/certs, and it is up to the application to search for certificates in additional places. This has been discussed at but there=E2=80=99s no good solution yet. Thanks, Ludo=E2=80=99. From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jakub =?UTF-8?Q?K=C4=85dzio=C5=82ka?= Subject: bug#25240: Fixed on core-updates Date: Fri, 7 Feb 2020 20:10:15 +0100 Message-ID: <20200207191015.vnjzk2cw3du7cojq@gravity> References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="26m72jkaqtggitkz" Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:37482) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1j090s-0006uv-SS for bug-guix@gnu.org; Fri, 07 Feb 2020 14:10:03 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1j090s-00086v-2x for bug-guix@gnu.org; Fri, 07 Feb 2020 14:10:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:44276) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1j090r-00086r-W2 for bug-guix@gnu.org; Fri, 07 Feb 2020 14:10:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1j090r-0003xm-Rg for bug-guix@gnu.org; Fri, 07 Feb 2020 14:10:01 -0500 In-Reply-To: Sender: "Debbugs-submit" Resent-To: bug-guix@gnu.org Resent-Message-ID: Content-Disposition: inline List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane-mx.org@gnu.org Sender: "bug-Guix" To: 25240-done@debbugs.gnu.org --26m72jkaqtggitkz Content-Type: text/plain; charset=us-ascii Content-Disposition: inline A patch that fixes this landed on core-updates, see #38873. A follow-up bug regarding some cleanup is #39415. --26m72jkaqtggitkz Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE5Xa/ss9usT31cTO54xWnWEYTFWQFAl49thcACgkQ4xWnWEYT FWR3sQ//cmNCnva6H2q6RGpE39ZN8Ffafyk7IvaQX2nFBKDWLEIB1Fy4jq20Wr9v Z4pO96bDVts+l8vxBQxabkR3yEUzD39YeQF9c71HebYdVEjUtBgs1XEjZgidPQzn 0VXedUIcK7U9xVQ3VA1aWwlLYXER5YN4JwBL2XIxK81otHIj7B2dwwx5lDL0VXHn Vf9Qch6iISLmSMB+Vqv6iIUjWkA8QmZL1FpzQSLXbR/IjVJk0zmksD8yKtwl5592 +ZvIJ1PXIVPAxBJuBNr1EbryH/pK25zZfSuNgmaAk8/cVWocjS9WGIas5hi2URB7 nd02lfJQHKgR1ohffHaKL22AtWva8W40SxheENIoLh+8AJFwSrEDP5CilEcyQLa8 Ep49/hBnEG8cofSoR2qh3x1XDUmy8aYPpyE+A2HsbNfs6wDTf3KEWQEtYARiVIvu M6cHtKelJjWMaXs63RudS42MU4xCCLd6afDa39JVQ4Q0lhoyd6geSoAMroV3FiuI cPEscBw1fzOy2p8g9/bb8LbxmbAP751gbgGJ0DtqRlUmPcuCn8+O/bcOkUvMJGSy gdJr15HmPj003Q8Zq2cMUIyxA5HQCmO4UkrCSZsEMJlXVJMMBC2RkbyFnqtWbsPC Y6EeRvxgei3KvPv2itMpxD9AcAi35niEf3p8BXAovd4BZfQrzGo= =5lze -----END PGP SIGNATURE----- --26m72jkaqtggitkz--