From mboxrd@z Thu Jan 1 00:00:00 1970 From: Maxim Cournoyer Subject: bug#26948: gnutls errors on multiple guix commands Date: Mon, 15 May 2017 22:19:26 -0700 Message-ID: <8737c51e6r.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:39695) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dAWRk-0007DN-6G for bug-guix@gnu.org; Tue, 16 May 2017 02:59:05 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dAWRj-0003rt-2a for bug-guix@gnu.org; Tue, 16 May 2017 02:59:04 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:44670) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dAWRi-0003rp-Vd for bug-guix@gnu.org; Tue, 16 May 2017 02:59:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dAWRi-0000aL-H0 for bug-guix@gnu.org; Tue, 16 May 2017 02:59:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([2001:4830:134:3::10]:39557) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dAWQa-0007BB-Qy for bug-guix@gnu.org; Tue, 16 May 2017 02:57:54 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dAWQZ-0003RI-Pg for bug-guix@gnu.org; Tue, 16 May 2017 02:57:52 -0400 Received: from mail-pf0-x234.google.com ([2607:f8b0:400e:c00::234]:34227) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dAWQZ-0003R9-Ip for bug-guix@gnu.org; Tue, 16 May 2017 02:57:51 -0400 Received: by mail-pf0-x234.google.com with SMTP id 9so35613259pfj.1 for ; Mon, 15 May 2017 23:57:50 -0700 (PDT) Received: from apteryx ([2601:647:4a02:70e3:c2f8:daff:fe5d:2f2f]) by smtp.gmail.com with ESMTPSA id a87sm16570140pfj.50.2017.05.15.23.57.49 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Mon, 15 May 2017 23:57:49 -0700 (PDT) List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 26948@debbugs.gnu.org Hello Guix! This problem has been ongoing for some time. It prevents me from using things such as "guix lint" or "guix import" (seems to be related to certs and gnutls). I thought a guix system reconfigure (I'm on GuixSD) would fix it but it hasn't, even after rebooting the system. It is reminiscent of bug#25200, but there doesn't appear to be any dangling symlinks this time around. The nss-certs package is present in my operating system declaration, and the /etc/ssl/certs directory is populated ('/etc/ssl' is a symbolic link pointing to /run/current-system/profile/etc/ssl). SSL_CERT_DIR is set to "/etc/ssl/certs" SSL_CERT_FILE is set to "/etc/ssl/certs/ca-certificates.crt" A couple examples of how things break: * guix lint --8<---------------cut here---------------start------------->8--- guix lint emacs Backtrace:macs@25.2 [cve]... 9 (primitive-load "/gnu/store/80k8kz7qk9palbn0ccw7y3fgym8&") In guix/ui.scm: 1257:8 8 (run-guix-command _ . _) In srfi/srfi-1.scm: 640:9 7 (for-each # &) In guix/scripts/lint.scm: 982:4 6 (run-checkers _ _) In srfi/srfi-1.scm: 640:9 5 (for-each # &) In guix/scripts/lint.scm: 805:4 4 (check-vulnerabilities _) 800:9 3 (_ _) In unknown file: 2 (force #) In guix/scripts/lint.scm: 789:24 1 (_) In ice-9/boot-9.scm: 837:9 0 (catch srfi-34 # &) ice-9/boot-9.scm:837:9: In procedure catch: ice-9/boot-9.scm:837:9: Throw to key `gnutls-error' with args `(# set-certificate-credentials-x509-trust-file!)'. --8<---------------cut here---------------end--------------->8--- * Using guix import --8<---------------cut here---------------start------------->8--- guix import pypi flask-migrate Backtrace: 12 (primitive-load "/gnu/store/80k8kz7qk9palbn0ccw7y3fgym8&") In guix/ui.scm: 1257:8 11 (run-guix-command _ . _) In guix/scripts/import.scm: 114:11 10 (guix-import . _) In guix/scripts/import/pypi.scm: 84:19 9 (guix-import-pypi . _) In guix/import/pypi.scm: 279:17 8 (pypi->guix-package _) In ice-9/boot-9.scm: 837:9 7 (catch srfi-34 # &) In guix/import/json.scm: 32:17 6 (_) In guix/http-client.scm: 239:25 5 (http-fetch _ #:port _ #:text? _ #:buffered? _ # _ # _ # &) In guix/build/download.scm: 520:4 4 (open-connection-for-uri _ #:timeout _ # _) 391:34 3 (tls-wrap # "pypi.python.org" # &) 308:4 2 (make-credendials-with-ca-trust-files _) In srfi/srfi-1.scm: 640:9 1 (for-each # &) In unknown file: 0 (set-certificate-credentials-x509-trust-file! # &) ERROR: In procedure set-certificate-credentials-x509-trust-file!: ERROR: Throw to key `gnutls-error' with args `(# set-certificate-credentials-x509-trust-file!)'. --8<---------------cut here---------------end--------------->8--- * Using lint from emacs-guix --8<---------------cut here---------------start------------->8--- scheme@(guile-user)> ,m (emacs-guix) scheme@(emacs-guix)> (guix-command "lint" "grub") ;;; Failed to autoload make-session in (gnutls): ;;; ERROR: missing interface for module (gnutls) guix/scripts/lint.scm:466:16: In procedure validate-uri: guix/scripts/lint.scm:466:16: In procedure module-lookup: Unbound variable: make-session Entering a new prompt. Type `,bt' for a backtrace or `,q' to continue. scheme@(emacs-guix) [1]> ,bt In ice-9/boot-9.scm: 837:9 5 (catch quit # # _) In guix/ui.scm: 1257:8 4 (run-guix-command _ . _) In srfi/srfi-1.scm: 640:9 3 (for-each # ("grub")) In guix/scripts/lint.scm: 982:4 2 (run-checkers # _) In srfi/srfi-1.scm: 640:9 1 (for-each # _) In guix/scripts/lint.scm: 466:16 0 (validate-uri #< scheme: https userinfo: #f host: "www.gnu.org" port: #f path: "/software/grub/" query: #f fragment: #f> # &) --8<---------------cut here---------------end--------------->8--- Any pointer welcome. Maxim