From: ludo@gnu.org (Ludovic Courtès)
To: Dennis Mungai <dmngaie@gmail.com>
Cc: 23504@debbugs.gnu.org
Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources
Date: Tue, 10 May 2016 15:38:57 +0200 [thread overview]
Message-ID: <87a8jyghhq.fsf@gnu.org> (raw)
In-Reply-To: <CAKKYfmFnUHTp_mKKw6YrQtT8m7D-ipyaz+ZtZ_60aNAm58nh7g@mail.gmail.com> (Dennis Mungai's message of "Tue, 10 May 2016 15:30:22 +0300")
Dennis Mungai <dmngaie@gmail.com> skribis:
> I'm using git 2.7.4 from a guix profile, and here is my current environment:
>
> guix package -p ~/opt/guix-build-system --search-paths
> warning: failed to install locale: Invalid argument
> export PATH="/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-build-system/sbin"
> export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share"
> export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0"
> export INFOPATH="/home/lin/opt/guix-build-system/share/info"
> export PKG_CONFIG_PATH="/home/lin/opt/guix-build-system/lib/pkgconfig"
> export GUILE_LOAD_COMPILED_PATH="/home/lin/opt/guix-build-system/lib/guile/2.0/ccache"
> export C_INCLUDE_PATH="/home/lin/opt/guix-build-system/include"
> export CPLUS_INCLUDE_PATH="/home/lin/opt/guix-build-system/include"
> export LIBRARY_PATH="/home/lin/opt/guix-build-system/lib"
> export ACLOCAL_PATH="/home/lin/opt/guix-build-system/share/aclocal"
>
> which env returns:
>
> which env
> /home/lin/opt/guix-build-system/bin/env
>
> Now, with git clone example over HTTPS:
>
> git clone --branch gn-latest https://github.com/genenetwork/guix-bioinformatics
> Cloning into 'guix-bioinformatics'...
> fatal: unable to access
> 'https://github.com/genenetwork/guix-bioinformatics/': server
> certificate verification failed. CAfile: none CRLfile: none
>
> The system git does not present such an error.
>
> What could be wrong with my setup? Missing certificates?
>
> At the moment, I've installed the nss-certs package hoping it would be
> a workaround as these are Mozilla certs, but to no avail.
I think you also need to set the ‘GIT_SSL_CAINFO’ environment variable.
For instance:
$ guix package -i nss-certs
$ export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
$ export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
$ export GIT_SSL_CAINFO="$SSL_CERT_FILE"
Can you confirm?
Thanks,
Ludo’.
next prev parent reply other threads:[~2016-05-10 13:40 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-05-10 12:30 bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Dennis Mungai
2016-05-10 13:11 ` Ricardo Wurmus
2016-05-10 13:36 ` Dennis Mungai
2016-05-11 22:07 ` ng0
2016-05-10 13:38 ` Ludovic Courtès [this message]
2016-05-10 13:46 ` Dennis Mungai
2016-05-11 8:10 ` Dennis Mungai
2016-05-11 8:16 ` Dennis Mungai
2016-05-11 9:02 ` Ludovic Courtès
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://guix.gnu.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87a8jyghhq.fsf@gnu.org \
--to=ludo@gnu.org \
--cc=23504@debbugs.gnu.org \
--cc=dmngaie@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).