bug#35773: hexchat: unable to get local issuer certificate

bug#35773: hexchat: unable to get local issuer certificate

[Jeff Bauer]

I've installed the hexchat 2.14.2 package onto two
different Ubuntu systems (16.04, 18.04), and get the
following error when attempting to log onto freenode:

"Connection failed (unable to get local issuer certificate.? (20))"

There's no problem when I revert back to the official
distro version of hexchat.

I've also installed the 'le-certs' package, but it appears
that hexchat still cannot get the local cert.

Please let me know if there's any further information
I can provide.  Thanks.

-Jeff

bug#35773: hexchat: unable to get local issuer certificate

[Giovanni Biscuolo]

[-- Attachment #1: Type: text/plain, Size: 374 bytes --]

Hello Jeff,

Jeff Bauer <jbauer@rubic.com> writes:

[...]

> I've also installed the 'le-certs' package, but it appears
> that hexchat still cannot get the local cert.

AFAIU you nees nss-certs [1] Guix package

Please can you try installing it and report back if this works for you?

HTH! Gio'.

[...]

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

bug#35773: hexchat: unable to get local issuer certificate

[Jeff Bauer]

Giovanni,

Sorry, but the same problem with nss-certs installed.

-Jeff

On Fri, May 17, 2019 at 07:58:15PM +0200, Giovanni Biscuolo wrote:
> Hello Jeff,
>
> Jeff Bauer <jbauer@rubic.com> writes:
>
> [...]
>
> > I've also installed the 'le-certs' package, but it appears
> > that hexchat still cannot get the local cert.
>
> AFAIU you nees nss-certs [1] Guix package
>
> Please can you try installing it and report back if this works for you?
>
> HTH! Gio'.
>
> [...]
>
> --
> Giovanni Biscuolo
>
> Xelera IT Infrastructures

bug#35773: hexchat: unable to get local issuer certificate

[Giovanni Biscuolo]

[-- Attachment #1: Type: text/plain, Size: 696 bytes --]

Hello Jeff,

Jeff Bauer <jbauer@rubic.com> writes:

> Sorry, but the same problem with nss-certs installed.

Sorry I gave you a partial solution, the full solition is to add the
documented variables to your env, please read:

https://www.gnu.org/software/guix/manual/en/html_node/X_002e509-Certificates.html

Adding

--8<---------------cut here---------------start------------->8---

export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"

--8<---------------cut here---------------end--------------->8---

should work

HTH! Gio'.

[...]

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

bug#35773: hexchat: unable to get local issuer certificate

[Jeff Bauer]

Giovanni,

Thanks, that does the trick!  For the record,
this is what I've put in my .bashrc as a check
if I change environments:

# Guix Profile
GUIX_PROFILE="$HOME/.guix-profile"
if [ -d $GUIX_PROFILE ] || [ -h $GUIX_PROFILE ] ; then
    export GUIX_PROFILE
    export GUIX_LOCPATH=$GUIX_PROFILE/lib/locale/
    export SSL_CERT_DIR="$GUIX_PROFILE/etc/ssl/certs"
    export SSL_CERT_FILE="$GUIX_PROFILE/etc/ssl/certs/ca-certificates.crt"
    if [ ! -f $SSL_CERT_FILE ] ; then
        echo "Missing nss-certs: $SSL_CERT_FILE"
    fi
    source $GUIX_PROFILE/etc/profile
fi


-Jeff

On Sat, May 18, 2019 at 09:24:05AM +0200, Giovanni Biscuolo wrote:
> Hello Jeff,
>
> Jeff Bauer <jbauer@rubic.com> writes:
>
> > Sorry, but the same problem with nss-certs installed.
>
> Sorry I gave you a partial solution, the full solition is to add the
> documented variables to your env, please read:
>
> https://www.gnu.org/software/guix/manual/en/html_node/X_002e509-Certificates.html
>
> Adding
>
> --8<---------------cut here---------------start------------->8---
>
> export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
> export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
>
> --8<---------------cut here---------------end--------------->8---
>
> should work
>
> HTH! Gio'.
>
> [...]
>
> --
> Giovanni Biscuolo
>
> Xelera IT Infrastructures

bug#35773: hexchat: unable to get local issuer certificate

[Royce Strange]

Hello.

Giovanni Biscuolo helped Jeff Bauer fix his issue.

Closing.