From mboxrd@z Thu Jan 1 00:00:00 1970 From: Maxim Cournoyer Subject: bug#26948: gnutls errors on multiple guix commands Date: Sun, 28 May 2017 14:00:59 -0700 Message-ID: <87o9ucu1t3.fsf@gmail.com> References: <8737c51e6r.fsf@gmail.com> <87shk3y74g.fsf@gnu.org> <8737btieie.fsf@gmail.com> <87vaoovvvz.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:60339) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dF5Qv-00070i-Av for bug-guix@gnu.org; Sun, 28 May 2017 17:09:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dF5Qs-0007bT-5b for bug-guix@gnu.org; Sun, 28 May 2017 17:09:05 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:39469) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dF5Qs-0007bP-1d for bug-guix@gnu.org; Sun, 28 May 2017 17:09:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dF5Qr-000218-QZ for bug-guix@gnu.org; Sun, 28 May 2017 17:09:01 -0400 In-Reply-To: <8737c51e6r.fsf@gmail.com> Sender: "Debbugs-submit" Resent-Message-ID: List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 26948@debbugs.gnu.org Hi Ludovic, ludo@gnu.org (Ludovic Court=C3=A8s) writes: > Hi Maxim, > > Maxim Cournoyer skribis: > >> It seems that the problem is caused by the file: >> "/etc/ssl/certs/AC_Ra\303\255z_Certic\303\241mara_S.A.:2.15.7.126.82.147= .123.224.21.227.87.240.105.140.203.236.12.p". > > Indeed. > >> The strange thing is that it shouldn't even get into the `files' >> variable since we are scanning for files ending with a ".pem" suffix. >> >> ls /etc/ssl/certs/AC*2.15.7.126* >> /etc/ssl/certs/AC_Raz_Certicmara_S.A.:2.15.7.126.82.147.123.224.21.227.8= 7.240.105.140.203.236.12.pem >> >> >> It looks like I have a locale problem? In my operating-system >> definition, I'm using (locale "en_US.UTF-8") and the locale-definitions >> field is not set (which means it's using %DEFAULT-LOCALE-DEFINITIONS). I >> also have the following installed in my user profile: >> >> guix package -I locale >> glibc-locales 2.25 out /gnu/store/2d97vjjx23w3bhwp4sbylwcx6l5fy= 8g2-glibc-locales-2.25 >> >> >> Finally, >> >> set | grep LOC >> GUIX_LOCPATH=3D/run/current-system/locale >> XTERM_LOCALE=3Den_US.UTF-8 > > Does the 'guix' command say 'failed to install locale'? It probably > does, which explains why it fails to decode the file name. No, it doesn't! > Strangely that file name has question marks instead of the non-ASCII > characters on my GuixSD system: > > $ ls -l /etc/ssl/certs/*Certi*mara* > lrwxrwxrwx 8 root root 162 Jan 1 1970 '/etc/ssl/certs/AC_Ra?z_Certic?ma= ra_S.A.:2.15.7.126.82.147.123.224.21.227.87.240.105.140.203.236.12.pem' -> = '/gnu/store/3ql0vilc0zv6ra42ghi04787vrg6bb71-nss-certs-3.30.2/etc/ssl/certs= /AC_Ra?z_Certic?mara_S.A.:2.15.7.126.82.147.123.224.21.227.87.240.105.140.2= 03.236.12.pem' Hmm. That is strange. It seems like you also have a locale problem, but that it is handled in a way that doesn't break nss-certs? > but the initial problem seems to be in nss-certs itself. > > What does this report for you: > > guix package -p /run/current-system/profile -I nss-cert It gives me: --8<---------------cut here---------------start------------->8--- $ guix package -p /run/current-system/profile -I nss-cert nss-certs 3.30.2 out /gnu/store/3ql0vilc0zv6ra42ghi04787vrg6bb71-nss-certs-3.30.2 --8<---------------cut here---------------end--------------->8--- >> I would have liked to exercise the >> `make-credendials-with-ca-trust-files' function to debug but there's a >> `make-certificate-credentials' function called which I coudln't source >> (where does it come from? Doing C-c . u in Geiser didn't help making it >> visible, as did grepping the Guix sources for its definition) > > These procedures come from (gnutls). They're written in C. > Thanks for the information. I'll see if I can debug it further. Maxim