From mboxrd@z Thu Jan 1 00:00:00 1970 From: Dennis Mungai Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Date: Tue, 10 May 2016 16:36:05 +0300 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:40309) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b07qT-0001uO-F6 for bug-guix@gnu.org; Tue, 10 May 2016 09:37:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b07qQ-0007c0-6N for bug-guix@gnu.org; Tue, 10 May 2016 09:37:05 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:32946) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b07qQ-0007bu-2f for bug-guix@gnu.org; Tue, 10 May 2016 09:37:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1b07qP-0004ku-KG for bug-guix@gnu.org; Tue, 10 May 2016 09:37:01 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ricardo Wurmus Cc: 23504@debbugs.gnu.org Hmmm, thanks ;-) Perhaps one could set the installation of nss-certs as: 1. A dependency to git, and 2. To print out the environment variable export GTI_SSL_CAPATH once nss-certs is installed. I have seen packages such as gtk3 on guix trigger similar variables to be set when they are installed and loaded from a specific guix profile, as such: guix package -p ~/some-profile -i -some-gtk3-app And then this would be recommended when calling up guix package -p ~/some-profile --search-paths Taken from the email above as an example: export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" So yeah, it can be done ;-) On 10 May 2016 at 16:11, Ricardo Wurmus wrote: > > Dennis Mungai writes: > >> Hello there, >> >> I'm using git 2.7.4 from a guix profile, and here is my current environment: >> >> guix package -p ~/opt/guix-build-system --search-paths >> warning: failed to install locale: Invalid argument >> export PATH="/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-build-system/sbin" >> export XDG_DATA_DIRS="/home/lin/opt/guix-build-system/share" >> export GUIX_GTK3_PATH="/home/lin/opt/guix-build-system/lib/gtk-3.0" >> export INFOPATH="/home/lin/opt/guix-build-system/share/info" >> export PKG_CONFIG_PATH="/home/lin/opt/guix-build-system/lib/pkgconfig" >> export GUILE_LOAD_COMPILED_PATH="/home/lin/opt/guix-build-system/lib/guile/2.0/ccache" >> export C_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" >> export CPLUS_INCLUDE_PATH="/home/lin/opt/guix-build-system/include" >> export LIBRARY_PATH="/home/lin/opt/guix-build-system/lib" >> export ACLOCAL_PATH="/home/lin/opt/guix-build-system/share/aclocal" >> >> which env returns: >> >> which env >> /home/lin/opt/guix-build-system/bin/env >> >> Now, with git clone example over HTTPS: >> >> git clone --branch gn-latest https://github.com/genenetwork/guix-bioinformatics >> Cloning into 'guix-bioinformatics'... >> fatal: unable to access >> 'https://github.com/genenetwork/guix-bioinformatics/': server >> certificate verification failed. CAfile: none CRLfile: none >> >> The system git does not present such an error. >> >> What could be wrong with my setup? Missing certificates? > > Please try this: > > export GIT_SSL_CAPATH=$HOME/.guix-profile/etc/ssl/certs > > Assuming that nss-certs has been installed into $HOME/.guix-profile this > should be enough to make it work. > > I wonder how we can make it easier to tell the user that this > environment variable must be set. > > ~~ Ricardo