From mboxrd@z Thu Jan 1 00:00:00 1970 From: swedebugia Subject: bug#33272: guix refresh/download backtrace error when missing nss-certs Date: Mon, 5 Nov 2018 21:39:15 +0100 Message-ID: References: <20181105202650.GB19298@jasmine.lan> Mime-Version: 1.0 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:48470) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gJlfN-000143-Bs for bug-guix@gnu.org; Mon, 05 Nov 2018 15:40:10 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gJlfJ-0005xd-OR for bug-guix@gnu.org; Mon, 05 Nov 2018 15:40:09 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:59671) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gJlfG-0005tW-Tr for bug-guix@gnu.org; Mon, 05 Nov 2018 15:40:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1gJlfG-0002db-MA for bug-guix@gnu.org; Mon, 05 Nov 2018 15:40:02 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <20181105202650.GB19298@jasmine.lan> Content-Language: en-US List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Leo Famulari , 33272@debbugs.gnu.org Hi On 2018-11-05 21:26, Leo Famulari wrote: > On Mon, Nov 05, 2018 at 12:16:08PM +0100, swedebugia wrote: > IMO a better solution is to catch the error and print an informative > message. Already, the error message at the end is coming from Guix, but > we should hide the backtrace and add a hint towards a solution. > > I think handling the TLS error gracefully is orthogonal to whether or > not nss-certs is installed. Agreed. > > There are other X.509 certificate collections available on the systems > that Guix supports, and even some Guix packages use their own > collections. Also, programs that need to look up certificates tend to > find them via environment variables, so if one wanted to use nss-certs, > it's not enough just to install it. > > https://www.gnu.org/software/guix/manual/en/html_node/X_002e509-Certificates.html Sounds like a good idea. How do we catch the error? -- Cheers Swedebugia