Re: HELP needed with CA certificates! [PATCH] gnu: Add tup, Add pbpst.

[Leo Famulari <leo@famulari.name>]

On Fri, Sep 16, 2016 at 02:42:37PM +0000, ng0 wrote:
> Ricardo Wurmus <ricardo.wurmus@mdc-berlin.de> writes:
> 
> > ng0 <ng0@we.make.ritual.n0.is> writes:
> >
> >> Ludovic Courtès <ludo@gnu.org> writes:
> >>
> >>> Hi,
> >>>
> >>> ng0 <ng0@we.make.ritual.n0.is> skribis:
> >>>
> >>>>> The ‘nss-certs’ package provides X.509 certificates:
> >>>>>
> >>>>>   https://www.gnu.org/software/guix/manual/html_node/X_002e509-Certificates.html
> >>>>
> >>>> I commented nss-certs, enabled or disabled it made no difference to the
> >>>> resulting binary.
> >>>
> >>> You need to have ‘nss-certs’ installed, *and* set the environment
> >>> variables mentioned above (depending on whether you use OpenSSL, GnuTLS,
> >>> Git, etc.; for GnuTLS, I think there’s no such environment variable.)
> >>>
> >>> HTH!
> >>> Ludo’.
> >>
> >> Thanks.
> >>
> >> Can you be more specific on why it could fail when all of this is set in
> >> the user environment? I did all of this, and it still fails. environment
> >> values exported in my user profile, nss-certs installed in user profile
> >> and system wide, set nss-certs as an input of pbpst, still:
> >
> > What environment variables did you set?  The patch for pbpst is very
> > hard to read, so it’s not obvious what you tried.
> >
> > If this tool just shells out to “curl” then it might respect
> > “CURL_CA_BUNDLE” as per the Curl documentation.
> >
> > ~~ Ricardo
> 
> I had CURL_CA_BUNDLE set, in my profile. This is what I assume I need
> to do, I've done so and yet it failed. nss-certs is in my profile. I
> don't know what else I should try.
> 
> ng0@shadowwalker ~$ echo $CURL_CA_BUNDLE
> /home/ng0/.guix-profile/etc/ssl/certs/ca-certificates.crt

This looks related to the issues I'm having with the Darcs package.
Darcs uses libcurl, but can't find the certificates at runtime, despite
CURL_CA_BUNDLE being set correctly.