nss-certs@3.81: server certificate verification failed. CAfile: /gnu/store/…/ca-certificates.crt CRLfile: none

[zimoun <zimon.toutoune@gmail.com>]

Hi,

Well, using nss-certs@3.81, I get this failure,

--8<---------------cut here---------------start------------->8---
$ guix time-machine --commit=785fd09af0e161906e984944ddae363c384b66dd \
       -- show nss-certs | recsel -p version
version: 3.81

$ guix time-machine --commit=785fd09af0e161906e984944ddae363c384b66dd \
       -- shell -CN git nss-certs \
       -- git clone https://gitlab.in2p3.fr/reprovip/reprovip-guix nss-3.81
Cloning into 'nss-3.81'...
fatal: unable to access 'https://gitlab.in2p3.fr/reprovip/reprovip-guix/': server certificate verification failed. CAfile: /gnu/store/h51ffnnqqkydhvgmyd77fhswwcddlan9-profile/etc/ssl/certs/ca-certificates.crt CRLfile: none
--8<---------------cut here---------------end--------------->8---

but it does not happen when running nss-certs@3.71 instead,

--8<---------------cut here---------------start------------->8---
$ guix time-machine --commit=65cabb010e3388d10f9b25ec560bfcfab5f810d4 \
       -- show nss-certs | recsel -p version
version: 3.71

$ guix time-machine --commit=65cabb010e3388d10f9b25ec560bfcfab5f810d4 \
       -- shell -CN git nss-certs \
       -- git clone https://gitlab.in2p3.fr/reprovip/reprovip-guix nss-3.71
Cloning into 'nss-3.71'...
warning: redirecting to https://gitlab.in2p3.fr/reprovip/reprovip-guix.git/
remote: Enumerating objects: 303, done.        
remote: Counting objects: 100% (303/303), done.        
remote: Compressing objects: 100% (140/140), done.        
remote: Total 352 (delta 110), reused 267 (delta 89), pack-reused 49        
Receiving objects: 100% (352/352), 12.23 MiB | 22.01 MiB/s, done.
Resolving deltas: 100% (117/117), done.
--8<---------------cut here---------------end--------------->8---

Is it a bug in Guix nss-certs side?  Or on Gitlab server side?


Cheers,
simon