‘guix authenticate’: Throw to key `gcry-error' with args `(536871113)'.

‘guix authenticate’: Throw to key `gcry-error' with args `(536871113)'.

[Nikita Karetnikov]

[-- Attachment #1: Type: text/plain, Size: 1221 bytes --]

The keypair was created this way:

$ openssl genrsa -out ./cache-key.sec 2048
$ openssl rsa -in ./cache-key.sec -pubout > ./cache-key.pub

All the tests pass.  What’s wrong?

$ guix authenticate rsautl -sign -inkey cache-key.sec -in 3r2n9zm3kxb28klpzgarjxj8x3y3y6wf.narinfo.hash
Backtrace:
In ice-9/boot-9.scm:
 157: 11 [catch #t #<catch-closure 8ed5f30> ...]
In unknown file:
   ?: 10 [apply-smob/1 #<catch-closure 8ed5f30>]
In ice-9/boot-9.scm:
  63: 9 [call-with-prompt prompt0 ...]
In ice-9/eval.scm:
 432: 8 [eval # #]
In ice-9/boot-9.scm:
2320: 7 [save-module-excursion #<procedure 8e46e60 at ice-9/boot-9.scm:3961:3 ()>]
3966: 6 [#<procedure 8e46e60 at ice-9/boot-9.scm:3961:3 ()>]
1645: 5 [%start-stack load-stack ...]
1650: 4 [#<procedure 8ed6960 ()>]
In unknown file:
   ?: 3 [primitive-load "/usr/local/bin/guix"]
In guix/ui.scm:
 593: 2 [run-guix-command authenticate "rsautl" ...]
In guix/scripts/authenticate.scm:
  60: 1 [guix-authenticate "rsautl" "-sign" ...]
In ice-9/boot-9.scm:
 793: 0 [call-with-input-file "cache-key.sec" ...]

ice-9/boot-9.scm:793:17: In procedure call-with-input-file:
ice-9/boot-9.scm:793:17: Throw to key `gcry-error' with args `(536871113)'.

[-- Attachment #2: Type: application/pgp-signature, Size: 835 bytes --]

Re: ‘guix authenticate’: Throw to key `gcry-error' with args `(536871113)'.

[Ludovic Courtès]

Nikita Karetnikov <nikita@karetnikov.org> skribis:

> The keypair was created this way:
>
> $ openssl genrsa -out ./cache-key.sec 2048
> $ openssl rsa -in ./cache-key.sec -pubout > ./cache-key.pub
>
> All the tests pass.  What’s wrong?
>
> $ guix authenticate rsautl -sign -inkey cache-key.sec -in 3r2n9zm3kxb28klpzgarjxj8x3y3y6wf.narinfo.hash

[...]

> In guix/scripts/authenticate.scm:
>   60: 1 [guix-authenticate "rsautl" "-sign" ...]
> In ice-9/boot-9.scm:
>  793: 0 [call-with-input-file "cache-key.sec" ...]
>
> ice-9/boot-9.scm:793:17: In procedure call-with-input-file:
> ice-9/boot-9.scm:793:17: Throw to key `gcry-error' with args `(536871113)'.

‘guix authenticate’ expects cache-key.sec to be a key in “canonical
sexp” format, like in tests/signing-key.sec.  That’s why it barfs here.

IOW, the idea is that it’s a drop-in replacement for ‘openssl’ in terms
of command-line handling, but what happens behind is very different (see
<https://lists.nongnu.org/archive/html/guix-devel/2013-12/msg00135.html>
and related messages.)

(The command-line compatibility requirement stems from the fact that for
now I want to avoid Guix-specific modifications to the daemon.)

HTH,
Ludo’.