From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:34377) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1g165f-0001LB-Ph for guix-patches@gnu.org; Sat, 15 Sep 2018 04:38:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1g165a-0006EK-3R for guix-patches@gnu.org; Sat, 15 Sep 2018 04:38:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:36831) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1g165Z-0006Bf-SY for guix-patches@gnu.org; Sat, 15 Sep 2018 04:38:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1g165Z-0007pq-Ll for guix-patches@gnu.org; Sat, 15 Sep 2018 04:38:01 -0400 Subject: [bug#32530] [PATCH] gnu: octave: Fix CA certificate use. Resent-Message-ID: From: Marius Bakke In-Reply-To: <20180826004231.19350-1-kkebreau@posteo.net> References: <20180826004231.19350-1-kkebreau@posteo.net> Date: Sat, 15 Sep 2018 10:37:39 +0200 Message-ID: <87o9czqhpo.fsf@fastmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Kei Kebreau , 32530@debbugs.gnu.org --=-=-= Content-Type: text/plain Kei Kebreau writes: > * gnu/packages/maths.scm (octave)[arguments]: Add 'wrap-program' phase to wrap > Octave with the path to system CA certificates. > --- > gnu/packages/maths.scm | 8 +++++++- > 1 file changed, 7 insertions(+), 1 deletion(-) > > diff --git a/gnu/packages/maths.scm b/gnu/packages/maths.scm > index 3d571e8cc..b0caff0f5 100644 > --- a/gnu/packages/maths.scm > +++ b/gnu/packages/maths.scm > @@ -1417,7 +1417,13 @@ can solve two kinds of problems: > (string-append "Vmakeinfo_program = \"" > (assoc-ref inputs "texinfo") > "/bin/makeinfo\""))) > - #t))))) > + #t)) > + (add-after 'install 'wrap-program > + (lambda* (#:key outputs #:allow-other-keys) > + (let ((out (assoc-ref outputs "out"))) > + (wrap-program (string-append out "/bin/octave") > + '("CURLOPT_CAPATH" suffix ("/etc/ssl/certs"))) > + #t)))))) Instead of wrapping you can add a native-search-path for CURLOPT_CAPATH (as with CURL_CA_BUNDLE for `curl`). That way installing certificates to the profile should be sufficient. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAlucxNMACgkQoqBt8qM6 VPrkUQf/UeKImV8MyO52Lg9LTMhUMrPfwWSDTnydM6/5JwappyM5DB2S3kgS+IWE Dqm2//4J6uGYEF9VIGy3NMKJ9EubddUG3+0AaXiQppNyjaTyFPqGIV1tl1HpyhmO 0HyA/DEqMFS+w3eznwIMTWicKId8spodT/CqYWNFUO6Rmt2/+kQTnpuAusFeU4DN K+bRKV3ZF0GnLOQekesIfVH0zuTHd2jjLbbYhMYkcm73Vuwvk0RkRY4oE3Ue/0mE Nw6tU28pxAtm/KkJv0oy0PqvhWoDHHrNzkNAV25D75SXCp0b7mojMp+PRxJUraQS HxdF8AEr8PM7GTPi6YXVeojwRz2Xzw== =MhkP -----END PGP SIGNATURE----- --=-=-=--