From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id OMKiNYXd0mZkJwAAqHPOHw:P1 (envelope-from ) for ; Sat, 31 Aug 2024 09:08:22 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id OMKiNYXd0mZkJwAAqHPOHw (envelope-from ) for ; Sat, 31 Aug 2024 11:08:21 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=TI9mWKQi; dkim=fail ("headers rsa verify failed") header.d=posteo.net header.s=2017 header.b=YL795u11; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (strict), DKIM not aligned (strict)" header.from=posteo.net (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1725095301; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=qDgdmeZzrIxNiIyzD11L/xCB89iqscIf1R8cV5/eoi4=; b=YSRkKSyRbreTwm0dh6OC3i73m65REgzihUup2Wx9q2gMpaFkahn5i0S26bhYX3U3dxEBzB rEBD/ACkxEOblfMxampbkWFeAHHz7tVlRl8ICfMiV0pv1rhUKtoQDw5h/RgYB6VF/OZGv6 3IW53Mmy2VDuKN0HBf2gtYVAgc6UKRzhsTNwsH5h2fZ71PDTiQVTJ2Q+Me9LffplO9a1SJ /2bvB4dynH8/QgQpdzAcg9VHZeLD5tODlnGWPu60pBw+4rTf4Q/uNtke+RFq0phSwfANHh 0aILtyiCdNkbOZuK2RvuNChZTwoxKbSdPPlso17henNHgbeaWx2lspNIMoPMHg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=TI9mWKQi; dkim=fail ("headers rsa verify failed") header.d=posteo.net header.s=2017 header.b=YL795u11; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (strict), DKIM not aligned (strict)" header.from=posteo.net (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1725095301; a=rsa-sha256; cv=none; b=geEcmp0JhsJYG9K4PLThvcu0leA7AH16OeXLDzGgWUa7MnPehX5LxmGp2lfswIIRGs6QBY yR2r51egukwlYb7ntAnr24XwRtVgTBXyGF0caSJM3hhrCgkMebD4ks19X1nvfD7Y6Xfe8K 68jahcqotJ9JpFyLvG9fbqk4PHxWr0FPF/K79qidDJL4M6TQ2tHR/8hGF9nr/ZlbclXrXU 0Zl0S5REPeAac9vHZJIvSDgwHwIGpomV8LYGgNJTPgdzWHZCxuS1BoQjI3DdNWYpCB7nGZ Fmbcm/80jwtDdCnyjL63x8m1r0NQH5Wf5LhInlRkYWOo48xWwtfO/O8CKuZP5Q== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 9BC72B842 for ; Sat, 31 Aug 2024 11:08:20 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1skK5W-0002WX-TL; Sat, 31 Aug 2024 05:08:06 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1skK5U-0002W5-Nh for guix-patches@gnu.org; Sat, 31 Aug 2024 05:08:04 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1skK5U-0003tv-Ek for guix-patches@gnu.org; Sat, 31 Aug 2024 05:08:04 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=In-Reply-To:From:References:MIME-Version:Date:To:Subject; bh=qDgdmeZzrIxNiIyzD11L/xCB89iqscIf1R8cV5/eoi4=; b=TI9mWKQiBMLMnFYw1nlLNwzI7nBrRelT+vKOsaIH83B9CHGcFtVmGrNm4GEe2x2rvMRZaCRwL0VI3cFt40lg8A32Ku9QfT83x+Xc1/utAXPvP+WYqhdYy5gXfVJP9RWKH4n62V44dR/0BzoH46X1RVwg++X2hUEiVzl/q0vWzS5kiZY2gTaEXYR2wrWNZ3k/O6eOufTLgjXyFjzXDXYQ0MnTByr1F5uu+3ebveK/pqkRIx5JsdkxlIgGqKMLuq06E7vJ3fk5aH4na1zeRoHKZWUH3xhoX7Ha6e5CXXC2vOnCDz+/zScfldMsGZf3jnhm1a5a+Px6+55Jx48nSNpxwg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1skK6Q-0008Al-8c for guix-patches@gnu.org; Sat, 31 Aug 2024 05:09:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#72851] [PATCH v2 4/6] gnu: pidgin: Use system ssl certs. Resent-From: Dariqq Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 31 Aug 2024 09:09:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 72851 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Liliana Marie Prikler , 72851@debbugs.gnu.org Cc: me@tobias.gr Received: via spool by 72851-submit@debbugs.gnu.org id=B72851.172509533831403 (code B ref 72851); Sat, 31 Aug 2024 09:09:02 +0000 Received: (at 72851) by debbugs.gnu.org; 31 Aug 2024 09:08:58 +0000 Received: from localhost ([127.0.0.1]:53923 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1skK6L-0008AQ-Tr for submit@debbugs.gnu.org; Sat, 31 Aug 2024 05:08:58 -0400 Received: from mout01.posteo.de ([185.67.36.65]:35303) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1skK6I-0008A3-C1 for 72851@debbugs.gnu.org; Sat, 31 Aug 2024 05:08:55 -0400 Received: from submission (posteo.de [185.67.36.169]) by mout01.posteo.de (Postfix) with ESMTPS id 2F6D1240027 for <72851@debbugs.gnu.org>; Sat, 31 Aug 2024 11:07:47 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.net; s=2017; t=1725095267; bh=dZ2cx0fzytOgPAdOmoCkyS3DwXvTvgpn5l0mzKzZgsY=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:From:Content-Type: Content-Transfer-Encoding:From; b=YL795u11L60e3Mh2c4klpNXCJhepoJIN06QCWRSTt7k6BeMU3Q/lWCzAYXYnySpvz vFWuAHQexf3L8cclw+kvVk/cBIiaX9zTCKxrqxaMmawYDp3+3O8hdzZjKa2ILnlP50 bTh9nZ6Nh3ObuZVNmbnQ+2ydq9thF/0itpofflGJL9IezfoxNcSrRVg8x3ZQNGXrC7 yvW2+UfrE+gJz6OrHH1pMBGv/ccGHTRWh9MzZNlhAUcvO3K45TZoymS7ohEGScAuTb ZmhXYpNJI2q7k6/M6r9NU0qSm5paA9ImEIAeiX6ucSIYVQLguc2HG/i5Djev/wEttM FSZ2AlfH63UPQ== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4Wwq0y1byjz6twQ; Sat, 31 Aug 2024 11:07:46 +0200 (CEST) Message-ID: Date: Sat, 31 Aug 2024 09:07:36 +0000 MIME-Version: 1.0 References: <22922127775e781edc3d75ec4461171cde609a1c.1724920170.git.dariqq@posteo.net> <581ec07463319c65928d6bf27a9131a228769d03.camel@gmail.com> Content-Language: en-US From: Dariqq In-Reply-To: <581ec07463319c65928d6bf27a9131a228769d03.camel@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -5.72 X-Migadu-Queue-Id: 9BC72B842 X-Migadu-Scanner: mx10.migadu.com X-Migadu-Spam-Score: -5.72 X-TUID: qsmmy6gitgP1 Hi Liliana, On 30.08.24 22:09, Liliana Marie Prikler wrote: > Am Donnerstag, dem 29.08.2024 um 08:35 +0000 schrieb Dariqq: >> If not present pidgin bundles its own certs otherwise. > This should probably be a code comment or none at all. > >> * gnu/packages/messaging.scm (pdigin) [inputs]: Add nss-certs. > Note: pdgin, not pidgin. >> [#:configure-flags]: Add  --with-system-ssl-certs >> >> Change-Id: I14ec36002b31b4de52871f065bd18c9d30eca275 >> --- >>  gnu/packages/messaging.scm | 5 +++++ >>  1 file changed, 5 insertions(+) >> >> diff --git a/gnu/packages/messaging.scm b/gnu/packages/messaging.scm >> index 6b3dff2152..4992db1bee 100644 >> --- a/gnu/packages/messaging.scm >> +++ b/gnu/packages/messaging.scm >> @@ -74,6 +74,7 @@ (define-module (gnu packages messaging) >>    #:use-module (gnu packages bison) >>    #:use-module (gnu packages boost) >>    #:use-module (gnu packages check) >> +  #:use-module (gnu packages certs) >>    #:use-module (gnu packages code) >>    #:use-module (gnu packages compression) >>    #:use-module (gnu packages cpp) >> @@ -1002,6 +1003,7 @@ (define-public pidgin >>             network-manager >>             nspr >>             nss >> +           nss-certs >>             pango >>             perl >>             python-2 >> @@ -1024,6 +1026,9 @@ (define-public pidgin >>          "--disable-gevolution" >>          "--enable-cap" >>          "--enable-cyrus-sasl" >> +        (string-append "--with-system-ssl-certs=" >> +                       (assoc-ref %build-inputs "nss-certs") >> +                       "/etc/ssl/certs") > If pidgin bundles certificates, we should also drop them with a > snippet. Removing the share/ca-certs/ dir in the source breaks the build system. pidign/libpurple only installs and uses the bundled certs if the --with-system-ssl-certs is *not* given. > A runtime option would still be preferable – search for > SSL_CERT_DIR. > I am not motivated enough to try to patch pidgin to make this work, when all I initially wanted is a version that is not 3 years out of date. > Cheers Have a nice day