trouble with 'guix import hackage'

trouble with 'guix import hackage'

[Scott N. Walck]

Hi folks,

I'm so excited about Guix!  It's awesome!  I am trying to use
'guix import hackage' and I'm running into problems.  I tried an
example from the manual, shown below.  It looks like there is a
problem with certificate verification at hackage.haskell.org
(although I'm not sure about this, because I got a similar error
using 'guix download' when I merely misspelled the file name).  I
thought perhaps I could use --no-check-certificate, but it
appears that option only works with 'guix download'.  I would
appreciate any ideas.

Thanks,

Scott


$ guix import hackage mtl@2.1.3.1
Backtrace:
          11 (apply-smob/1 #<catch-closure 176c680>)
In ice-9/boot-9.scm:
    705:2 10 (call-with-prompt _ _ #<procedure default-prompt-handler (k proc)>)
In ice-9/eval.scm:
    619:8  9 (_ #(#(#<directory (guile-user) 1824140>)))
In guix/ui.scm:
  1501:12  8 (run-guix-command _ . _)
In guix/scripts/import.scm:
   114:11  7 (guix-import . _)
In guix/scripts/import/hackage.scm:
   110:16  6 (guix-import-hackage . _)
In guix/import/hackage.scm:
   259:24  5 (hackage->guix-package "mtl@2.1.3.1" #:include-test-dependencies? _ #:port _ #:cabal-environment _)
In ice-9/boot-9.scm:
    829:9  4 (catch srfi-34 #<procedure 289f2e0 at guix/import/hackage.scm:119:2 ()> #<procedure 7f4d1d1fc7d0 at guix/import/hacka…> …)
In guix/import/hackage.scm:
   124:19  3 (_)
In guix/http-client.scm:
    88:25  2 (http-fetch _ #:port _ #:text? _ #:buffered? _ #:keep-alive? _ #:verify-certificate? _ #:headers _)
In guix/build/download.scm:
    398:4  1 (open-connection-for-uri _ #:timeout _ #:verify-certificate? _)
    296:6  0 (tls-wrap #<closed: file 2bb71c0> _ #:verify-certificate? _)

guix/build/download.scm:296:6: In procedure tls-wrap:
X.509 certificate of 'hackage.haskell.org' could not be verified:
  insecure-algorithm
  signer-not-found
  invalid

$ guix import hackage mtl@2.1.3.1 --no-check-certificate
guix import: error: no-check-certificate: unrecognized option

Re: trouble with 'guix import hackage'

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 848 bytes --]

On Mon, Apr 02, 2018 at 04:10:54PM -0400, Scott N. Walck wrote:
> I'm so excited about Guix!  It's awesome!  I am trying to use
> 'guix import hackage' and I'm running into problems.

Okay :)

> $ guix import hackage mtl@2.1.3.1

This works for me on my Debian system...

> guix/build/download.scm:296:6: In procedure tls-wrap:
> X.509 certificate of 'hackage.haskell.org' could not be verified:
>   insecure-algorithm
>   signer-not-found
>   invalid

Did you try following the instructions related to X.509 Certificate
setup yet?

https://www.gnu.org/software/guix/manual/html_node/Application-Setup.html#X_002e509-Certificates-1

Those error messages suggest that `guix import` can't find the X.509
certificate store, which suggests that the cert store is either not
installed or the relevant environment variables are unset or set
incorrectly.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]