From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id wLYXEnDeWWHbBAEAgWs5BA (envelope-from ) for ; Sun, 03 Oct 2021 18:46:40 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id GE+zDXDeWWEnagAAbx9fmQ (envelope-from ) for ; Sun, 03 Oct 2021 16:46:40 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 7EC1217AA0 for ; Sun, 3 Oct 2021 18:46:39 +0200 (CEST) Received: from localhost ([::1]:52858 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mX4dK-0000dT-4s for larch@yhetil.org; Sun, 03 Oct 2021 12:46:38 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:45886) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mX4c6-0000ZF-GX for help-guix@gnu.org; Sun, 03 Oct 2021 12:45:22 -0400 Received: from freeshell.de ([2a01:4f8:231:482b::2]:45436) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mX4c3-0001Dg-PR for help-guix@gnu.org; Sun, 03 Oct 2021 12:45:22 -0400 Received: from localhost (cst-prg-18-163.cust.vodafone.cz [46.135.18.163]) (Authenticated sender: wz) by freeshell.de (Postfix) with ESMTPSA id 9DC61B310123; Sun, 3 Oct 2021 18:45:11 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freeshell.de; s=mail; t=1633279511; bh=zFdSgio2zwv6t410MY4DL+lWWYVzWEiAAB1YDhU4TMQ=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=a06CwB6X1LKAMCvR4Yb7QKims+HOjl3+pJAG2vMcV9VXtMgFaei6dChLS4m8XcWMS UXTYZsLCA9O9ZBaFQHWiGH1pulnurJwz1yX+/+fxFJqxDuWrdRy3vZnXjBs21vw0ns pCH0/530ROgYLOV5HjdgP8RpezEm97Y1vI3Rrsh0= Date: Sun, 3 Oct 2021 18:45:10 +0200 From: Wiktor =?utf-8?Q?=C5=BBelazny?= To: help-guix@gnu.org Subject: Re: Certificates in pure and containerized environments Message-ID: <20211003164510.ebwlm6u24a2bgao4@wzguix> Mail-Followup-To: help-guix@gnu.org, Konrad Hinsen X-PGP-Key: https://freeshell.de/~wz/pubkey.asc X-PGP-Fingerprint: BDC9 74CD D9C9 BA7D 761A 573D C735 A8C6 AB60 79D5 References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="6fy36jgcaiokrlfs" Content-Disposition: inline In-Reply-To: Received-SPF: pass client-ip=2a01:4f8:231:482b::2; envelope-from=wz@freeshell.de; helo=freeshell.de X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1633279600; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=zFdSgio2zwv6t410MY4DL+lWWYVzWEiAAB1YDhU4TMQ=; b=nL5/a2QG2JMgQO+hAluBgeRnKn8IbsLrsA7WhzyEOUAdQ5Vlfo7L4lCBRvYQQEWc4QnQIL Z0nT33mD1WCtSzQA1GSRCDgMB+PAA+xPxkg3vLg02CPaRKLhAWGWCWLic3LHAoejYoe32V ynLcS4zM4DhFq3tYBb9rK8eSITWoudRbnB9hbcr2ER1SaMlWJtyZOBtXdtJbf/OUM46JYx gk/h5drN24qD7/AEF5MnaYDBSCQSppUAwntjsGpTCixR2JSu+3OTq5SjK1uxqoJ1IX8cd2 76IUxlv20hPpiUzdPFzCdPBQbsf+uO4QhSiqQss4CxYDZHQ1rINr3KC+RfG4sg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1633279600; a=rsa-sha256; cv=none; b=Uy4ZBRwbwzZf/cEkM+/JsAFmXSFz/UHe0kUI/y7e8jjZzJ6FgYNMCVZBkPXZuYi2Fh68PH UEbjcGssbSJvHzBCgtVVj/nNp8E/EORu6nS4ZawZEd2+vJe005KqavyksXdI4rI+Uogs5o vdFudDmFkqpzfLQbEJ16EN91XinBlQG31dIPO2mlwwHk5sVasXfQ4zosM8SBHQAuSXHDQh ypk6WrYyQj5q3jh7+81THKwzvefEG6Ce0K6WS7jWEZYXJEXMVcl5AzVDQt2mkZbNWgbp2a cA/hwX4VtO3gLdyYa0PMp5MjO0D+qGL61zsJU/y16YNRrhXiHL60j5WC3in1dg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=freeshell.de header.s=mail header.b=a06CwB6X; dmarc=fail reason="SPF not aligned (relaxed)" header.from=freeshell.de (policy=none); spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Spam-Score: -2.91 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=freeshell.de header.s=mail header.b=a06CwB6X; dmarc=fail reason="SPF not aligned (relaxed)" header.from=freeshell.de (policy=none); spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Queue-Id: 7EC1217AA0 X-Spam-Score: -2.91 X-Migadu-Scanner: scn0.migadu.com X-TUID: INmBc3FYiMaa --6fy36jgcaiokrlfs Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Sep 30, 2021 at 12:08:53PM +0200, Konrad Hinsen wrote: > guix environment --pure \ > --ad-hoc python nss-certs -- \ > python3 -c 'import urllib.request; print(urllib.request.urlope= n("http://wwwbis.sidc.be/DATA/uset/Wlight/2003/11/UPH20031109112104.FTS"))' > > but this doesn't work - same error as initially. Hi Konrad, For some reason, it works for me with --ad-hoc python nss-certs guix -- \ =2E I=E2=80=99m neither sure if this is going to work on all machines (it w= orks when isolated with guix environment -C -N , so there=E2=80=99s some hope), nor whether this solution is acceptable to= you. Perhaps, it=E2=80=99s abusing Guix. Maybe somebody more knowledgeable will comment on this. Bye, W=C5=BB --6fy36jgcaiokrlfs Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEvcl0zdnJun12Glc9xzWoxqtgedUFAmFZ3hZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEJE Qzk3NENERDlDOUJBN0Q3NjFBNTczREM3MzVBOEM2QUI2MDc5RDUACgkQxzWoxqtg edXsvw//SqvOPpNckiW1O+e9IVpYHFQa98EOBgEmHx7cI2+RHctJJExsMTUz2MF4 5hh80nKmBRHOFt6z79GDQS0m4bmOnaGjiDapENxDBZIXSVbdrP0TDqt0CdOGsJdA TJHZCcZZRROsHrenEHm7FURCLIl5Zn49cvdEicic1Tcp32n3gqzeD+VShNBbpfdk mKxYqlSZflZiaudFnJCNQul9hSDAlnVIJgcocXPjZzuAYCfju6nK24iWWT6DGQSf RhINLggDMp5pFMWy59MuM3qlaLdsIkegUGBNdHEHU+zjWnFkv7tzX6oNI1bpYT0U Yo8BU0fO/1o9zA+exHJRH5b4DJR+maoItvunjJm4qix+QQ8PXk8qs80gDWllK/BS Zxty6DBJBPXS4Iez8kox7BF+as9gBlsWhfcGSGgKw/kLpWeZFDV3+RwROnDmmfbt O2Cr0UPWA0EIPBz6YIsQ3ftrmhJwUgMEIaFAa3fb7Jy8xxvbHxvA1jeBX9xZvifB aJhpZxrSCRIFW591FyHLgnki7ezxJ6k82xIcIUADmzFs00IxdE+/X9lAbr6u5rUR 0lccWb5Q2bfNGv9NJjGnCBy8Mm3WWZDYog8Rc0rEiNPlxzb3crPNmNTS3tUM7XD1 9xks3fIS+xopOwN5k2R/2J7LcHpw/uONVSKaBoqF2xpj9Td1nWc= =t1V+ -----END PGP SIGNATURE----- --6fy36jgcaiokrlfs--