From mboxrd@z Thu Jan 1 00:00:00 1970 From: Brian Woodcox Subject: Re: Build failure on nss-3.36.1 Date: Sat, 3 Nov 2018 21:17:08 -0600 Message-ID: <83121EB2-6001-499F-ABEF-AD98A03DE9A5@inskydata.com> Mime-Version: 1.0 (Mac OS X Mail 11.3 \(3445.6.18\)) Content-Type: multipart/alternative; boundary="Apple-Mail=_44423E71-D5AD-477B-8473-39517913C1CE" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:41132) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gJ8vB-0005Vs-JF for help-guix@gnu.org; Sat, 03 Nov 2018 23:17:54 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gJ8v7-0006zE-Ew for help-guix@gnu.org; Sat, 03 Nov 2018 23:17:53 -0400 Received: from mail.inskydata.com ([184.68.229.6]:11772 helo=server.inskydata.com) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gJ8v5-0006oE-Eh for help-guix@gnu.org; Sat, 03 Nov 2018 23:17:47 -0400 Received: from [192.168.19.76] (unknown [192.168.19.76]) by server.inskydata.com (Postfix) with ESMTPSA id 7979B4260888 for ; Sat, 3 Nov 2018 21:17:14 -0600 (MDT) List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: help-guix@gnu.org --Apple-Mail=_44423E71-D5AD-477B-8473-39517913C1CE Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 So I have tried to debug this a bit, but I am not making much headway. Apparently the error is: chains.sh: #718: RealCerts: Verifying certificate(s) PayPalEE.cert with = flags -d AllDB -pp -o OID.2.16.840.1.114412.1.1 - FAILED chains.sh: Verifying certificate(s) BrAirWaysBadSig.cert with flags -d = AllDB -pp =20 vfychain -d AllDB -pp -vv = /tmp/guix-build-nss-3.36.1.drv-0/nss-3.36.1/nss/tests/libpkix/certs/BrAirW= aysBadSig.cert=20 Chain is bad! PROBLEM WITH THE CERT CHAIN: CERT 0. BrAirWaysBadSig : ERROR -8181: Peer's Certificate has expired. Returned value is 1, expected result is fail My Guix version is =E2=80=94> guix (GNU Guix) 0.15.0-1.4876bc8 I have attached some files for you info. Not sure if the attachments = will work or not, but here goes. Click to Download = environment-variables 5 KB Click to Download = output.log 40.1 MB Click to Download = 2gwwhy= 92zviwl9k74r9vz9ccmgyw91cn-nss-3.36.1.drv 41 MB --Apple-Mail=_44423E71-D5AD-477B-8473-39517913C1CE Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 So = I have tried to debug this a bit, but I am not making much headway.

Apparently the error = is:

chains.sh: = #718: RealCerts: Verifying certificate(s)  PayPalEE.cert with flags = -d AllDB -pp      -o OID.2.16.840.1.114412.1.1  - = FAILED
chains.sh: Verifying certificate(s) =  BrAirWaysBadSig.cert with flags -d AllDB -pp    =   
vfychain -d AllDB -pp -vv     =   = /tmp/guix-build-nss-3.36.1.drv-0/nss-3.36.1/nss/tests/libpkix/certs/BrAirW= aysBadSig.cert 
Chain is bad!
PROBLEM = WITH THE CERT CHAIN:
CERT 0. BrAirWaysBadSig :
  ERROR -8181: Peer's Certificate has expired.
Returned value is 1, expected result is fail


My Guix = version is =E2=80=94> guix (GNU Guix) 0.15.0-1.4876bc8

I have attached some = files for you info.  Not sure if the attachments will work or not, = but here goes.

Click = to Download
environment-variables
5 KB
Click = to Download
output.log
40.1 MB
Click to Download
2gwwhy92zviwl9k74r9vz9ccmgyw91cn-nss-3.36.1.drv
41 MB


= --Apple-Mail=_44423E71-D5AD-477B-8473-39517913C1CE--