From mboxrd@z Thu Jan  1 00:00:00 1970
From: =?utf-8?Q?Ludovic_Court=C3=A8s?= <ludo@gnu.org>
Subject: Re: rust:cargo (libcurl) vs. CURL_CA_BUNDLE
Date: Sun, 01 Sep 2019 12:58:38 +0200
Message-ID: <87lfv8b7vl.fsf@gnu.org>
References: <CA+4fW6mbsLbzrUwVTunce3bHObbs8sVk3Zzrw3u_kKD9KHoQEQ@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Return-path: <help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:470:142:3::10]:45041)
 by lists.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@gnu.org>) id 1i4NZG-0007Ne-R6
 for help-guix@gnu.org; Sun, 01 Sep 2019 06:58:47 -0400
In-Reply-To: <CA+4fW6mbsLbzrUwVTunce3bHObbs8sVk3Zzrw3u_kKD9KHoQEQ@mail.gmail.com>
 (David Loyall's message of "Thu, 15 Aug 2019 18:14:41 -0500")
List-Id: <help-guix.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/help-guix>,
 <mailto:help-guix-request@gnu.org?subject=unsubscribe>
List-Archive: <https://lists.gnu.org/archive/html/help-guix>
List-Post: <mailto:help-guix@gnu.org>
List-Help: <mailto:help-guix-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/help-guix>,
 <mailto:help-guix-request@gnu.org?subject=subscribe>
Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org
Sender: "Help-Guix" <help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org>
To: David Loyall <david@the-good-guys.net>
Cc: help-guix@gnu.org

Hello David,

David Loyall <david@the-good-guys.net> skribis:

> I think the way `cargo` uses `libcurl` is preventing it from looking
> in the `CURL_CA_BUNDLE` environment variable to find where the
> certificate authority file is.
>
> Here we see what `cargo` I am using:
>
>     sebboh@geeks ~/projects$ cargo -V
>     cargo 1.36.0
>
> Here we see the contents of one of my environment variables:
>
>     sebboh@geeks ~/projects$ echo $CURL_CA_BUNDLE
>     /home/sebboh/.guix-profile/etc/ssl/certs/ca-certificates.crt
>
> Here we try to use `cargo` for a common task:
>
>     sebboh@geeks ~/projects$ cargo install rustfmt-nightly
>         Updating crates.io index
>     error: failed to download from
> `https://crates.io/api/v1/crates/rustfmt-nightly/1.4.5/download`
>
>     Caused by:
>       [60] SSL peer certificate or SSH remote key was not OK (server
> certificate verification failed. CAfile: none CRLfile: none)

This was discussed recently on IRC:

  http://logs.guix.gnu.org/guix/2019-08-29.log#102010

Unfortunately we didn=E2=80=99t reach a conclusion.

My guess was that perhaps cargo honors a different environment
variable=E2=80=94i.e., not =E2=80=98SSL_CERT_FILE=E2=80=99, =E2=80=98SSL_CE=
RT_DIR=E2=80=99, nor
=E2=80=98CURL_CA_BUNDLE=E2=80=99.  The =E2=80=98ltrace -e getenv=E2=80=99 t=
rick I gave might give us
clues about relevant environment variables.

Could you give it a try?

Thanks,
Ludo=E2=80=99.