From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id KIsYB3oVNV8VOwAA0tVLHw (envelope-from ) for ; Thu, 13 Aug 2020 10:27:06 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id 8Af7AnoVNV9SZQAAB5/wlQ (envelope-from ) for ; Thu, 13 Aug 2020 10:27:06 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 40F299403A6 for ; Thu, 13 Aug 2020 10:27:05 +0000 (UTC) Received: from localhost ([::1]:55776 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1k6ARs-0006xq-4M for larch@yhetil.org; Thu, 13 Aug 2020 06:27:04 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:48910) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1k6ARi-0006xX-TS for help-guix@gnu.org; Thu, 13 Aug 2020 06:26:54 -0400 Received: from ns13.heimat.it ([46.4.214.66]:36364) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1k6ARg-000678-Nk for help-guix@gnu.org; Thu, 13 Aug 2020 06:26:54 -0400 Received: from localhost (ip6-localhost [127.0.0.1]) by ns13.heimat.it (Postfix) with ESMTP id DD47B3021BA; Thu, 13 Aug 2020 10:26:49 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at ns13.heimat.it Received: from ns13.heimat.it ([127.0.0.1]) by localhost (ns13.heimat.it [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KpO4R77Grain; Thu, 13 Aug 2020 10:26:29 +0000 (UTC) Received: from bourrache.mug.xelera.it (unknown [93.56.169.211]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by ns13.heimat.it (Postfix) with ESMTPSA id 2ECBF3021B9; Thu, 13 Aug 2020 10:26:29 +0000 (UTC) Received: from roquette.mug.biscuolo.net (roquette [10.38.2.14]) by bourrache.mug.xelera.it (Postfix) with SMTP id 5170C5C28EA; Thu, 13 Aug 2020 12:26:27 +0200 (CEST) Received: (nullmailer pid 2478 invoked by uid 1000); Thu, 13 Aug 2020 10:26:24 -0000 From: Giovanni Biscuolo To: Todor =?utf-8?Q?Kondi=C4=87?= Subject: Re: Certificate problem with curl, though icecat works In-Reply-To: Organization: Xelera.eu References: <9kSaR15iLCuEyScHdlJ73XpOm85IcNNLxHb6T9PoWPiW6PTiT9eFfsAIStaIyuxzgpZOpCUfYkLP4Y8PaE3jxcKxOryeTFg5BzplBz1esxQ=@protonmail.com> <87y2mj69jy.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me> <87v9hn591j.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me> Date: Thu, 13 Aug 2020 12:26:23 +0200 Message-ID: <87pn7u6dv4.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=46.4.214.66; envelope-from=g@xelera.eu; helo=ns13.heimat.it X-detected-operating-system: by eggs.gnu.org: First seen = 2020/08/13 06:26:50 X-ACL-Warn: Detected OS = Linux 3.11 and newer [fuzzy] X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: "help-guix\\\\@gnu.org" Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Spam-Score: -3.11 X-TUID: 68Ut7/QPipiU --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Totor, Todor Kondi=C4=87 writes: [...] >> I'm going to open a bug report upstream (gnutls), thanks for your >> report. This is the bug report https://gitlab.com/gnutls/gnutls/-/issues/1062 I checked other OCSP issues and I did not understand if this is already fixed in latest GnuTLS releases > Thanks for confirming this! (Y) > I pulled the newest Guix and updated gnutls and that did not solve the > issue. Me too, but=E2=80=A6 I'm not explicitly installing gnutls in my profile (via manifest), I'm just= installing curl and in that profile I get: =2D-8<---------------cut here---------------start------------->8--- giovanni@roquette: gnutls-cli --version gnutls-cli 3.6.7 Copyright (C) 2000-2020 Free Software Foundation, and others, all rights re= served. This is free software. It is licensed for use, modification and redistribution under the terms of the GNU General Public License, version 3 or later Please send bug reports to: =2D-8<---------------cut here---------------end--------------->8--- But: =2D-8<---------------cut here---------------start------------->8--- giovanni@roquette: curl --version curl 7.71.0 (x86_64-unknown-linux-gnu) libcurl/7.71.0 GnuTLS/3.6.14 zlib/1.= 2.11 libidn2/2.3.0 nghttp2/1.41.0 Release-Date: 2020-06-24 Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 = pop3s rtsp smb smbs smtp smtps telnet tftp=20 Features: AsynchDNS GSS-API HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile l= ibz NTLM NTLM_WB SPNEGO SSL TLS-SRP UnixSockets =2D-8<---------------cut here---------------end--------------->8--- curl should use gnutls 3.6.14... I should double check my profile update I'll report as soon as I understand what's happening Thanks, Gio' =2D-=20 Giovanni Biscuolo Xelera IT Infrastructures --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERcxjuFJYydVfNLI5030Op87MORIFAl81FVAACgkQ030Op87M ORLUcg//aib+2Axyx787tuhZsdv7xRP4DERu0F5dCxEOcWV27gPWzlEXoOKFazXP cJ4Zhbi6emp9o8zv8dLlZEc+/e7Ra4OG3asqdEB8ocXvpqQGmeQs+qzmKqK+kgp9 CkFFafaPe3AyKlm46Xql/MA9eOonghnx/3W8aD93JJbrW1+YP26crm22JmnQAe39 bi9In3xw7yWvCJcJ6rCIZIFW6GrRs38bka3LzxL/F20xKWKzKKxVdug91PHSnEgo hFD4oR/tJyzw3NK8JCyV6x4LUoEE3bYk/ZK2ho7ss8ekeg+STm6OYSRJ3ouGaNeg pM940Ag6MfE/ADzDZIe0uvpWUU1lrChMfu7ftMOmFqyx6n/nYZI9rMp7x4FbvQ5u XHLefwIPq8WJptWXa2BU+fzTTlVGPaE1gYSGzhebqnjX/vx8aJiXtlcV3TIDUCaM 5c/ebkiD9G6N2kmOuJ/XeO90pHeV/qDtfqd0Jccp/66gVXUiGGEt6HbDEirFeg+l DCkcBGJRWZ9GN4eSaA0beNGml8vV61boQz+SmzFo2/5rAl4Qk8NzbSjq0Jtfje+j 0E/d+8tuD9rrBJ+CYF/c80IzgM9G84ph4WZpKQDaITMCl0EQUkgvo/uLz1qErt1Z U+U0uGtg/EqR0kzxY7VT+fIZmx06R/ICAz7MCH82hlWj2AImn8k= =arMC -----END PGP SIGNATURE----- --=-=-=--