From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id sHjvABZ73l6iMgAA0tVLHw (envelope-from ) for ; Mon, 08 Jun 2020 17:53:26 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id MEREOBV73l4wYwAAbx9fmQ (envelope-from ) for ; Mon, 08 Jun 2020 17:53:25 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 332C6940602 for ; Mon, 8 Jun 2020 17:53:25 +0000 (UTC) Received: from localhost ([::1]:53688 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jiLxb-0003ag-ID for larch@yhetil.org; Mon, 08 Jun 2020 13:53:23 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:53492) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jiLxR-0003aT-Gp for help-guix@gnu.org; Mon, 08 Jun 2020 13:53:13 -0400 Received: from ns13.heimat.it ([46.4.214.66]:38066) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jiLxQ-0002ia-69; Mon, 08 Jun 2020 13:53:12 -0400 Received: from localhost (ip6-localhost [127.0.0.1]) by ns13.heimat.it (Postfix) with ESMTP id 2AA8E3021B6; Mon, 8 Jun 2020 17:53:07 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at ns13.heimat.it Received: from ns13.heimat.it ([127.0.0.1]) by localhost (ns13.heimat.it [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bkOxGY5gZr7i; Mon, 8 Jun 2020 17:52:46 +0000 (UTC) Received: from bourrache.mug.xelera.it (unknown [93.56.169.211]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by ns13.heimat.it (Postfix) with ESMTPSA id 846FC3021B5; Mon, 8 Jun 2020 17:52:46 +0000 (UTC) Received: from roquette.mug.biscuolo.net (roquette [10.38.2.14]) by bourrache.mug.xelera.it (Postfix) with SMTP id EF9C93B12E4; Mon, 8 Jun 2020 19:52:45 +0200 (CEST) Received: (nullmailer pid 14714 invoked by uid 1000); Mon, 08 Jun 2020 17:52:45 -0000 From: Giovanni Biscuolo To: Marius Bakke , Tobias Geerinckx-Rice Subject: Re: curl server certificate verification failed for a few sites In-Reply-To: <87o8pwtil6.fsf@gnu.org> Organization: Xelera.eu References: <87sgfbkm7g.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me> <87o8pylsel.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me> <874krqdboh.fsf@nckx> <87tuzok0zk.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me> <87o8pwtil6.fsf@gnu.org> Date: Mon, 08 Jun 2020 19:52:44 +0200 Message-ID: <87pna9igwj.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=46.4.214.66; envelope-from=g@xelera.eu; helo=ns13.heimat.it X-detected-operating-system: by eggs.gnu.org: First seen = 2020/06/08 13:53:07 X-ACL-Warn: Detected OS = Linux 3.11 and newer [fuzzy] X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix@gnu.org Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Spam-Score: -0.61 X-TUID: ybvK2JGeCazI --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Marius Bakke writes: [...] > The problem is with GnuTLS, which failed if one of the trust roots were > using an expired certificate: > > https://gitlab.com/gnutls/gnutls/-/issues/1008 Oh I see, fine! > It has been fixed in the latest GnuTLS, which is in Guix as of commit > 8951b9496b5c390adb3b3292d234bb8ab9936c40. Thanks for reporting it! Thank you for the explanation and the patch! Best, Giovanni =2D-=20 Giovanni Biscuolo Xelera IT Infrastructures --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERcxjuFJYydVfNLI5030Op87MORIFAl7eeuwACgkQ030Op87M ORLDZQ/+ONd8khy9Gx83xtuWk02Yskbgrvwl7aZxwrcHhYDqZOXtVVJ9kAAd0z+1 lpcVEVPzppNACKBShjqTpRKQAA2m2hhAZibyHZLBRdAhzM/ByP4tmY/KvQClTVEG HPe5cy8AgELBj43CkBtAiSZaiQNdltwi5WVU14wcTW3Nr/3TWu+y5g73eEY0qPXb sdH4t5Z/SL0LrpsN1cJWpujavy2RSm8sDQnBV0NeZX1o3Lcq6T3Nx5SflX3HZbbm wlpi7q77kc6V6Zm79/q0LoFKZv+z8n51+ic96XA8z7xF5GZIt+3piAvbDVTpuwCt 8CluMVIEoq0u7RJT1Dd3EvBiq770GuuAbi5qBx6JKfMjTgkVkjiRfPuiyPVtYqSK DakcmTDBDPUGVfrbvKfYWa2ftfCXLSFO8Z+p3uq1eivWbyik2uLgLVdQBkK6UzIx kto7iCBoLI3mUyFQ9RZNEG9EhHKtLe9ZlPDZrUggH6rK6/r+dD3axwjxxVJKrK4u Wjk7bEcS13rOAv1ZSVAvFieV4OmWNA5j+IIXj0vwOn5OlSYCoAIDSPMZYmGQvCrv moWodChnEnOM4zvccuNZoTbvFOLzJl3817loivB1bMEYKwb8Yc9i+InYycxaCfYK p0Sx5vBcRCjnebXUcBvxH3wY+Yq/8zDG64lwPGeg7u6cHxA4huQ= =5nPM -----END PGP SIGNATURE----- --=-=-=--