Re: guix download and GitHub

[Amin Bandali <amin@gnu.org>]

Hello,

Looking at the manual entry for guix download [0], we can see:

    guix download verifies HTTPS server certificates by loading
    the certificates of X.509 authorities from the directory
    pointed to by the SSL_CERT_DIR environment variable (see
    X.509 Certificates), unless --no-check-certificate is used.

[0]: https://www.gnu.org/software/guix/manual/en/html_node/Invoking-guix-download.html

You can either use your operating system's certs directory
(usually /etc/ssl/certs), or install the nss-certs guix package,
as shown on the man page for X.509 Certificates [1] and export
the related environment variables to tell programs to use it:

    $ guix package -i nss-certs
    $ export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
    $ export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
    $ export GIT_SSL_CAINFO="$SSL_CERT_FILE"

[1]: https://www.gnu.org/software/guix/manual/en/html_node/X_002e509-Certificates.html

Hope that helps.

  -amin