From mboxrd@z Thu Jan 1 00:00:00 1970 From: Amin Bandali Subject: Re: guix download and GitHub Date: Tue, 21 Aug 2018 18:02:14 -0400 Message-ID: <878t4znztl.fsf@aminb.org> References: <5424534.lOV4Wx5bFT@aleksandar-ixtreme-m5740> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:59330) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fsEjO-0007Bc-1M for guix-devel@gnu.org; Tue, 21 Aug 2018 18:02:33 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fsEjL-0003qi-Vy for guix-devel@gnu.org; Tue, 21 Aug 2018 18:02:29 -0400 In-Reply-To: <5424534.lOV4Wx5bFT@aleksandar-ixtreme-m5740> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: HiPhish , guix-devel@gnu.org Hello, Looking at the manual entry for guix download [0], we can see: guix download verifies HTTPS server certificates by loading the certificates of X.509 authorities from the directory pointed to by the SSL_CERT_DIR environment variable (see X.509 Certificates), unless --no-check-certificate is used. [0]: https://www.gnu.org/software/guix/manual/en/html_node/Invoking-guix-download.html You can either use your operating system's certs directory (usually /etc/ssl/certs), or install the nss-certs guix package, as shown on the man page for X.509 Certificates [1] and export the related environment variables to tell programs to use it: $ guix package -i nss-certs $ export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs" $ export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt" $ export GIT_SSL_CAINFO="$SSL_CERT_FILE" [1]: https://www.gnu.org/software/guix/manual/en/html_node/X_002e509-Certificates.html Hope that helps. -amin