From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: pypi import certs issues Date: Mon, 19 Mar 2018 17:52:58 +0100 Message-ID: <878taouhw5.fsf@gnu.org> References: <20180319132454.zf7xp3eblw3y4fe7@abyayala> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55599) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1exy22-00012h-DQ for guix-devel@gnu.org; Mon, 19 Mar 2018 12:53:11 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1exy1x-0005MW-Eh for guix-devel@gnu.org; Mon, 19 Mar 2018 12:53:10 -0400 Received: from hera.aquilenet.fr ([2a0c:e300::1]:42924) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1exy1x-0005Ja-7A for guix-devel@gnu.org; Mon, 19 Mar 2018 12:53:05 -0400 Received: from localhost (localhost [127.0.0.1]) by hera.aquilenet.fr (Postfix) with ESMTP id 9E88F12419 for ; Mon, 19 Mar 2018 17:53:03 +0100 (CET) Received: from hera.aquilenet.fr ([127.0.0.1]) by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VLhlKj40hMXD for ; Mon, 19 Mar 2018 17:52:59 +0100 (CET) Received: from ribbon (unknown [193.50.110.92]) by hera.aquilenet.fr (Postfix) with ESMTPSA id 29850123F9 for ; Mon, 19 Mar 2018 17:52:59 +0100 (CET) In-Reply-To: <20180319132454.zf7xp3eblw3y4fe7@abyayala> (ng0@n0.is's message of "Mon, 19 Mar 2018 13:24:54 +0000") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org Hello, ng0 skribis: > on commit 72406062b9c3cdb6e9e30266f3cc31d0b2116b68 pypi import has issues: > > user@abyayala ~$ guix package -l | grep "nss-certs" > user@abyayala ~$ env | grep "SSL_" > GIT_SSL_CAINFO=3D/etc/ssl/certs/ca-certificates.crt > SSL_CERT_FILE=3D/etc/ssl/certs/ca-certificates.crt > SSL_CERT_DIR=3D/home/user/.guix-profile/etc/ssl/certs:/etc/ssl/certs > user@abyayala ~$ guix import pypi readline > ;;; note: source file /home/user/.config/guix/latest/guix/download.scm > ;;; newer than compiled /home/user/.config/guix/latest/guix/downloa= d.go > ;;; note: source file /home/user/.config/guix/latest/guix/download.scm > ;;; newer than compiled /gnu/store/3abjgr7dws69089lrfkf0n92qww1946j= -guix-0.14.0-9.bdf0c64/lib/guile/2.2/site-ccache/guix/download.go > ;;; note: source file /home/user/.config/guix/latest/guix/download.scm > ;;; newer than compiled /run/current-system/profile/lib/guile/2.2/s= ite-ccache/guix/download.go > Backtrace: > 11 (apply-smob/1 #) > In ice-9/boot-9.scm: > 705:2 10 (call-with-prompt _ _ #) > In ice-9/eval.scm: > 619:8 9 (_ #(#(#))) > In guix/ui.scm: > 1501:12 8 (run-guix-command _ . _) > In guix/scripts/import.scm: > 114:11 7 (guix-import . _) > In guix/scripts/import/pypi.scm: > 84:19 6 (guix-import-pypi . _) > In guix/import/pypi.scm: > 274:17 5 (pypi->guix-package _) > In ice-9/boot-9.scm: > 829:9 4 (catch srfi-34 # b&) > In guix/import/json.scm: > 32:17 3 (_) > In guix/http-client.scm: > 88:25 2 (http-fetch _ #:port _= #:text? _ #:buffered? _ # _ # _ # b&) > In guix/build/download.scm: > 398:4 1 (open-connection-f= or-uri _ #:timeout _ # _) > 296:6 0 (tls-wrap # _ # _) > > guix/build/download.scm:296:6: In procedure tls-wrap: > X.509 certificate of 'pypi.python.org' could not be verified: > insecure-algorithm > signer-not-found > invalid I don=E2=80=99t see that. Could it be that the certs you have in /etc/ssl = are too old, or something along these lines? Thanks, Ludo=E2=80=99.