all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* ‘guix authenticate’: Throw to key `gcry-error' with args `(536871113)'.
@ 2014-02-11 21:49 Nikita Karetnikov
  2014-02-11 22:26 ` Ludovic Courtès
  0 siblings, 1 reply; 2+ messages in thread
From: Nikita Karetnikov @ 2014-02-11 21:49 UTC (permalink / raw)
  To: guix-devel

[-- Attachment #1: Type: text/plain, Size: 1221 bytes --]

The keypair was created this way:

$ openssl genrsa -out ./cache-key.sec 2048
$ openssl rsa -in ./cache-key.sec -pubout > ./cache-key.pub

All the tests pass.  What’s wrong?

$ guix authenticate rsautl -sign -inkey cache-key.sec -in 3r2n9zm3kxb28klpzgarjxj8x3y3y6wf.narinfo.hash
Backtrace:
In ice-9/boot-9.scm:
 157: 11 [catch #t #<catch-closure 8ed5f30> ...]
In unknown file:
   ?: 10 [apply-smob/1 #<catch-closure 8ed5f30>]
In ice-9/boot-9.scm:
  63: 9 [call-with-prompt prompt0 ...]
In ice-9/eval.scm:
 432: 8 [eval # #]
In ice-9/boot-9.scm:
2320: 7 [save-module-excursion #<procedure 8e46e60 at ice-9/boot-9.scm:3961:3 ()>]
3966: 6 [#<procedure 8e46e60 at ice-9/boot-9.scm:3961:3 ()>]
1645: 5 [%start-stack load-stack ...]
1650: 4 [#<procedure 8ed6960 ()>]
In unknown file:
   ?: 3 [primitive-load "/usr/local/bin/guix"]
In guix/ui.scm:
 593: 2 [run-guix-command authenticate "rsautl" ...]
In guix/scripts/authenticate.scm:
  60: 1 [guix-authenticate "rsautl" "-sign" ...]
In ice-9/boot-9.scm:
 793: 0 [call-with-input-file "cache-key.sec" ...]

ice-9/boot-9.scm:793:17: In procedure call-with-input-file:
ice-9/boot-9.scm:793:17: Throw to key `gcry-error' with args `(536871113)'.

[-- Attachment #2: Type: application/pgp-signature, Size: 835 bytes --]

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: ‘guix authenticate’: Throw to key `gcry-error' with args `(536871113)'.
  2014-02-11 21:49 ‘guix authenticate’: Throw to key `gcry-error' with args `(536871113)' Nikita Karetnikov
@ 2014-02-11 22:26 ` Ludovic Courtès
  0 siblings, 0 replies; 2+ messages in thread
From: Ludovic Courtès @ 2014-02-11 22:26 UTC (permalink / raw)
  To: Nikita Karetnikov; +Cc: guix-devel

Nikita Karetnikov <nikita@karetnikov.org> skribis:

> The keypair was created this way:
>
> $ openssl genrsa -out ./cache-key.sec 2048
> $ openssl rsa -in ./cache-key.sec -pubout > ./cache-key.pub
>
> All the tests pass.  What’s wrong?
>
> $ guix authenticate rsautl -sign -inkey cache-key.sec -in 3r2n9zm3kxb28klpzgarjxj8x3y3y6wf.narinfo.hash

[...]

> In guix/scripts/authenticate.scm:
>   60: 1 [guix-authenticate "rsautl" "-sign" ...]
> In ice-9/boot-9.scm:
>  793: 0 [call-with-input-file "cache-key.sec" ...]
>
> ice-9/boot-9.scm:793:17: In procedure call-with-input-file:
> ice-9/boot-9.scm:793:17: Throw to key `gcry-error' with args `(536871113)'.

‘guix authenticate’ expects cache-key.sec to be a key in “canonical
sexp” format, like in tests/signing-key.sec.  That’s why it barfs here.

IOW, the idea is that it’s a drop-in replacement for ‘openssl’ in terms
of command-line handling, but what happens behind is very different (see
<https://lists.nongnu.org/archive/html/guix-devel/2013-12/msg00135.html>
and related messages.)

(The command-line compatibility requirement stems from the fact that for
now I want to avoid Guix-specific modifications to the daemon.)

HTH,
Ludo’.

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2014-02-11 22:26 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-02-11 21:49 ‘guix authenticate’: Throw to key `gcry-error' with args `(536871113)' Nikita Karetnikov
2014-02-11 22:26 ` Ludovic Courtès

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.