From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Subject: bug#34861: TLS Error with Flatpak Date: Fri, 22 Mar 2019 22:00:23 +0100 Message-ID: <87mulm4obc.fsf@gnu.org> References: <87d0mnn282.fsf@elephly.net> <87ef73yiyr.fsf@elephly.net> <87imwgpl5e.fsf@gnu.org> <002a84964102ac2171089fa7dc007092@disroot.org> <2d04774df83fe600777de7b8f26aca87@disroot.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([209.51.188.92]:60866) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h7Rbo-0008Gj-UU for bug-guix@gnu.org; Fri, 22 Mar 2019 17:21:50 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1h7RWP-0002pA-1z for bug-guix@gnu.org; Fri, 22 Mar 2019 17:16:15 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:41211) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1h7RWJ-0002iB-4D for bug-guix@gnu.org; Fri, 22 Mar 2019 17:16:09 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1h7RWI-0000au-Qd for bug-guix@gnu.org; Fri, 22 Mar 2019 17:16:06 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: (Raghav Gururajan's message of "Tue, 19 Mar 2019 00:43:03 +0000") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Raghav Gururajan Cc: 34861@debbugs.gnu.org Hi Raghav, "Raghav Gururajan" skribis: > Please find the log at: https://bin.disroot.org/?597e32cb7e42e40e#r9lqwZ6= w7sIAWlY2mt6dsgKCKRO5q0ZVt9U69vnZVZs=3D >=20 > 5462 connect(12, {sa_family=3DAF_INET, sin_port=3Dhtons(443), sin_addr= =3Dinet_addr("93.93.130.103")}, 16) =3D -1 EINPROGRESS (Operation now in pr= ogress) [...] > 5462 getsockopt(12, SOL_SOCKET, SO_ERROR, [0], [4]) =3D 0 > 5462 setsockopt(12, SOL_TCP, TCP_NODELAY, [1], 4) =3D 0 [...] > 5462 close(12) =3D 0 [...] > 5461 write(2, "\33[31m\33[1merror: \33[22m\33[0mTLS support is not avail= able\n", 54) =3D 54 Thanks for sending the strace output. That output shows that Flatpak never tries to access /etc/ssl/certs, ~/.guix-profile/etc/ssl/certs or anything like that. The error message comes from GLib, in gdummytlsbackend.c. AFAICS our GLib also includes the TLS (not dummy) backend: --8<---------------cut here---------------start------------->8--- $ objdump -T /gnu/store/0q9pq9flr76rh4bv2524niknknnl2kvq-glib-2.56.3/lib/li= bgio-2.0.so | grep g_tls_backend 0000000000093e90 g DF .text 0000000000000082 Base g_tls_backend_= get_default_database 0000000000093dd0 g DF .text 000000000000006f Base g_tls_backend_= supports_tls 0000000000093f40 g DF .text 000000000000001b Base g_tls_backend_= get_client_connection_type 0000000000093e40 g DF .text 0000000000000049 Base g_tls_backend_= supports_dtls 0000000000093db0 g DF .text 0000000000000015 Base g_tls_backend_= get_default 0000000000093f80 g DF .text 0000000000000072 Base g_tls_backend_= get_dtls_client_connection_type 0000000000093f60 g DF .text 000000000000001b Base g_tls_backend_= get_server_connection_type 0000000000094000 g DF .text 0000000000000072 Base g_tls_backend_= get_dtls_server_connection_type 0000000000094080 g DF .text 000000000000007f Base g_tls_backend_= get_file_database_type 0000000000093d20 g DF .text 0000000000000084 Base g_tls_backend_= get_type 0000000000093f20 g DF .text 000000000000001b Base g_tls_backend_= get_certificate_type --8<---------------cut here---------------end--------------->8--- Libsoup does this: --8<---------------cut here---------------start------------->8--- static gboolean soup_socket_setup_ssl (SoupSocket *sock, const char *ssl_host, GCancellable *cancellable, GError **error) { SoupSocketPrivate *priv =3D soup_socket_get_instance_private (sock); GTlsBackend *backend =3D g_tls_backend_get_default (); --8<---------------cut here---------------end--------------->8--- =E2=80=98g_tls_backend_get_default=E2=80=99 itself looks like this: --8<---------------cut here---------------start------------->8--- GTlsBackend * g_tls_backend_get_default (void) { return _g_io_module_get_default (G_TLS_BACKEND_EXTENSION_POINT_NAME, "GIO_USE_TLS", NULL); } --8<---------------cut here---------------end--------------->8--- Could you try setting the =E2=80=98GIO_USE_TLS=E2=80=99 environment variabl= e? Like: export GIO_USE_TLS=3Dtls or maybe: export GIO_USE_TLS=3DGTlsBackend and then run Flatpak in that environment? TIA, Ludo=E2=80=99.