From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pierre Neidhardt Subject: Re: Guix & IPFS Date: Thu, 25 Oct 2018 21:51:00 +0200 Message-ID: <87r2gdkdp7.fsf@ambrevar.xyz> References: <87r2grk5dj.fsf@ambrevar.xyz> <87lg6zfr20.fsf@gnu.org> <87lg6zjxwt.fsf@ambrevar.xyz> <20181016162747.GB25057@jasmine.lan> <87r2goecf5.fsf@ambrevar.xyz> <87in1ygi94.fsf@gnu.org> <87va5yoxa0.fsf@ambrevar.xyz> <87h8hb32mf.fsf@gnu.org> <87efcfxx7y.fsf@ambrevar.xyz> <871s8eup4l.fsf@gnu.org> <87tvl9kjqq.fsf@ambrevar.xyz> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:34077) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gFleu-0001eR-4N for guix-devel@gnu.org; Thu, 25 Oct 2018 15:51:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gFleq-0001iS-UA for guix-devel@gnu.org; Thu, 25 Oct 2018 15:51:08 -0400 In-reply-to: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: =?utf-8?Q?G=C3=A1bor?= Boskovits Cc: Guix-devel --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable > Maybe I am just stating the obvious, but this error seems to be certifica= te > related, i think network access is ok, but the certificate cant be > validated, as no root cert is found. That was my first clue as well! :) But looking at other downloaders, only url-fetch has some x509 provisions. = I'm not too sure about its mechanics however. For instance, there is this snip= pet: =2D-8<---------------cut here---------------start------------->8--- (define %x509-certificate-directory ;; The directory where X.509 authority PEM certificates are stored. (make-parameter (or (getenv "GUIX_TLS_CERTIFICATE_DIRECTORY") (getenv "SSL_CERT_DIR")))) ;like OpenSSL =2D-8<---------------cut here---------------end--------------->8--- But url-fetch is quite complex and I've little time to study it at the mome= nt :p =2D-=20 Pierre Neidhardt https://ambrevar.xyz/ --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEUPM+LlsMPZAEJKvom9z0l6S7zH8FAlvSHqQACgkQm9z0l6S7 zH9SKAf+KiL5FNwLNHw00ZfoAaUm4z1L3XyDAzw/NHtipUakexc9SWoEKaCs2qfe 98fh77QpWptNlqty+hiP8kUTd/WKuaaCUOu6cRQaxGEpZZRlOGBU42vq6oFjRzWi mKxVHyTiDa7elLHJuH8f00iWBVNXf3NJX4YPQOwd1sYiHueYqQpzq9paWrnkgPo4 d8QDFh79e3SSJ5m0P5uEuQx6w0CCRZwolbFnfxN4slzK6fU1nV3Sx0bDZN//jmUS RP2axzb9nU7MtfAwPvWYBn4ZX3bXs+3XQj17imKpG3145LrdLRNNhDiTyyDHXZeR ClN/BRm643LVl2vUmeikB52YDPtOfg== =OoJH -----END PGP SIGNATURE----- --=-=-=--