From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:39294) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1g1FMU-0006q7-5u for guix-patches@gnu.org; Sat, 15 Sep 2018 14:32:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1g1FMQ-0002ki-SZ for guix-patches@gnu.org; Sat, 15 Sep 2018 14:32:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:37511) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1g1FMQ-0002jv-Kq for guix-patches@gnu.org; Sat, 15 Sep 2018 14:32:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1g1FMQ-0003Ze-EO for guix-patches@gnu.org; Sat, 15 Sep 2018 14:32:02 -0400 Subject: [bug#32530] [PATCH] gnu: octave: Fix CA certificate use. Resent-Message-ID: From: Kei Kebreau References: <20180826004231.19350-1-kkebreau@posteo.net> <87o9czqhpo.fsf@fastmail.com> Date: Sat, 15 Sep 2018 14:30:43 -0400 In-Reply-To: <87o9czqhpo.fsf@fastmail.com> (Marius Bakke's message of "Sat, 15 Sep 2018 10:37:39 +0200") Message-ID: <87r2huzk8c.fsf@posteo.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Marius Bakke Cc: 32530@debbugs.gnu.org --=-=-= Content-Type: text/plain Marius Bakke writes: > Kei Kebreau writes: > >> * gnu/packages/maths.scm (octave)[arguments]: Add 'wrap-program' phase to wrap >> Octave with the path to system CA certificates. >> --- >> gnu/packages/maths.scm | 8 +++++++- >> 1 file changed, 7 insertions(+), 1 deletion(-) >> >> diff --git a/gnu/packages/maths.scm b/gnu/packages/maths.scm >> index 3d571e8cc..b0caff0f5 100644 >> --- a/gnu/packages/maths.scm >> +++ b/gnu/packages/maths.scm >> @@ -1417,7 +1417,13 @@ can solve two kinds of problems: >> (string-append "Vmakeinfo_program = \"" >> (assoc-ref inputs "texinfo") >> "/bin/makeinfo\""))) >> - #t))))) >> + #t)) >> + (add-after 'install 'wrap-program >> + (lambda* (#:key outputs #:allow-other-keys) >> + (let ((out (assoc-ref outputs "out"))) >> + (wrap-program (string-append out "/bin/octave") >> + '("CURLOPT_CAPATH" suffix ("/etc/ssl/certs"))) >> + #t)))))) > > Instead of wrapping you can add a native-search-path for CURLOPT_CAPATH > (as with CURL_CA_BUNDLE for `curl`). That way installing certificates > to the profile should be sufficient. Ah! Yes, this works when I add curl to the profile. I didn't do this the first time. I'll upload a patch here soon. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEg7ZwOtzKO2lLzi2m5qXuPBlGeg0FAludT9MACgkQ5qXuPBlG eg396g/+LbIzc1LpdfYQ2DJb2bxgCGfFdMh8Pwh4HfZbcKkd7crEmr9C4fGv3V4C SUIoRk1OFQ1O8WYABB/z+NvAuiqWlAKCTAUjrmDvv64zr84uF6dasByE4h/tVzZk H50AjMqNHyjqBf16sCl7kkAxql14AKgjtKCBQtBDvzsVQV7AR7HJrcI9qO9OgfK1 2ywYmJGTxM0YLiiv3Mdcf6OewwbBfiaN23no1nZ9IldzSoM+mLeQEQV1GUwQc4eY 0fArgMB2lUhASfIbDsE4PR8E7rMfSmH5ST7v5Dvp9cqrRQByGgYVApsMHcIT2iGx u51lTDTOwWepcbJUcYUO4UKCbNisY/FE5Mdw7kgxpcr70R9MMY+baRgqVGa6MpvG Y8NNo8hWPpAKJmaJUVlvBS4xKpDx9B/M+exNH/93w4pZkxls0pJSUC+GPtDi8Lgu Pbi63FTCTxQSxClZdt7aHd/+8fVJ0e2sVNxWZJ8w+HVS5Dv6jAM/j7j5kYZdmYQh nYE3K9dAU9a1UKwKzvZaAvnoQsUa/8+wMcmEPkLuEKpxBnWbPy9ZIDyxU4R8/vYM ryn6+aQ/F2HhZu/YSPjtBeQK/nn2kr9OektBkaEA/EeOPTV4qp5fy5tnnytYsyQh 39Zg87leZPiEBfe3B62W2xa/mFqTtQGJGuuY6vPHKAO1F8ZYjEo= =8Ltm -----END PGP SIGNATURE----- --=-=-=--