From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christopher Baines Subject: bug#39615: LetsEncrypt root certificate hash changed Date: Sun, 16 Feb 2020 08:26:28 +0000 Message-ID: <87zhdjym2z.fsf@cbaines.net> References: <871rqv27d2.fsf@cbaines.net> <878sl3hlbi.fsf@nckx> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:35676) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1j3FGZ-0000rF-R2 for bug-guix@gnu.org; Sun, 16 Feb 2020 03:27:04 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1j3FGY-0001CE-KD for bug-guix@gnu.org; Sun, 16 Feb 2020 03:27:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:58957) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1j3FGY-0001C5-H3 for bug-guix@gnu.org; Sun, 16 Feb 2020 03:27:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1j3FGY-0000P1-Dg for bug-guix@gnu.org; Sun, 16 Feb 2020 03:27:02 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-reply-to: <878sl3hlbi.fsf@nckx> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane-mx.org@gnu.org Sender: "bug-Guix" To: Tobias Geerinckx-Rice Cc: 39615@debbugs.gnu.org --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Tobias Geerinckx-Rice via Bug reports for GNU Guix write= s: > Chris, > > Christopher Baines =E5=86=99=E9=81=93=EF=BC=9A >> ~$ guix pull >> building >> /gnu/store/1r2cj292vvjvhbb92bri568p7dia7cp1-isrgrootx1.pem.drv... >> building >> /gnu/store/dhlb62lpf1ggcrax62hm7l7rlcf5c4fi-letsencryptauthorityx3.pem.d= rv... >> downloading from https://letsencrypt.org/certs/isrgrootx1.pem... >> -sha256 hash mismatch for >> /gnu/store/ahiiz5x04rqr214sw840ifz0d3jzmnsb-isrgrootx1.pem: >> expected hash: >> 0zycy85ff9ga53z1q03df89ka9iihb9p8bjhw056rq2y4rn3b6ac >> actual hash: >> 1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92 > > Thanks! I ran into this issue myself and updated the hashes in > 505b2631a9c35bbaa5ba6771ad4f646086f23cad. Great, thanks. However, while this change might avoid the problem with guix pull in the future, I still a bit stuck. I got this from a fresh install of Guix on the Overdrive machine I have (aarch64-linux). I'm hoping that I'll be able to install git and the Guix dependencies, download the repository, and then get a newer version of Guix that way, but I'm guessing this will still be a problem for other aarch64-linux machines unless there's a substitute out there somewhere. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEPonu50WOcg2XVOCyXiijOwuE9XcFAl5I/LRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcACgkQXiijOwuE 9Xd+whAAmn1HB00nxUgV4p+g3g/KpKxG6wPdzP/eqC4AaXt4a2s7jPegypDBnKJJ +ALidm4sAdIebDynGQitKaeIcaeDYafNPb9Ost//9WVxIreAgplIK1ulRrWfDh+c 1PquNcwap3r842qARD+N7UAN3f2Ng6h4qAwc6pb1W/SXqioSWZPpcaToEcY8CiNG m+lmWmxfJz3Tb29+ZoeM+NBvPFBIysr5HwxmDt0JzRSO6o8IIIZUQdDBka5v3seT KBtUnX6Nh11tgp8b7Dg27vaMYGTncd1QQnoGeFXeybSsyBNSHWIGo9XyFKMBkQrD 3gL6L0x0dVbb+sEY1vIR2PzKBZ/UoJNzJ107O8FJFnhhWh6yw5MNU86huqJnY7Kp SjQJoPQefYYw0eBNlh7W6FnA/i23MBXNH2o4M4a+HpIgOiX5y8Ape4yZUIzrSQli F9Vnz6Y1qKouzy7yy4jpiL3p49FrGOHbwKIfHZ7RdIz6JaJ6tC/kamfBZhu4dZIP +ofrk63+7B7slMd/KE4t9TKQiCMkOjlDfVTwevPhHkuVN9oZgmHZGqR079LfBmuU XOWuvS3J2bLb1hjXH5nm3hO2fnkMvC6MeJYfTmMi8m4Ze0MxBRDKBHdvqAHPIZ2D OABTcXz5a1Tmn2A5mZNK0O9AaUKq+ppCb6Fen3/Bh9bv6MwXBq8= =+0Wn -----END PGP SIGNATURE----- --=-=-=--