From mboxrd@z Thu Jan 1 00:00:00 1970 From: Dennis Mungai Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Date: Wed, 11 May 2016 11:10:50 +0300 Message-ID: References: <87a8jyghhq.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:42525) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b0PEa-00077A-6v for bug-guix@gnu.org; Wed, 11 May 2016 04:11:13 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b0PEU-000246-IU for bug-guix@gnu.org; Wed, 11 May 2016 04:11:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:34301) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b0PEU-000242-DJ for bug-guix@gnu.org; Wed, 11 May 2016 04:11:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1b0PEU-00070Y-9o for bug-guix@gnu.org; Wed, 11 May 2016 04:11:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 23504@debbugs.gnu.org Hey there, Sorry for the late reply. I used Pjotr's Guix hacking notes to fix the problem , solution: https://github.com/pjotrp/guix-notes/blob/master/HACKING.org#git-ca-certifi= cates On 10 May 2016 at 16:46, Dennis Mungai wrote: > Sure, will do. > > On 10 May 2016 at 16:38, Ludovic Court=C3=A8s wrote: >> Dennis Mungai skribis: >> >>> I'm using git 2.7.4 from a guix profile, and here is my current environ= ment: >>> >>> guix package -p ~/opt/guix-build-system --search-paths >>> warning: failed to install locale: Invalid argument >>> export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-b= uild-system/sbin" >>> export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" >>> export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" >>> export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" >>> export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfig= " >>> export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib/= guile/2.0/ccache" >>> export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>> export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>> export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" >>> export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" >>> >>> which env returns: >>> >>> which env >>> /home/lin/opt/guix-build-system/bin/env >>> >>> Now, with git clone example over HTTPS: >>> >>> git clone --branch gn-latest https://github.com/genenetwork/guix-bioinf= ormatics >>> Cloning into 'guix-bioinformatics'... >>> fatal: unable to access >>> 'https://github.com/genenetwork/guix-bioinformatics/': server >>> certificate verification failed. CAfile: none CRLfile: none >>> >>> The system git does not present such an error. >>> >>> What could be wrong with my setup? Missing certificates? >>> >>> At the moment, I've installed the nss-certs package hoping it would be >>> a workaround as these are Mozilla certs, but to no avail. >> >> I think you also need to set the =E2=80=98GIT_SSL_CAINFO=E2=80=99 enviro= nment variable. >> For instance: >> >> $ guix package -i nss-certs >> $ export SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs" >> $ export SSL_CERT_FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-cert= ificates.crt" >> $ export GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" >> >> Can you confirm? >> >> Thanks, >> Ludo=E2=80=99.