From mboxrd@z Thu Jan 1 00:00:00 1970 From: Dennis Mungai Subject: bug#23504: git 2.7.4 fails to clone repositories over HTTPS sources Date: Wed, 11 May 2016 11:16:32 +0300 Message-ID: References: <87a8jyghhq.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:43838) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b0PKO-0006De-2U for bug-guix@gnu.org; Wed, 11 May 2016 04:17:09 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b0PKI-0003Pt-FR for bug-guix@gnu.org; Wed, 11 May 2016 04:17:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:34314) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b0PKI-0003Pp-Cm for bug-guix@gnu.org; Wed, 11 May 2016 04:17:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1b0PKI-0007AI-95 for bug-guix@gnu.org; Wed, 11 May 2016 04:17:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 23504@debbugs.gnu.org Also, your workaround worked (in git, at least). I'm not sure if there are other cases affected by this in the wild. On 11 May 2016 at 11:10, Dennis Mungai wrote: > Hey there, > > Sorry for the late reply. > > I used Pjotr's Guix hacking notes to fix the problem , solution: > > https://github.com/pjotrp/guix-notes/blob/master/HACKING.org#git-ca-certi= ficates > > > > On 10 May 2016 at 16:46, Dennis Mungai wrote: >> Sure, will do. >> >> On 10 May 2016 at 16:38, Ludovic Court=C3=A8s wrote: >>> Dennis Mungai skribis: >>> >>>> I'm using git 2.7.4 from a guix profile, and here is my current enviro= nment: >>>> >>>> guix package -p ~/opt/guix-build-system --search-paths >>>> warning: failed to install locale: Invalid argument >>>> export PATH=3D"/home/lin/opt/guix-build-system/bin:/home/lin/opt/guix-= build-system/sbin" >>>> export XDG_DATA_DIRS=3D"/home/lin/opt/guix-build-system/share" >>>> export GUIX_GTK3_PATH=3D"/home/lin/opt/guix-build-system/lib/gtk-3.0" >>>> export INFOPATH=3D"/home/lin/opt/guix-build-system/share/info" >>>> export PKG_CONFIG_PATH=3D"/home/lin/opt/guix-build-system/lib/pkgconfi= g" >>>> export GUILE_LOAD_COMPILED_PATH=3D"/home/lin/opt/guix-build-system/lib= /guile/2.0/ccache" >>>> export C_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>>> export CPLUS_INCLUDE_PATH=3D"/home/lin/opt/guix-build-system/include" >>>> export LIBRARY_PATH=3D"/home/lin/opt/guix-build-system/lib" >>>> export ACLOCAL_PATH=3D"/home/lin/opt/guix-build-system/share/aclocal" >>>> >>>> which env returns: >>>> >>>> which env >>>> /home/lin/opt/guix-build-system/bin/env >>>> >>>> Now, with git clone example over HTTPS: >>>> >>>> git clone --branch gn-latest https://github.com/genenetwork/guix-bioin= formatics >>>> Cloning into 'guix-bioinformatics'... >>>> fatal: unable to access >>>> 'https://github.com/genenetwork/guix-bioinformatics/': server >>>> certificate verification failed. CAfile: none CRLfile: none >>>> >>>> The system git does not present such an error. >>>> >>>> What could be wrong with my setup? Missing certificates? >>>> >>>> At the moment, I've installed the nss-certs package hoping it would be >>>> a workaround as these are Mozilla certs, but to no avail. >>> >>> I think you also need to set the =E2=80=98GIT_SSL_CAINFO=E2=80=99 envir= onment variable. >>> For instance: >>> >>> $ guix package -i nss-certs >>> $ export SSL_CERT_DIR=3D"$HOME/.guix-profile/etc/ssl/certs" >>> $ export SSL_CERT_FILE=3D"$HOME/.guix-profile/etc/ssl/certs/ca-cer= tificates.crt" >>> $ export GIT_SSL_CAINFO=3D"$SSL_CERT_FILE" >>> >>> Can you confirm? >>> >>> Thanks, >>> Ludo=E2=80=99.