From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id CO6LI02xUmKlGAAAgWs5BA (envelope-from ) for ; Sun, 10 Apr 2022 12:28:29 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id iHfQIE2xUmLBFAEA9RJhRA (envelope-from ) for ; Sun, 10 Apr 2022 12:28:29 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 157FBEB25 for ; Sun, 10 Apr 2022 12:28:29 +0200 (CEST) Received: from localhost ([::1]:50496 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ndUo0-00044E-1U for larch@yhetil.org; Sun, 10 Apr 2022 06:28:28 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:44058) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ndUnc-0003zH-7f for guix-patches@gnu.org; Sun, 10 Apr 2022 06:28:05 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:45535) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1ndUna-0006q0-29 for guix-patches@gnu.org; Sun, 10 Apr 2022 06:28:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ndUnZ-0001rX-VT for guix-patches@gnu.org; Sun, 10 Apr 2022 06:28:01 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#54796] [PATCH v3 03/22] gnu: Add erlang-certifi. Resent-From: Hartmut Goebel Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 10 Apr 2022 10:28:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 54796 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Maxime Devos , 54796@debbugs.gnu.org Received: via spool by 54796-submit@debbugs.gnu.org id=B54796.16495864487122 (code B ref 54796); Sun, 10 Apr 2022 10:28:01 +0000 Received: (at 54796) by debbugs.gnu.org; 10 Apr 2022 10:27:28 +0000 Received: from localhost ([127.0.0.1]:39432 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ndUn2-0001qo-8z for submit@debbugs.gnu.org; Sun, 10 Apr 2022 06:27:28 -0400 Received: from mout.kundenserver.de ([212.227.17.10]:51819) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ndUmy-0001qW-Qi for 54796@debbugs.gnu.org; Sun, 10 Apr 2022 06:27:26 -0400 Received: from hermia.goebel-consult.de ([87.176.137.15]) by mrelayeu.kundenserver.de (mreue108 [212.227.15.183]) with ESMTPSA (Nemesis) id 1MTREY-1nY2lW1VOe-00To4e; Sun, 10 Apr 2022 12:27:18 +0200 Received: from [127.0.0.1] (hermia.goebel-consult.de [192.168.110.7]) by hermia.goebel-consult.de (Postfix) with ESMTP id 75AE466479; Sun, 10 Apr 2022 12:27:20 +0200 (CEST) Message-ID: Date: Sun, 10 Apr 2022 12:27:15 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.7.0 Content-Language: en-US References: <25be4a7ca6f9af888b6a97f6ab03e2e3ae2caaf7.1649436566.git.h.goebel@crazy-compilers.com> <2285d26dd5b271a42bafb8aec553ba031f36d107.camel@telenet.be> From: Hartmut Goebel Organization: crazy-compilers.com In-Reply-To: <2285d26dd5b271a42bafb8aec553ba031f36d107.camel@telenet.be> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Provags-ID: V03:K1:hXymae7AztaajJvO3ZssJKAj4LH3sL3rtA9HT0EF40OL45QYdyE K5EKqkE3TnqPMpP5OCibnFesbzQF7TZuZUOscG28ruyTshe95QtoVgKTBr8I3yNAwP/sxNz Ymoa8dMCYNt0I1tyd+gblExDRmhGgSbWQFrdr0tmGmLBQ5OiXvOrPfsKtx8rAgWsxEU5iTZ lbQC0kPPDSL0umDTmtk7Q== X-UI-Out-Filterresults: notjunk:1;V03:K0:JX6BXh95w3Q=:ulXlxTaVIYJSJjDKUgfhMh XDTryW9ASHXFRhGlx6bRnFP5TVhPZVYs+hwZTGdziXfyFUFCSFJrZNUuLzJwABCzXpAxBPOAB 3wdwUO9bktWykPVCxUHM/8XcSz8M97kUGlAm8LitRWr4NTtRE5ELbl/dOz395vfpA5gqertoc 1CC9XaKxE5tVh7IFYmng5bhWtsI4ilFKCyynY3WcQZ99obHW374VSz/fxpDTwo6KuRNfKwggj 9Ip98WgND+7fAbuGmfRG5VPcQHU5epzDmHnQbVhElMIKWNer7o0RL3vXrKi8W06qS7De+3EMS 98in0sLFrdAxmL/pVMJeHMPTPMv2k9Aw0e6HqsvxOzxwnJKKP44kON4th8psbo3QAymR2L+tD 8VHNBU4o7eOKvsHMlqB6zKwk0ESxkLalbYWoyu6bxdidh2ZXthE8Zhwv4rJKx7ME5QHZwsxkG BtH0g8TVL2Mg03ZWBUE6eXpQ4dA4d273ZztsNcwSJOusEbX9cm6y3sWvoxa7M9CnqGhNs5EVA kVOsEnNQfO/jWhccVltHh5kxBoZMWc/JnG0sJkh6lfm7KWO+CqpmTlE7UtzjzdnOOXw+7YkQ+ kQwZzII8RLTObr6uH5nirv9qZGo9PJroEed0eCIS+5Sj5CuHfW9w1aY5D7VLupGK294OxMp83 9t/eGtG1js/JIc3qLbF7lRuLWiIt+wyEg9D7g1cZo5lor7P5pLENu/+YJC04IYVgB7/pXwndb C8kkjoJhiufxRKGf X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1649586509; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post; bh=jLbf0Ub/bmjvuI2lIV2cjrgOsQ2LkufStekmRTNqhzQ=; b=SfB2Fn33SM2oQ1ILCcyMwwYIrEmY1D94fBQOnSGFh0U3yANf0XJN8c67nWLpg/o+3n+Wm+ HnU0+kp2bvHrdU7iDF5FG50mzSPb2VuHjGbzelbda/U7NRpdwKfwG6kmTTgHMzRB0VqC7+ hj8p+t+wCOZIJU2WM4L1MTMHDGeDD/x2fmZyv74CqaOVUQ6KLe/ZurjtJDkQ+Q5irm3ryH R1qj2UxFAmqwBJixm7WdGrdzpqzWhov8a+1AbVkbQjmFuo7fLdOc2LJP6bbJa/Ol/PfH/X 1g+AZSFkzH2bZhRoosSB5UDcOK3jDh95rHK85eAxKa5HZn6UOPPqeGYM/daiiA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1649586509; a=rsa-sha256; cv=none; b=WrDYrQ7yR/WE9AqJ5jbTcePfrcXwmMbaZdy+gGGGPJ5yL/pLVjTL5hJ4JL59WYT/OMsWW7 oXQ/eQoS7uiIGFF5OGhziW9svgF+AFG+z7EvaxeKol4qFIzacrAoLWvuwH1Qo45b9xzPk5 BfA4xJecWFR3KUOegdEXvq8iC3wQumWI+0UjfkUBjo/BKILkCkvv9DIvfSzRu/TazWDook EtadhIBS1lbgLHLVz9vPNtGPnBOCrUInpDUYe7NcDaO4LbrC+brT+kdIv6sNVT2siHYxvv cvkui5pgqS1aJRjvytOtLCAy8Ttv9Lyc5GbSwyI1Ceezp5KVHt17nabB1LNbJw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -3.37 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 157FBEB25 X-Spam-Score: -3.37 X-Migadu-Scanner: scn0.migadu.com X-TUID: VFzvm0TDBLh/ Am 09.04.22 um 13:39 schrieb Maxime Devos: > Can this bundle be built from 'nss-certs', such that when nss-certs is > updated (e.g. Mozilla revokes a root certificate due to reasons), > erlang-certifi is up-to-date as well? This package is a sibling of python-certifi [1] and go-github-com-certifi-gocertifi. All these contain a copy of the/a CA bundle — which is the idea of these packages: „useful for systems that do not have CA bundles“. So they intentionally do not honor SSL_CERT_DIR/…. They are meant to be used as fall-back for libraries/applications honoring SSL_CERT_DIR/…. Neither python-certifi nor gocertifi build on nss-cert. Addind some update mechanism into the Guix package is not a good idea IMO: This would make “erlang-certif@2.9.0“ contain different certificates than the release 2.9.0, making debugging a hell. > As such, can this package be avoided as dependency? As of now, rebar3 does not support SSL_CERT_DIR/…. Anyhow there is already an open ticket [3] for. Other libraries/application might still need erlang-certifi, like some need python-certifi or gocertif. So anyhow we should keep this package. [1] https://github.com/certifi/python-certifi [2] https://github.com/certifi/gocertifi [3] https://github.com/erlang/rebar3/issues/2696 -- Regards Hartmut Goebel | Hartmut Goebel | h.goebel@crazy-compilers.com | | www.crazy-compilers.com | compilers which you thought are impossible |]