Re: HELP needed with CA certificates! [PATCH] gnu: Add tup, Add pbpst.

[Ricardo Wurmus <ricardo.wurmus@mdc-berlin.de>]

ng0 <ng0@we.make.ritual.n0.is> writes:

> Ludovic Courtès <ludo@gnu.org> writes:
>
>> Hi,
>>
>> ng0 <ng0@we.make.ritual.n0.is> skribis:
>>
>>>> The ‘nss-certs’ package provides X.509 certificates:
>>>>
>>>>   https://www.gnu.org/software/guix/manual/html_node/X_002e509-Certificates.html
>>>
>>> I commented nss-certs, enabled or disabled it made no difference to the
>>> resulting binary.
>>
>> You need to have ‘nss-certs’ installed, *and* set the environment
>> variables mentioned above (depending on whether you use OpenSSL, GnuTLS,
>> Git, etc.; for GnuTLS, I think there’s no such environment variable.)
>>
>> HTH!
>> Ludo’.
>
> Thanks.
>
> Can you be more specific on why it could fail when all of this is set in
> the user environment? I did all of this, and it still fails. environment
> values exported in my user profile, nss-certs installed in user profile
> and system wide, set nss-certs as an input of pbpst, still:

What environment variables did you set?  The patch for pbpst is very
hard to read, so it’s not obvious what you tried.

If this tool just shells out to “curl” then it might respect
“CURL_CA_BUNDLE” as per the Curl documentation.

~~ Ricardo