Ricardo Wurmus <ricardo.wur...@mdc-berlin.de> writes:
> ng0 <n...@we.make.ritual.n0.is> writes:
>
>> Ludovic Courtès <l...@gnu.org> writes:
>>
>>> Hi,
>>>
>>> ng0 <n...@we.make.ritual.n0.is> skribis:
>>>
>>>>> The ‘nss-certs’ package provides X.509 certificates:
>>>>>
>>>>>
>>>>> https://www.gnu.org/software/guix/manual/html_node/X_002e509-Certificates.html
>>>>
>>>> I commented nss-certs, enabled or disabled it made no difference to the
>>>> resulting binary.
>>>
>>> You need to have ‘nss-certs’ installed, *and* set the environment
>>> variables mentioned above (depending on whether you use OpenSSL, GnuTLS,
>>> Git, etc.; for GnuTLS, I think there’s no such environment variable.)
>>>
>>> HTH!
>>> Ludo’.
>>
>> Thanks.
>>
>> Can you be more specific on why it could fail when all of this is set in
>> the user environment? I did all of this, and it still fails. environment
>> values exported in my user profile, nss-certs installed in user profile
>> and system wide, set nss-certs as an input of pbpst, still:
>
> What environment variables did you set? The patch for pbpst is very
> hard to read, so it’s not obvious what you tried.
>
> If this tool just shells out to “curl” then it might respect
> “CURL_CA_BUNDLE” as per the Curl documentation.
>
> ~~ Ricardo
I had CURL_CA_BUNDLE set, in my profile. This is what I assume I need
to do, I've done so and yet it failed. nss-certs is in my profile. I
don't know what else I should try.
ng0@shadowwalker ~$ echo $CURL_CA_BUNDLE
/home/ng0/.guix-profile/etc/ssl/certs/ca-certificates.crt
--
ng0
