On Fri, Sep 16, 2016 at 02:42:37PM +0000, ng0 wrote: > Ricardo Wurmus <ricardo.wur...@mdc-berlin.de> writes: > > > ng0 <n...@we.make.ritual.n0.is> writes: > > > >> Ludovic Courtès <l...@gnu.org> writes: > >> > >>> Hi, > >>> > >>> ng0 <n...@we.make.ritual.n0.is> skribis: > >>> > >>>>> The ‘nss-certs’ package provides X.509 certificates: > >>>>> > >>>>> > >>>>> https://www.gnu.org/software/guix/manual/html_node/X_002e509-Certificates.html > >>>> > >>>> I commented nss-certs, enabled or disabled it made no difference to the > >>>> resulting binary. > >>> > >>> You need to have ‘nss-certs’ installed, *and* set the environment > >>> variables mentioned above (depending on whether you use OpenSSL, GnuTLS, > >>> Git, etc.; for GnuTLS, I think there’s no such environment variable.) > >>> > >>> HTH! > >>> Ludo’. > >> > >> Thanks. > >> > >> Can you be more specific on why it could fail when all of this is set in > >> the user environment? I did all of this, and it still fails. environment > >> values exported in my user profile, nss-certs installed in user profile > >> and system wide, set nss-certs as an input of pbpst, still: > > > > What environment variables did you set? The patch for pbpst is very > > hard to read, so it’s not obvious what you tried. > > > > If this tool just shells out to “curl” then it might respect > > “CURL_CA_BUNDLE” as per the Curl documentation. > > > > ~~ Ricardo > > I had CURL_CA_BUNDLE set, in my profile. This is what I assume I need > to do, I've done so and yet it failed. nss-certs is in my profile. I > don't know what else I should try. > > ng0@shadowwalker ~$ echo $CURL_CA_BUNDLE > /home/ng0/.guix-profile/etc/ssl/certs/ca-certificates.crt
This looks related to the issues I'm having with the Darcs package. Darcs uses libcurl, but can't find the certificates at runtime, despite CURL_CA_BUNDLE being set correctly.
