As you said, my $SSL_CERT_DIR was messed up: "/home/jelle/.guix-profile/etc/ssl/certs:/etc/ssl/certs".
It seems that several tools dislike having :-delimited directories in SSL_CERT_DIR, I guess? Either way, uninstalling nss-certs from my user profile, and leaving it in my system definition as before, fixed the issue. Kind of a bummer actually, as I really like sharing my user manifest files between Guix and GuixSD machines. Thanks Ludo! 2018-07-27 1:23 GMT+02:00 Ludovic Courtès <[email protected]>: > Hello Jelle, > > Jelle Licht <[email protected]> skribis: > > > $ guix import elpa org > > Backtrace: > > 13 (primitive-load "/home/jelle/.config/guix/current/bin/g…") > > In guix/ui.scm: > > 1579:12 12 (run-guix-command _ . _) > > In guix/scripts/import.scm: > > 115:11 11 (guix-import . _) > > In guix/scripts/import/elpa.scm: > > 108:23 10 (guix-import-elpa . _) > > In guix/import/elpa.scm: > > 249:2 9 (elpa->guix-package "org" _) > > 182:13 8 (fetch-elpa-package "org" _) > > 113:18 7 (elpa-package-info "org" _) > > 85:21 6 (elpa-fetch-archive _) > > In ice-9/boot-9.scm: > > 829:9 5 (catch system-error #<procedure 10fb300 at guix/http-c…> …) > > 829:9 4 (catch srfi-34 #<procedure 10e6f50 at guix/http-client…> …) > > In guix/http-client.scm: > > 182:20 3 (_) > > 88:25 2 (http-fetch _ #:port _ #:text? _ #:buffered? _ # _ # _ # …) > > In guix/build/download.scm: > > 398:4 1 (open-connection-for-uri _ #:timeout _ # _) > > 296:6 0 (tls-wrap #<closed: file 101f0e0> _ # _) > > > > guix/build/download.scm:296:6: In procedure tls-wrap: > > X.509 certificate of 'elpa.gnu.org' could not be verified: > > signer-not-found > > invalid > > This means that the certificate could not be validated, probably due to > missing certificates. > > Could you make sure to install ‘nss-cert’ and to define ‘SSL_CERT_DIR’ > accordingly? See > <https://www.gnu.org/software/guix/manual/en/html_node/X_ > 002e509-Certificates.html>. > > HTH, > Ludo’. >
