У вт, 2026-06-09 у 22:53 +0000, g|ass.Houses via пише:
> Hello Guix Team! I discovered an issue related to my last message. It
> seems that I am missing CA-certificates. I was trying to use a
> flatpak, Lutris, and discovered that I can't install anything without
> these certificates. For example, trying to add a game gives me an
> error that says:
> 
> Could not find a suitable bundle, invalid path: /home/user/.guix-
> profile/etc/ssl/certs/ca-certificate.crt
> 
> I had to manually export the certificate file since it was missing in
> the first place, but it doesn't seem to work. From my research, it
> seems the certificates must be updated, but I don't see an equivalent
> command on Guix for "update-ca-certificates". Any help will be
> appreciated

I do not have a bundle at the path which is indicated in your error
message on my Guix System installation. I wonder which variable does it
come from. What does the following report on your system?

$ echo "$SSL_CERT_FILE"
/run/current-system/profile/etc/ssl/certs/ca-certificates.crt

Note that I also have an issue with that path, so it is not right
either. See: https://codeberg.org/guix/guix/issues/9150

Does this work?

$ SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt flatpak run net.lutris.Lutris

I noticed that I encounter the same issue with Lutris as you, unless I
specify that path. So, you must be having a variation of the issue
which I reported in #9150.

$ flatpak run net.lutris.Lutris
2026-06-10 08:21:17,803: Download failed: Could not find a suitable TLS
CA certificate bundle, invalid path: /run/current-
system/profile/etc/ssl/certs/ca-certificates.crt
Traceback (most recent call last):
  File "/app/lib/python3.13/site-packages/lutris/util/downloader.py",
line 146, in async_download
    response = requests.get(self.url, headers=headers, stream=True,
timeout=30, cookies=self.cookies)
  File "/app/lib/python3.13/site-packages/requests/api.py", line 73, in
get
    return request("get", url, params=params, **kwargs)
  File "/app/lib/python3.13/site-packages/requests/api.py", line 59, in
request
    return session.request(method=method, url=url, **kwargs)
           ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/lib/python3.13/site-packages/requests/sessions.py", line
587, in request
    resp = self.send(prep, **send_kwargs)
  File "/app/lib/python3.13/site-packages/requests/sessions.py", line
701, in send
    r = adapter.send(request, **kwargs)
  File "/app/lib/python3.13/site-packages/requests/adapters.py", line
460, in send
    self.cert_verify(conn, request.url, verify, cert)
    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/lib/python3.13/site-packages/requests/adapters.py", line
263, in cert_verify
    raise OSError(
    ...<2 lines>...
    )
OSError: Could not find a suitable TLS CA certificate bundle, invalid
path: /run/current-system/profile/etc/ssl/certs/ca-certificates.crt


Roman

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to