Hi Ludovic, Ludovic Courtès <[email protected]> writes:
[...] > Code like (guix build download) reads /etc/ssl/certs/*.crt and IIUC some > distros are no longer shipping these files. > > I wonder whether/how we should update our code so that it does the right > thing on those systems as well. If it uses gnutls, which I assume it is, there should be no way to manually load in certs, given that gnutls already transitively has access to nss-certs through its use of p11-kit for its trust store, which itself has nss-certs certificates in its trust root. An example of an application that just works and relies on gnutls is wget; perhaps it can provide hints. -- Thanks, Maxim
