Hi Eelco, thank you for your help, but apparently this doesn't work. Here is what I did (in case someone can spot an error): I installed cacert from nixpkgs and I set
$ export OPENSSL_X509_CERT_FILE=/nix/store/0gyh9310jyp8q424g35lig7fp08n6mhm-cacert-20120628/etc/ca-bundle.crt $ head -n4 $OPENSSL_X509_CERT_FILE ## ## ca-bundle.crt -- Bundle of CA Root Certificates ## ## Certificate data from Mozilla as of: Thu Jun 28 15:03:08 2012 But I still get the same error: $ git push origin error: SSL certificate problem: unable to get local issuer certificate while accessing https://github.com/maggesi/nixpkgs.git/info/refs fatal: HTTP request failed The same problem arise with other tools, e.g. $ curl https://github.com/maggesi/nixpkgs.git curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: http://curl.haxx.se/docs/sslcerts.html However the certificate bundle seems valid: $ curl --cacert $OPENSSL_X509_CERT_FILE https://github.com/maggesi/nixpkgs.git <html> <head><title>301 Moved Permanently</title></head> <body bgcolor="white"> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.0.13</center> </body> </html> 2012/7/22 Eelco Dolstra <[email protected]> > Hi, > > (resend to list) > > On 22/07/12 11:55, Marco Maggesi wrote: > > > I installed git with nix on darwin. > > When I try to use remote (github) repositories I get an SSL error: > > > > soyuz:nixpkgs maggesi$ git pull > > error: SSL certificate problem: unable to get local issuer certificate > while > > accessing https://github.com/maggesi/nixpkgs.git/info/refs > > fatal: HTTP request failed > > OpenSSL in Nixpkgs expects the environment variable > $OPENSSL_X509_CERT_FILE to > point to an SSL certificate bundle. On NixOS this is > /etc/ssl/certs/ca-bundle.crt. If you don't have a similar file on Mac OS > X, you > can install the cacert package from Nixpkgs. > > -- > Eelco Dolstra | LogicBlox, Inc. | http://nixos.org/~eelco/ > _______________________________________________ > nix-dev mailing list > [email protected] > http://lists.science.uu.nl/mailman/listinfo/nix-dev >
_______________________________________________ nix-dev mailing list [email protected] http://lists.science.uu.nl/mailman/listinfo/nix-dev
