Re: Should we include nss-certs out of the box?

2024-04-25 Thread Clément Lassieur
Hello! On Thu, Apr 25 2024, Maxim Cournoyer wrote: > Clément Lassieur writes: > >> On Wed, Apr 03 2024, Maxim Cournoyer wrote: >> >>> It's been Guix policy to let people choose whether to install or not TLS >>> root certificates and which one to their machine. While I applaud the >>> idea to

Re: Should we include nss-certs out of the box?

2024-04-25 Thread Maxim Cournoyer
Hello! Clément Lassieur writes: > On Wed, Apr 03 2024, Maxim Cournoyer wrote: > >> It's been Guix policy to let people choose whether to install or not TLS >> root certificates and which one to their machine. While I applaud the >> idea to have the users make a conscious decision about it, in

Re: Should we include nss-certs out of the box?

2024-04-23 Thread Clément Lassieur
On Wed, Apr 03 2024, Maxim Cournoyer wrote: > It's been Guix policy to let people choose whether to install or not TLS > root certificates and which one to their machine. While I applaud the > idea to have the users make a conscious decision about it, in practice I > suppose very few of us

Re: Should we include nss-certs out of the box?

2024-04-23 Thread pelzflorian (Florian Pelz)
Fabio Natali writes: > For what it's worth, I put together a micro-patch and sent it over as a > follow-up to #70451. Pushed as 67a3a83170c038d2eb084d3f53a7ea7b033aea74. Thank you! Regards, Florian

Re: Should we include nss-certs out of the box?

2024-04-21 Thread Fabio Natali
On 2024-04-20, 11:06 +0100, Fabio Natali wrote: > I'll send an update here. Hi Maxim, There's a couple of mentions of 'nss-certs' in the manual that might be rephrased to reflect '65e8472a4b6fc6f66871ba0dad518b7d4c63595e'. For what it's worth, I put together a micro-patch and sent it over as a

Re: Should we include nss-certs out of the box?

2024-04-20 Thread Fabio Natali
On 2024-04-19, 11:25 -0400, Maxim Cournoyer wrote: > Could you please take a look at > '65e8472a4b6fc6f66871ba0dad518b7d4c63595e', which I hope didn't leave > no longer useful 'nss-certs' doc/examples behind ? Hi Maxim, absolutely, I should be able to give a look today or tomorrow. I'll send an

Re: Should we include nss-certs out of the box?

2024-04-19 Thread Maxim Cournoyer
Hi Fabio, Fabio Natali writes: > Hi, > > Here's my attempt at adding 'nss-certs' to '%default-packages'. > > https://lists.gnu.org/archive/html/guix-patches/2024-04/msg01187.html > > I've removed the 'nss-certs' entry from the installer, as suggested by > Ludo, and I've updated the docs,

Re: Should we include nss-certs out of the box?

2024-04-18 Thread Maxim Cournoyer
Hello, Ludovic Courtès writes: [...] >> It apparently even makes it impossible to run 'guix pull', if I am to >> believe bug#62026. > > I don’t think that’s the case: see use of ‘le-certs’ in (guix scripts > pull). OK, good to know! > >> Should we do as in bug#62026 and have this package be

Re: Should we include nss-certs out of the box?

2024-04-18 Thread Fabio Natali
Hi, Here's my attempt at adding 'nss-certs' to '%default-packages'. https://lists.gnu.org/archive/html/guix-patches/2024-04/msg01187.html I've removed the 'nss-certs' entry from the installer, as suggested by Ludo, and I've updated the docs, hopefully all the relevant parts. Can you think of

Re: Should we include nss-certs out of the box?

2024-04-10 Thread Ludovic Courtès
Hi, Maxim Cournoyer skribis: > It's been Guix policy to let people choose whether to install or not TLS > root certificates and which one to their machine. While I applaud the > idea to have the users make a conscious decision about it, in practice I > suppose very few of us choose to *not*

Re: Should we include nss-certs out of the box?

2024-04-08 Thread Richard Sent
I wonder if instead (or in addition to) a step should be added to the default profile to symlink nss-certs to /etc/ssl/certs/ca-certificates.crt? Consider running $ guix shell rust:cargo nss-certs -CN -- cargo search ox. On c9cd16c630 this will fail with --8<---cut

Re: Should we include nss-certs out of the box?

2024-04-05 Thread Jan Wielkiewicz
On Wed, 03 Apr 2024 14:06:37 -0400 Maxim Cournoyer wrote: > Hi, > > It's been Guix policy to let people choose whether to install or not > TLS root certificates and which one to their machine. While I > applaud the idea to have the users make a conscious decision about > it, in practice I

Re: Should we include nss-certs out of the box?

2024-04-03 Thread Development of GNU Guix and the GNU System distribution.
Hi Maxim, On Wed, Apr 03 2024, Maxim Cournoyer wrote: > I applaud the idea to have the users make a conscious decision Who does? > It apparently even makes it impossible to run 'guix pull' More than that, the references to online sources in our package declarations are useless. Would it be

Re: Should we include nss-certs out of the box?

2024-04-03 Thread Ryan Prior
On Wednesday, April 3rd, 2024 at 1:06 PM, Maxim Cournoyer wrote: > Is anyone opposed to having nss-certs in %base-packages? I applaud that plan. Not only that, I think that Guix should warn if you don't have nss-certs in your profile on a foreign distro (with a mechanism to suppress that,

Should we include nss-certs out of the box?

2024-04-03 Thread Maxim Cournoyer
Hi, It's been Guix policy to let people choose whether to install or not TLS root certificates and which one to their machine. While I applaud the idea to have the users make a conscious decision about it, in practice I suppose very few of us choose to *not* install any as that basically breaks