GNU bug report logs - #35773
hexchat: unable to get local issuer certificate

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 35773 in the body.
You can then email your comments to 35773 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Jeff Bauer <jbauer <at> rubic.com>
To: bug-guix <at> gnu.org
Subject: hexchat: unable to get local issuer certificate
Date: Fri, 17 May 2019 08:26:01 -0500

I've installed the hexchat 2.14.2 package onto two
different Ubuntu systems (16.04, 18.04), and get the
following error when attempting to log onto freenode:

"Connection failed (unable to get local issuer certificate.? (20))"

There's no problem when I revert back to the official
distro version of hexchat.

I've also installed the 'le-certs' package, but it appears
that hexchat still cannot get the local cert.

Please let me know if there's any further information
I can provide.  Thanks.

-Jeff

Message #8 received at 35773 <at> debbugs.gnu.org (full text, mbox):

From: Giovanni Biscuolo <g <at> xelera.eu>
To: Jeff Bauer <jbauer <at> rubic.com>, 35773 <at> debbugs.gnu.org
Subject: Re: bug#35773: hexchat: unable to get local issuer certificate
Date: Fri, 17 May 2019 19:58:15 +0200

[Message part 1 (text/plain, inline)]

Hello Jeff,

Jeff Bauer <jbauer <at> rubic.com> writes:

[...]

> I've also installed the 'le-certs' package, but it appears
> that hexchat still cannot get the local cert.

AFAIU you nees nss-certs [1] Guix package

Please can you try installing it and report back if this works for you?

HTH! Gio'.

[...]

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[signature.asc (application/pgp-signature, inline)]

Message #11 received at 35773 <at> debbugs.gnu.org (full text, mbox):

From: Jeff Bauer <jbauer <at> rubic.com>
To: Giovanni Biscuolo <g <at> xelera.eu>
Cc: 35773 <at> debbugs.gnu.org
Subject: Re: bug#35773: hexchat: unable to get local issuer certificate
Date: Fri, 17 May 2019 13:27:25 -0500

Giovanni,

Sorry, but the same problem with nss-certs installed.

-Jeff

On Fri, May 17, 2019 at 07:58:15PM +0200, Giovanni Biscuolo wrote:
> Hello Jeff,
>
> Jeff Bauer <jbauer <at> rubic.com> writes:
>
> [...]
>
> > I've also installed the 'le-certs' package, but it appears
> > that hexchat still cannot get the local cert.
>
> AFAIU you nees nss-certs [1] Guix package
>
> Please can you try installing it and report back if this works for you?
>
> HTH! Gio'.
>
> [...]
>
> --
> Giovanni Biscuolo
>
> Xelera IT Infrastructures

Message #14 received at 35773 <at> debbugs.gnu.org (full text, mbox):

From: Giovanni Biscuolo <g <at> xelera.eu>
To: Jeff Bauer <jbauer <at> rubic.com>
Cc: 35773 <at> debbugs.gnu.org
Subject: Re: bug#35773: hexchat: unable to get local issuer certificate
Date: Sat, 18 May 2019 09:24:05 +0200

[Message part 1 (text/plain, inline)]

Hello Jeff,

Jeff Bauer <jbauer <at> rubic.com> writes:

> Sorry, but the same problem with nss-certs installed.

Sorry I gave you a partial solution, the full solition is to add the
documented variables to your env, please read:

https://www.gnu.org/software/guix/manual/en/html_node/X_002e509-Certificates.html

Adding

--8<---------------cut here---------------start------------->8---

export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"

--8<---------------cut here---------------end--------------->8---

should work

HTH! Gio'.

[...]

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[signature.asc (application/pgp-signature, inline)]

Message #17 received at 35773 <at> debbugs.gnu.org (full text, mbox):

From: Jeff Bauer <jbauer <at> rubic.com>
To: Giovanni Biscuolo <g <at> xelera.eu>
Cc: 35773 <at> debbugs.gnu.org
Subject: Re: bug#35773: hexchat: unable to get local issuer certificate
Date: Sat, 18 May 2019 07:24:35 -0500

Giovanni,

Thanks, that does the trick!  For the record,
this is what I've put in my .bashrc as a check
if I change environments:

# Guix Profile
GUIX_PROFILE="$HOME/.guix-profile"
if [ -d $GUIX_PROFILE ] || [ -h $GUIX_PROFILE ] ; then
    export GUIX_PROFILE
    export GUIX_LOCPATH=$GUIX_PROFILE/lib/locale/
    export SSL_CERT_DIR="$GUIX_PROFILE/etc/ssl/certs"
    export SSL_CERT_FILE="$GUIX_PROFILE/etc/ssl/certs/ca-certificates.crt"
    if [ ! -f $SSL_CERT_FILE ] ; then
        echo "Missing nss-certs: $SSL_CERT_FILE"
    fi
    source $GUIX_PROFILE/etc/profile
fi


-Jeff

On Sat, May 18, 2019 at 09:24:05AM +0200, Giovanni Biscuolo wrote:
> Hello Jeff,
>
> Jeff Bauer <jbauer <at> rubic.com> writes:
>
> > Sorry, but the same problem with nss-certs installed.
>
> Sorry I gave you a partial solution, the full solition is to add the
> documented variables to your env, please read:
>
> https://www.gnu.org/software/guix/manual/en/html_node/X_002e509-Certificates.html
>
> Adding
>
> --8<---------------cut here---------------start------------->8---
>
> export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
> export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
>
> --8<---------------cut here---------------end--------------->8---
>
> should work
>
> HTH! Gio'.
>
> [...]
>
> --
> Giovanni Biscuolo
>
> Xelera IT Infrastructures

Message #22 received at 35773-done <at> debbugs.gnu.org (full text, mbox):

From: Royce Strange <royball <at> disroot.org>
To: 35773-done <at> debbugs.gnu.org
Subject: hexchat: unable to get local issuer certificate
Date: Wed, 10 Jun 2020 09:23:42 -0500

Hello.

Giovanni Biscuolo helped Jeff Bauer fix his issue.

Closing.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.