GNU logs - #46829, boring messages


Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Christopher Baines <mail@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sun, 28 Feb 2021 10:28:02 +0000
Resent-Message-ID: <handler.46829.B.161450803313522 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: report 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 46829 <at> debbugs.gnu.org
X-Debbugs-Original-To: bug-guix@HIDDEN
Received: via spool by submit <at> debbugs.gnu.org id=B.161450803313522
          (code B ref -1); Sun, 28 Feb 2021 10:28:02 +0000
Received: (at submit) by debbugs.gnu.org; 28 Feb 2021 10:27:13 +0000
Received: from localhost ([127.0.0.1]:45888 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lGJI9-0003W2-39
	for submit <at> debbugs.gnu.org; Sun, 28 Feb 2021 05:27:13 -0500
Received: from lists.gnu.org ([209.51.188.17]:33786)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mail@HIDDEN>) id 1lGJI6-0003Vu-UC
 for submit <at> debbugs.gnu.org; Sun, 28 Feb 2021 05:27:11 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10]:53842)
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <mail@HIDDEN>) id 1lGJI6-0006V9-OD
 for bug-guix@HIDDEN; Sun, 28 Feb 2021 05:27:10 -0500
Received: from mira.cbaines.net
 ([2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27]:54029)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <mail@HIDDEN>) id 1lGJI4-0002Gr-T6
 for bug-guix@HIDDEN; Sun, 28 Feb 2021 05:27:10 -0500
Received: from localhost (unknown [IPv6:2a02:8010:68c1:0:8ac0:b4c7:f5c8:7caa])
 by mira.cbaines.net (Postfix) with ESMTPSA id 33A5127BC4C
 for <bug-guix@HIDDEN>; Sun, 28 Feb 2021 10:27:06 +0000 (GMT)
Received: from capella (localhost [127.0.0.1])
 by localhost (OpenSMTPD) with ESMTP id 86690319
 for <bug-guix@HIDDEN>; Sun, 28 Feb 2021 10:27:04 +0000 (UTC)
User-agent: mu4e 1.4.15; emacs 27.1
From: Christopher Baines <mail@HIDDEN>
Date: Sun, 28 Feb 2021 10:27:02 +0000
Message-ID: <871rd0ebd5.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
Received-SPF: pass client-ip=2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27;
 envelope-from=mail@HIDDEN; helo=mira.cbaines.net
X-Spam_score_int: -18
X-Spam_score: -1.9
X-Spam_bar: -
X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

I believe there's TLS issues with pulling for the current 1.2.0 release.

root@horna ~# guix pull
substitute: updating substitutes from 'https://guix.cbaines.net'... 100.0%
0.0 MB will be downloaded
downloading from https://guix.cbaines.net/nar/lzip/zg72c146skpca45ijvjigqhq=
gx0mwiny-le-certs-0 ...
 le-certs-0  4KiB                                                          =
                                                                           =
                      1.8MiB/s 00:00 [##################] 100.0%

Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.or=
g/git/guix.git'...
guix pull: error: Git error: the SSL certificate is invalid

root@horna ~# wget https://git.savannah.gnu.org/git/guix.git
=2D-2021-02-28 11:22:49--  https://git.savannah.gnu.org/git/guix.git
Resolving git.savannah.gnu.org (git.savannah.gnu.org)... 209.51.188.201, 20=
01:470:142:5::201
Connecting to git.savannah.gnu.org (git.savannah.gnu.org)|209.51.188.201|:4=
43... connected.
ERROR: The certificate of =E2=80=98git.savannah.gnu.org=E2=80=99 is not tru=
sted.
ERROR: The certificate of =E2=80=98git.savannah.gnu.org=E2=80=99 doesn't ha=
ve a known issuer.


This is probably possible to work around by doing:

  guix pull --url=3Dhttp://git.savannah.gnu.org/git/guix.git

As the commit signatures are checked, the risk of not using HTTPS should
be reduced.

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQKlBAEBCgCPFiEEPonu50WOcg2XVOCyXiijOwuE9XcFAmA7b/ZfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF
ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcRHG1haWxAY2Jh
aW5lcy5uZXQACgkQXiijOwuE9XeOqA/9EdO2KeqvOTkTncwzaaBseIXXUy38m167
xnTELIZbibF5ZyiuUA2qZ3svEvgmfDcXT5Fo7lKjKhtXlRihzjWfxkagDITGq0qT
EuMbB+DWDY/vUnD9IWWCyh14x6kfZWb9Am6qYSHPO6WTfVrBzaxe8MYNshHlEMXi
AABAy+ccUmDLcRSmgi532PDV/DQsMgn9oc5zzIOVMq55UzbtLsyp8JkbXnzjCkpk
sNws1lxsheLpGKPUuaNCW94tPrF96R+ZXj+qbQ+HeMNIVGErG2QhnUzVgAA7wm6M
XFC9/ij7AX9gwxHvhN0Zf8pOIFIiPKFstVXZi2ebdFbTnRUgg5P4Esgd7maXxCx2
YG3ktGeopfOdRHMc+przfwtLGM5snRvI8yIKyCXqgbJuRVhHhV7+4B1aeBCyCx2X
3qdyzWqSIgezrWqpUI25rDlCyvxgOOwso67pAgbFpNEZYOX9sNvRnbuwi7LQRssc
t/mqFos65ajp8RRVDaLwFvksI5twuF9/B8hi1IVjADS72K6dv+wSHKFzBlUYP0RB
wcKB9jZ70zORW4ALvWAYUaclKns1Ed5a5m588GSkt1Z6DSRYJVl5Jm7hk07gsZ7/
AEDpBeec4cYjWDAMxfdFBMmcDU6bLivAICMf2s0xscsRp2cEaB0rHDVKTR4r9zcg
Se5uA5WSwfs=
=8Wb6
-----END PGP SIGNATURE-----
--=-=-=--




Message sent:


Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Christopher Baines <mail@HIDDEN>
Subject: bug#46829: Acknowledgement (Fresh install of 1.2.0 can't guix pull)
Message-ID: <handler.46829.B.161450803313522.ack <at> debbugs.gnu.org>
References: <871rd0ebd5.fsf@HIDDEN>
X-Gnu-PR-Message: ack 46829
X-Gnu-PR-Package: guix
Reply-To: 46829 <at> debbugs.gnu.org
Date: Sun, 28 Feb 2021 10:28:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 46829 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
46829: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D46829
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems


Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Andreas Enge <andreas@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sun, 28 Feb 2021 11:07:02 +0000
Resent-Message-ID: <handler.46829.B46829.161451040517017 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161451040517017
          (code B ref 46829); Sun, 28 Feb 2021 11:07:02 +0000
Received: (at 46829) by debbugs.gnu.org; 28 Feb 2021 11:06:45 +0000
Received: from localhost ([127.0.0.1]:45919 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lGJuP-0004QP-BS
	for submit <at> debbugs.gnu.org; Sun, 28 Feb 2021 06:06:45 -0500
Received: from hera.aquilenet.fr ([185.233.100.1]:51546)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <andreas@HIDDEN>) id 1lGJuO-0004QB-3U
 for 46829 <at> debbugs.gnu.org; Sun, 28 Feb 2021 06:06:44 -0500
Received: from localhost (localhost [127.0.0.1])
 by hera.aquilenet.fr (Postfix) with ESMTP id A397217C;
 Sun, 28 Feb 2021 12:06:37 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at aquilenet.fr
Received: from hera.aquilenet.fr ([127.0.0.1])
 by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id V81OmBj6iOZA; Sun, 28 Feb 2021 12:06:36 +0100 (CET)
Received: from jurong (unknown [IPv6:2001:910:103f::72d])
 by hera.aquilenet.fr (Postfix) with ESMTPSA id 62439FC;
 Sun, 28 Feb 2021 12:06:36 +0100 (CET)
Date: Sun, 28 Feb 2021 12:06:34 +0100
From: Andreas Enge <andreas@HIDDEN>
Message-ID: <YDt5OveAM8d/Ngmx@jurong>
References: <871rd0ebd5.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <871rd0ebd5.fsf@HIDDEN>
X-Spamd-Bar: /
Authentication-Results: hera.aquilenet.fr
X-Rspamd-Server: hera
X-Rspamd-Queue-Id: A397217C
X-Spamd-Result: default: False [-0.50 / 15.00]; ARC_NA(0.00)[];
 RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[];
 TO_DN_SOME(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[];
 MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_TWO(0.00)[2];
 RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[];
 MID_RHS_NOT_FQDN(0.50)[];
 FORGED_RECIPIENTS(2.00)[mail@HIDDEN ..,andreas.enge@HIDDEN ...];
 RCVD_COUNT_TWO(0.00)[2]; BAYES_HAM(-3.00)[100.00%]
X-Spam-Score: 0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.3 (/)

Am Sun, Feb 28, 2021 at 10:27:02AM +0000 schrieb Christopher Baines:
> I believe there's TLS issues with pulling for the current 1.2.0 release.
> Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.org/git/guix.git'...
> guix pull: error: Git error: the SSL certificate is invalid

I noticed the same for the following, slightly older version:
    repository URL: https://git.savannah.gnu.org/git/guix.git
    branch: master
    commit: 0939462e3f81bc98b38bdb7610e6a80ca1cbaa1b

And it also occurs with the current master checkout using
   ./pre-inst-env guix pull

I tried again after updating my nss-certs package, but it did not make
any difference.

This is on dover, an aarch64 machine. I successfully did "guix pull"
on other machines, however.

Andreas





Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Andreas Enge <andreas@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sun, 28 Feb 2021 11:11:02 +0000
Resent-Message-ID: <handler.46829.B46829.161451062617345 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161451062617345
          (code B ref 46829); Sun, 28 Feb 2021 11:11:02 +0000
Received: (at 46829) by debbugs.gnu.org; 28 Feb 2021 11:10:26 +0000
Received: from localhost ([127.0.0.1]:45923 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lGJxx-0004Vh-R6
	for submit <at> debbugs.gnu.org; Sun, 28 Feb 2021 06:10:26 -0500
Received: from hera.aquilenet.fr ([185.233.100.1]:51596)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <andreas@HIDDEN>) id 1lGJxv-0004VT-Mi
 for 46829 <at> debbugs.gnu.org; Sun, 28 Feb 2021 06:10:24 -0500
Received: from localhost (localhost [127.0.0.1])
 by hera.aquilenet.fr (Postfix) with ESMTP id 1662E32F;
 Sun, 28 Feb 2021 12:10:18 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at aquilenet.fr
Received: from hera.aquilenet.fr ([127.0.0.1])
 by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id KNmrtc2OwxvP; Sun, 28 Feb 2021 12:10:17 +0100 (CET)
Received: from jurong (unknown [IPv6:2001:910:103f::72d])
 by hera.aquilenet.fr (Postfix) with ESMTPSA id 10AA6FC;
 Sun, 28 Feb 2021 12:10:16 +0100 (CET)
Date: Sun, 28 Feb 2021 12:10:15 +0100
From: Andreas Enge <andreas@HIDDEN>
Message-ID: <YDt6F596AjlNoW1o@jurong>
References: <871rd0ebd5.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <871rd0ebd5.fsf@HIDDEN>
X-Spamd-Bar: /
Authentication-Results: hera.aquilenet.fr
X-Rspamd-Server: hera
X-Rspamd-Queue-Id: 1662E32F
X-Spamd-Result: default: False [-0.50 / 15.00]; ARC_NA(0.00)[];
 RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[];
 TO_DN_SOME(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[];
 MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_TWO(0.00)[2];
 RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[];
 MID_RHS_NOT_FQDN(0.50)[];
 FORGED_RECIPIENTS(2.00)[mail@HIDDEN ..,andreas.enge@HIDDEN ...];
 RCVD_COUNT_TWO(0.00)[2]; BAYES_HAM(-3.00)[100.00%]
X-Spam-Score: 0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.3 (/)

Am Sun, Feb 28, 2021 at 10:27:02AM +0000 schrieb Christopher Baines:
> This is probably possible to work around by doing:
>   guix pull --url=http://git.savannah.gnu.org/git/guix.git

This works, thanks for sharing! But it prints a nonsensical warning message:
Updating channel 'guix' from Git repository at 'http://git.savannah.gnu.org/git/guix.git'...
Authenticating channel 'guix', commits 9edb3f6 to bebfe06 (7,806 new commits)...
guix pull: warning: pulled channel 'guix' from a mirror of https://git.savannah.gnu.org/git/guix.git, which might be stale
Building from this channel:
  guix      http://git.savannah.gnu.org/git/guix.git	bebfe06

It is weird to call the https location a potentially stale mirror of the
http location.

Andreas





Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: zimoun <zimon.toutoune@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 01 Mar 2021 10:03:01 +0000
Resent-Message-ID: <handler.46829.B46829.161459293925060 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161459293925060
          (code B ref 46829); Mon, 01 Mar 2021 10:03:01 +0000
Received: (at 46829) by debbugs.gnu.org; 1 Mar 2021 10:02:19 +0000
Received: from localhost ([127.0.0.1]:48169 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lGfNa-0006Vs-Oc
	for submit <at> debbugs.gnu.org; Mon, 01 Mar 2021 05:02:18 -0500
Received: from mail-wr1-f54.google.com ([209.85.221.54]:39006)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <zimon.toutoune@HIDDEN>) id 1lGfNZ-0006QJ-5z
 for 46829 <at> debbugs.gnu.org; Mon, 01 Mar 2021 05:02:17 -0500
Received: by mail-wr1-f54.google.com with SMTP id b18so8946412wrn.6
 for <46829 <at> debbugs.gnu.org>; Mon, 01 Mar 2021 02:02:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=from:to:subject:in-reply-to:references:date:message-id:mime-version;
 bh=ARWHYN0yntq/HJZpiRS203mbS6ySJIKQA4La0px7tmU=;
 b=NTCcEtiXVkI4kKicGhi12UdXpSPFLMVkoEDyhO5MPFXwWYDAq1a47P304uyWyGHpG7
 yq6Pxnt1VvBcX1/lQV4TPISP7mSisqikD/wJmyPsjrOZz359dd4liUamFpO/LTAkd+XD
 pSGrQIv0uylhCF6/LrPIwI8bMM0mrHaySwMWoXbfFfR1tAc2RNBWf8pCRQMdajVP/5L6
 jpclwWD3gQWLNg4H2fd29m56AM237NleYBSY+1RW0j4b74btWY0Mb0/0vucwL7ohtdy9
 MKIuD940DOSVO3vk+vG5g2jzTPHFjFnf3cAxgBN/BjRb+N6lCvQWB/EFQd7tanOy7wjD
 skXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:from:to:subject:in-reply-to:references:date
 :message-id:mime-version;
 bh=ARWHYN0yntq/HJZpiRS203mbS6ySJIKQA4La0px7tmU=;
 b=KfzDTIZga9++lYrSs/53Qp8wTgJ40LBiM7UwIWALaSqQTbNxEdmQvmAWJB4Z09FN7u
 jUuT56YTJZnEZqmIBceAslqva6D8ZLF0/6fM2EzBR4biy16tP7y4b/QSnAk/dQ8D+ihy
 XQH7gWwtFwPCzFMBkNPy/QSi7bs8kxPnrO9+CdK0RqfjjzKXPPE6D0azFBNldDI4JAoV
 lTiyyWnxTPdBrXpF5HdFNXThi/ACkeL+cslmxj71id4zCR0YdjlTZGksorhO/JWmMuIq
 P0L5eTVxz8NVAswnaTzRassgVBijRU27puXIBXg4ZO+SxHnzS+lCMett5aOSDbq8RreY
 I+BQ==
X-Gm-Message-State: AOAM533JbDspTMDfyuQy7jpWObnndB3mXabqu4GyGs9yG/B+E7floqC6
 yfJsK4ZvEPIaqHk4AwQhlyuLlx/O/NI=
X-Google-Smtp-Source: ABdhPJxXMNRmDwip/SdeE6YFhsQehdr+LLN7Ih5HcWDysVdKD7Hi8WQ9EwAyJTk3X7rSAJL4A1oLFQ==
X-Received: by 2002:adf:d0c9:: with SMTP id z9mr7447925wrh.396.1614592931149; 
 Mon, 01 Mar 2021 02:02:11 -0800 (PST)
Received: from lili ([2a01:e0a:59b:9120:65d2:2476:f637:db1e])
 by smtp.gmail.com with ESMTPSA id d204sm14177463wmc.17.2021.03.01.02.02.10
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Mon, 01 Mar 2021 02:02:10 -0800 (PST)
From: zimoun <zimon.toutoune@HIDDEN>
In-Reply-To: <871rd0ebd5.fsf@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN>
Date: Mon, 01 Mar 2021 10:49:14 +0100
Message-ID: <86r1kzyzj9.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Hi Chris,

On Sun, 28 Feb 2021 at 10:27, Christopher Baines <mail@HIDDEN> wrote:
> I believe there's TLS issues with pulling for the current 1.2.0
> release.

Is this bug different from <http://issues.guix.gnu.org/issue/44559#8>?

And fixes are also discussed here:
<http://issues.guix.gnu.org/issue/46650>.


Cheers,
simon




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 01 Mar 2021 10:16:02 +0000
Resent-Message-ID: <handler.46829.B46829.161459373627240 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Andreas Enge <andreas@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161459373627240
          (code B ref 46829); Mon, 01 Mar 2021 10:16:02 +0000
Received: (at 46829) by debbugs.gnu.org; 1 Mar 2021 10:15:36 +0000
Received: from localhost ([127.0.0.1]:48208 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lGfaS-00075H-2n
	for submit <at> debbugs.gnu.org; Mon, 01 Mar 2021 05:15:36 -0500
Received: from eggs.gnu.org ([209.51.188.92]:51054)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1lGfaQ-000754-IM
 for 46829 <at> debbugs.gnu.org; Mon, 01 Mar 2021 05:15:34 -0500
Received: from fencepost.gnu.org ([2001:470:142:3::e]:42404)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@HIDDEN>)
 id 1lGfaK-0006nQ-R1; Mon, 01 Mar 2021 05:15:28 -0500
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=50482 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1lGfaK-0000Gq-89; Mon, 01 Mar 2021 05:15:28 -0500
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <YDt6F596AjlNoW1o@jurong>
X-URL: http://www.fdn.fr/~lcourtes/
X-Revolutionary-Date: 11 =?UTF-8?Q?Vent=C3=B4se?= an 229 de la =?UTF-8?Q?R=C3=A9volution?=
X-PGP-Key-ID: 0x090B11993D9AEBB5
X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc
X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5
X-OS: x86_64-pc-linux-gnu
Date: Mon, 01 Mar 2021 11:15:27 +0100
In-Reply-To: <YDt6F596AjlNoW1o@jurong> (Andreas Enge's message of "Sun, 28 Feb
 2021 12:10:15 +0100")
Message-ID: <87eegztc1s.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi,

Andreas Enge <andreas@HIDDEN> skribis:

> This works, thanks for sharing! But it prints a nonsensical warning messa=
ge:
> Updating channel 'guix' from Git repository at 'http://git.savannah.gnu.o=
rg/git/guix.git'...
> Authenticating channel 'guix', commits 9edb3f6 to bebfe06 (7,806 new comm=
its)...
> guix pull: warning: pulled channel 'guix' from a mirror of https://git.sa=
vannah.gnu.org/git/guix.git, which might be stale
> Building from this channel:
>   guix      http://git.savannah.gnu.org/git/guix.git	bebfe06
>
> It is weird to call the https location a potentially stale mirror of the
> http location.

There=E2=80=99s no way to know that the two URLs point to the same thing, h=
ence
the message.

Thanks,
Ludo=E2=80=99.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 01 Mar 2021 10:20:02 +0000
Resent-Message-ID: <handler.46829.B46829.161459395927578 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161459395927578
          (code B ref 46829); Mon, 01 Mar 2021 10:20:02 +0000
Received: (at 46829) by debbugs.gnu.org; 1 Mar 2021 10:19:19 +0000
Received: from localhost ([127.0.0.1]:48213 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lGfe2-0007Ak-Ky
	for submit <at> debbugs.gnu.org; Mon, 01 Mar 2021 05:19:18 -0500
Received: from eggs.gnu.org ([209.51.188.92]:51950)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1lGfe0-0007AX-DS
 for 46829 <at> debbugs.gnu.org; Mon, 01 Mar 2021 05:19:16 -0500
Received: from fencepost.gnu.org ([2001:470:142:3::e]:42438)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@HIDDEN>)
 id 1lGfdt-0000Yn-Sf; Mon, 01 Mar 2021 05:19:10 -0500
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=50492 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1lGfdt-0000b7-7g; Mon, 01 Mar 2021 05:19:09 -0500
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN>
X-URL: http://www.fdn.fr/~lcourtes/
X-Revolutionary-Date: 11 =?UTF-8?Q?Vent=C3=B4se?= an 229 de la =?UTF-8?Q?R=C3=A9volution?=
X-PGP-Key-ID: 0x090B11993D9AEBB5
X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc
X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5
X-OS: x86_64-pc-linux-gnu
Date: Mon, 01 Mar 2021 11:19:08 +0100
In-Reply-To: <871rd0ebd5.fsf@HIDDEN> (Christopher Baines's message of
 "Sun, 28 Feb 2021 10:27:02 +0000")
Message-ID: <877dmrtbvn.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi,

Christopher Baines <mail@HIDDEN> skribis:

> I believe there's TLS issues with pulling for the current 1.2.0 release.
>
> root@horna ~# guix pull
> substitute: updating substitutes from 'https://guix.cbaines.net'... 100.0%
> 0.0 MB will be downloaded
> downloading from https://guix.cbaines.net/nar/lzip/zg72c146skpca45ijvjigq=
hqgx0mwiny-le-certs-0 ...
>  le-certs-0  4KiB                                                        =
                                                                           =
                        1.8MiB/s 00:00 [##################] 100.0%
>
> Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.=
org/git/guix.git'...
> guix pull: error: Git error: the SSL certificate is invalid

That=E2=80=99s on an installation without =E2=80=98nss-certs=E2=80=99 in th=
e system profile,
right?

I suppose we need to update the =E2=80=98le-certs=E2=80=99 package, or mayb=
e skip X.509
certification verification altogether for the =E2=80=98guix=E2=80=99 channe=
l?

Thanks,
Ludo=E2=80=99.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Andreas Enge <andreas@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 01 Mar 2021 12:05:02 +0000
Resent-Message-ID: <handler.46829.B46829.16146002425419 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.16146002425419
          (code B ref 46829); Mon, 01 Mar 2021 12:05:02 +0000
Received: (at 46829) by debbugs.gnu.org; 1 Mar 2021 12:04:02 +0000
Received: from localhost ([127.0.0.1]:48293 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lGhHO-0001PL-K2
	for submit <at> debbugs.gnu.org; Mon, 01 Mar 2021 07:04:02 -0500
Received: from hera.aquilenet.fr ([185.233.100.1]:45246)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <andreas@HIDDEN>) id 1lGhHN-0001Or-AC
 for 46829 <at> debbugs.gnu.org; Mon, 01 Mar 2021 07:04:01 -0500
Received: from localhost (localhost [127.0.0.1])
 by hera.aquilenet.fr (Postfix) with ESMTP id 8FEF2343;
 Mon,  1 Mar 2021 13:03:55 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at aquilenet.fr
Received: from hera.aquilenet.fr ([127.0.0.1])
 by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id zfUXuoT8yEYS; Mon,  1 Mar 2021 13:03:55 +0100 (CET)
Received: from jurong (unknown [IPv6:2001:910:103f::bf5])
 by hera.aquilenet.fr (Postfix) with ESMTPSA id A801254;
 Mon,  1 Mar 2021 13:03:54 +0100 (CET)
Date: Mon, 1 Mar 2021 13:03:52 +0100
From: Andreas Enge <andreas@HIDDEN>
Message-ID: <YDzYKCEmofz1LUcP@jurong>
References: <871rd0ebd5.fsf@HIDDEN>
 <877dmrtbvn.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <877dmrtbvn.fsf@HIDDEN>
X-Spamd-Bar: /
Authentication-Results: hera.aquilenet.fr
X-Rspamd-Server: hera
X-Rspamd-Queue-Id: 8FEF2343
X-Spamd-Result: default: False [-0.50 / 15.00]; ARC_NA(0.00)[];
 RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[];
 RCPT_COUNT_THREE(0.00)[3]; TO_DN_SOME(0.00)[];
 TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain];
 RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[];
 MID_RHS_NOT_FQDN(0.50)[];
 FORGED_RECIPIENTS(2.00)[ludo@HIDDEN ..,andreas.enge@HIDDEN ...];
 RCVD_COUNT_TWO(0.00)[2]; BAYES_HAM(-3.00)[100.00%]
X-Spam-Score: 0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.3 (/)

Am Mon, Mar 01, 2021 at 11:19:08AM +0100 schrieb Ludovic Courtès:
> That’s on an installation without ‘nss-certs’ in the system profile,
> right?

Yes, I installed nss-certs into the profiles from which I wanted to do
the "guix pull".

Andreas





Message received at control <at> debbugs.gnu.org:


Received: (at control) by debbugs.gnu.org; 1 Mar 2021 14:10:29 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Mar 01 09:10:29 2021
Received: from localhost ([127.0.0.1]:48549 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lGjFl-0006id-Hi
	for submit <at> debbugs.gnu.org; Mon, 01 Mar 2021 09:10:29 -0500
Received: from eggs.gnu.org ([209.51.188.92]:48678)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1lGjFk-0006iP-EL
 for control <at> debbugs.gnu.org; Mon, 01 Mar 2021 09:10:28 -0500
Received: from fencepost.gnu.org ([2001:470:142:3::e]:45243)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@HIDDEN>) id 1lGjFf-0007YO-AA
 for control <at> debbugs.gnu.org; Mon, 01 Mar 2021 09:10:23 -0500
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=54176 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>) id 1lGjFe-0001Ze-PX
 for control <at> debbugs.gnu.org; Mon, 01 Mar 2021 09:10:23 -0500
Date: Mon, 01 Mar 2021 15:10:21 +0100
Message-Id: <87mtvnrmlu.fsf@HIDDEN>
To: control <at> debbugs.gnu.org
From: =?utf-8?Q?Ludovic_Court=C3=A8s?= <ludo@HIDDEN>
Subject: control message for bug #46829
MIME-version: 1.0
Content-type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

severity 46829 important
quit





Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Christopher Baines <mail@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 05 Mar 2021 10:50:02 +0000
Resent-Message-ID: <handler.46829.B46829.161494135111066 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: zimoun <zimon.toutoune@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161494135111066
          (code B ref 46829); Fri, 05 Mar 2021 10:50:02 +0000
Received: (at 46829) by debbugs.gnu.org; 5 Mar 2021 10:49:11 +0000
Received: from localhost ([127.0.0.1]:32956 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lI819-0002sQ-5w
	for submit <at> debbugs.gnu.org; Fri, 05 Mar 2021 05:49:11 -0500
Received: from mira.cbaines.net ([212.71.252.8]:35062)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mail@HIDDEN>) id 1lI817-0002sI-Gt
 for 46829 <at> debbugs.gnu.org; Fri, 05 Mar 2021 05:49:10 -0500
Received: from localhost (unknown [IPv6:2a02:8010:68c1:0:8ac0:b4c7:f5c8:7caa])
 by mira.cbaines.net (Postfix) with ESMTPSA id 68EB827BC4F;
 Fri,  5 Mar 2021 10:49:08 +0000 (GMT)
Received: from capella (localhost [127.0.0.1])
 by localhost (OpenSMTPD) with ESMTP id 9e9f70b0;
 Fri, 5 Mar 2021 10:49:07 +0000 (UTC)
References: <871rd0ebd5.fsf@HIDDEN> <86r1kzyzj9.fsf@HIDDEN>
User-agent: mu4e 1.4.15; emacs 27.1
From: Christopher Baines <mail@HIDDEN>
In-reply-to: <86r1kzyzj9.fsf@HIDDEN>
Date: Fri, 05 Mar 2021 10:49:04 +0000
Message-ID: <87tuppnae7.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

--=-=-=
Content-Type: text/plain


zimoun <zimon.toutoune@HIDDEN> writes:

> Hi Chris,
>
> On Sun, 28 Feb 2021 at 10:27, Christopher Baines <mail@HIDDEN> wrote:
>> I believe there's TLS issues with pulling for the current 1.2.0
>> release.
>
> Is this bug different from <http://issues.guix.gnu.org/issue/44559#8>?
>
> And fixes are also discussed here:
> <http://issues.guix.gnu.org/issue/46650>.

Yes, this bug is about a problem with guix pull, whereas #44559 relates
to a specific issue building the gnutls package.

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Poyg
-----END PGP SIGNATURE-----
--=-=-=--




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 17 Mar 2021 14:38:01 +0000
Resent-Message-ID: <handler.46829.B46829.16159918222641 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.16159918222641
          (code B ref 46829); Wed, 17 Mar 2021 14:38:01 +0000
Received: (at 46829) by debbugs.gnu.org; 17 Mar 2021 14:37:02 +0000
Received: from localhost ([127.0.0.1]:43797 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lMXI8-0000gA-J9
	for submit <at> debbugs.gnu.org; Wed, 17 Mar 2021 10:37:02 -0400
Received: from eggs.gnu.org ([209.51.188.92]:41762)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1lMXI5-0000fu-5M
 for 46829 <at> debbugs.gnu.org; Wed, 17 Mar 2021 10:36:55 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e]:37287)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@HIDDEN>)
 id 1lMXHy-0007Bj-NG; Wed, 17 Mar 2021 10:36:47 -0400
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=48554 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1lMXHy-0006ey-Ag; Wed, 17 Mar 2021 10:36:46 -0400
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
Date: Wed, 17 Mar 2021 15:36:44 +0100
In-Reply-To: <877dmrtbvn.fsf@HIDDEN> ("Ludovic =?UTF-8?Q?Court=C3=A8s?="'s message of "Mon, 01 Mar 2021 11:19:08 +0100")
Message-ID: <877dm54zk3.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi,

Ludovic Court=C3=A8s <ludo@HIDDEN> skribis:

> Christopher Baines <mail@HIDDEN> skribis:
>
>> I believe there's TLS issues with pulling for the current 1.2.0 release.
>>
>> root@horna ~# guix pull
>> substitute: updating substitutes from 'https://guix.cbaines.net'... 100.=
0%
>> 0.0 MB will be downloaded
>> downloading from https://guix.cbaines.net/nar/lzip/zg72c146skpca45ijvjig=
qhqgx0mwiny-le-certs-0 ...
>>  le-certs-0  4KiB                                                       =
                                                                           =
                         1.8MiB/s 00:00 [##################] 100.0%
>>
>> Updating channel 'guix' from Git repository at 'https://git.savannah.gnu=
.org/git/guix.git'...
>> guix pull: error: Git error: the SSL certificate is invalid
>
> That=E2=80=99s on an installation without =E2=80=98nss-certs=E2=80=99 in =
the system profile,
> right?

Looking at (guix scripts pull), I think that is the case:

  (define (honor-x509-certificates store)
    "Use the right X.509 certificates for Git checkouts over HTTPS."
    (unless (honor-system-x509-certificates!)
      (honor-lets-encrypt-certificates! store)))

By default, 1.2.0 installs =E2=80=98nss-certs=E2=80=99, so I would assume s=
uch
installations are unaffected, right?

> I suppose we need to update the =E2=80=98le-certs=E2=80=99 package, or ma=
ybe skip X.509
> certification verification altogether for the =E2=80=98guix=E2=80=99 chan=
nel?

In hindsight, it seems preferable to keep X.509 authentication for now,
because there are still unauthenticated channels out there and because
it=E2=80=99s a bit tedious to work around it in (guix channels) and (guix g=
it).

I checked the =E2=80=98le-certs=E2=80=99 package like so:

--8<---------------cut here---------------start------------->8---
$ guix gc --references $(guix build -d le-certs) |grep pem
/gnu/store/733k3s05nribnbbgc99w766gv7q36zgs-letsencryptauthorityx4.pem.drv
/gnu/store/92qqzmbfy72gs5knlpwrz8v2cf0fl1fs-isrgrootx1.pem.drv
/gnu/store/gm8rfnhlbvdql9dm43vag5p0lha56g4r-letsencryptauthorityx3.pem.drv
$ guix build --check -v1 $(guix gc --references $(guix build -d le-certs) |=
grep pem)
La jenaj derivoj estos konstruataj:
   /gnu/store/gm8rfnhlbvdql9dm43vag5p0lha56g4r-letsencryptauthorityx3.pem.d=
rv
   /gnu/store/92qqzmbfy72gs5knlpwrz8v2cf0fl1fs-isrgrootx1.pem.drv
   /gnu/store/733k3s05nribnbbgc99w766gv7q36zgs-letsencryptauthorityx4.pem.d=
rv

building /gnu/store/92qqzmbfy72gs5knlpwrz8v2cf0fl1fs-isrgrootx1.pem.drv...
downloading from https://letsencrypt.org/certs/isrgrootx1.pem ...
|warning: rewriting hashes in `/gnu/store/hr94djs87lwgcyhz9ks3id3r1a4pgx2b-=
isrgrootx1.pem'; cross fingers
building /gnu/store/gm8rfnhlbvdql9dm43vag5p0lha56g4r-letsencryptauthorityx3=
.pem.drv...
downloading from https://letsencrypt.org/certs/letsencryptauthorityx3.pem .=
..
\warning: rewriting hashes in `/gnu/store/nfdm0gaa4s34aacr3jjp14wqynphkxcx-=
letsencryptauthorityx3.pem'; cross fingers
building /gnu/store/733k3s05nribnbbgc99w766gv7q36zgs-letsencryptauthorityx4=
.pem.drv...
downloading from https://letsencrypt.org/certs/letsencryptauthorityx4.pem .=
..
|warning: rewriting hashes in `/gnu/store/1ldg5q59n2qmq9qmbvyjnkjyxxjmflgh-=
letsencryptauthorityx4.pem'; cross fingers
/gnu/store/nfdm0gaa4s34aacr3jjp14wqynphkxcx-letsencryptauthorityx3.pem
/gnu/store/hr94djs87lwgcyhz9ks3id3r1a4pgx2b-isrgrootx1.pem
/gnu/store/1ldg5q59n2qmq9qmbvyjnkjyxxjmflgh-letsencryptauthorityx4.pem
--8<---------------cut here---------------end--------------->8---

AFAICS, everything is up-to-date here.  So I don=E2=80=99t get where the =
=E2=80=98guix
pull=E2=80=99 error above comes from.

Ideas?

Ludo=E2=80=99.




Message received at control <at> debbugs.gnu.org:


Received: (at control) by debbugs.gnu.org; 23 Mar 2021 22:43:37 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Mar 23 18:43:37 2021
Received: from localhost ([127.0.0.1]:33335 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lOpkO-0006Co-VV
	for submit <at> debbugs.gnu.org; Tue, 23 Mar 2021 18:43:37 -0400
Received: from out5-smtp.messagingengine.com ([66.111.4.29]:56531)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lOpkM-0006Ca-51
 for control <at> debbugs.gnu.org; Tue, 23 Mar 2021 18:43:35 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id A3EA95C0102;
 Tue, 23 Mar 2021 18:43:28 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute3.internal (MEProxy); Tue, 23 Mar 2021 18:43:28 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:message-id:mime-version:content-type; s=mesmtp;
 bh=mdWT8JM56JtusnaWn7AHbXIGVVPvRoWtsW3MhBTyY6M=; b=uhqi10b9XL0X
 P3XrKzUhajl/Qv8H5y/t19sHvQfnCPAsh0XCUlfUnQUorqFzuCrE6V7R29uPrZxg
 WEV1NXItm3rSMnyYGZ4j1E1EoXhtAcYIwhqXrSZMMH4XzywKHZ8nhPhkLctmoIVm
 ZjhaejAZQfwbmioVUYm3/MQ2bWvhAo0=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=content-type:date:from:message-id
 :mime-version:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=mdWT8JM56JtusnaWn7AHbXIGVVPvRoWtsW3MhBTyY
 6M=; b=imQeU+3goSQ2vgWmNoE0DiOUq9UYvIeJmbqk9FFFzjqr6HW2XT/eRoO1q
 0FHuq7Cq+85GK0NfMAsTeZzxA2xZUVv5M9JMtaRY6cOFpDDZpv4I03lcDlM6Rn/w
 ClLtPuN3AtQ2MqecHcGnKKoguDcvtL6l6MLcRZuxc9SBcuveM6QVDu417GKJ1ja9
 Ko1JkDx7h2sh6hyG1VNaB92XNT6VOHvwuxxK+UV99kp8c7OaTzOD9aIS6IwHNZkF
 AQcxS/C+adF4n7jHfuZTGHXK7nkJMg+JI4/8PAmStj2E4bMJKm2bQbh6Ptu0cn4v
 qSbJ8F2e+tE5VNwzfccmFbfPaMgKA==
X-ME-Sender: <xms:EG9aYGqoo4m0Cb1X56wgpxUkekdKhsOGvDyUaKeMqWvW-JFzjXw_fw>
 <xme:EG9aYEoNrBko0cFp3t4piUHwzBqvfQpatvGNcVx-AkrTKm-oGkQdecs4XdrSaSijy
 TMKxoXjVXig7r00MQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudegjedgtdduucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucfgmhhpthihuchsuhgsjhgvtghtucdluddtmdenuc
 fjughrpeffhffvkfggtggusehttdertddttddvnecuhfhrohhmpefnvghoucfhrghmuhhl
 rghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpe
 fhjeeigfefvedvfeetheegledtkeevuddtgedtudeiteehteegvdefffduffefffenucfk
 phepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivgeptdenucfrrg
 hrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg
X-ME-Proxy: <xmx:EG9aYLN8yuVNUFMhacAWaSkrC3pzCMtbsVAGwcXa4DnesCABBXA7Fg>
 <xmx:EG9aYF5WJzc_tgaqNGPpiFb9o2wr_btMn8zH25JCdcc6GdMVKAfPTw>
 <xmx:EG9aYF7-QzLzhtxXi1ZQ7Sq5Dq6kAorB2ZNYRVVPySK-LbgpI39T0Q>
 <xmx:EG9aYHH2VB1fH1vZB9jbSnF9Wa9W5UAyDrjSvTB1Vvp4vdrkon8Tgw>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 36277240422
 for <control <at> debbugs.gnu.org>; Tue, 23 Mar 2021 18:43:28 -0400 (EDT)
Date: Tue, 23 Mar 2021 18:43:26 -0400
From: Leo Famulari <leo@HIDDEN>
To: control <at> debbugs.gnu.org
Message-ID: <YFpvDpAB4Qw66oTl@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Spam-Score: 2.3 (++)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  block 47297 with 46829 
 Content analysis details:   (2.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.7 RCVD_IN_DNSWL_LOW      RBL: Sender listed at https://www.dnswl.org/,
 low trust [66.111.4.29 listed in list.dnswl.org]
 1.8 MISSING_SUBJECT        Missing Subject: header
 0.2 NO_SUBJECT             Extra score for no subject
 1.0 BODY_EMPTY             No body text in message
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  block 47297 with 46829 
 
 Content analysis details:   (1.3 points, 10.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.7 RCVD_IN_DNSWL_LOW      RBL: Sender listed at https://www.dnswl.org/,
                             low trust
                             [66.111.4.29 listed in list.dnswl.org]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -1.0 MAILING_LIST_MULTI     Multiple indicators imply a widely-seen list
                             manager
  1.8 MISSING_SUBJECT        Missing Subject: header
  0.2 NO_SUBJECT             Extra score for no subject
  1.0 BODY_EMPTY             No body text in message

block 47297 with 46829




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 10 Apr 2021 19:03:01 +0000
Resent-Message-ID: <handler.46829.B46829.161808137316565 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161808137316565
          (code B ref 46829); Sat, 10 Apr 2021 19:03:01 +0000
Received: (at 46829) by debbugs.gnu.org; 10 Apr 2021 19:02:53 +0000
Received: from localhost ([127.0.0.1]:53301 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVIse-0004J6-WE
	for submit <at> debbugs.gnu.org; Sat, 10 Apr 2021 15:02:53 -0400
Received: from out3-smtp.messagingengine.com ([66.111.4.27]:40601)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVIsd-0004It-1M
 for 46829 <at> debbugs.gnu.org; Sat, 10 Apr 2021 15:02:52 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id A62BD5C00C8;
 Sat, 10 Apr 2021 15:02:45 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Sat, 10 Apr 2021 15:02:45 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=7L6mzen+5RWNGtJolwuUq/O8
 696qbxXKRosDr586fuE=; b=lkOGq0aIuPNydSD7s2S95MHLo17OXvUP544ZpoT8
 BYYEetP+NHf3doMM4SfuHmuxWxy7VQSC2BujQdYN1p14r7TNGEc9nZgqy1YD2yx+
 nAvEVMj7cOHiG0WIcui8hAbvIiItZ+8FGQXRw3nDTFf/IziR35r3gccyQ735aQC4
 OXg=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=7L6mze
 n+5RWNGtJolwuUq/O8696qbxXKRosDr586fuE=; b=ZKKiRXtZIB+9zR5ZI0zuWJ
 ZvOLS6j6XB4cl9qLIEZiVUnKpN1saWXV3u8xPs8SdJR+sVOTZotKvppCUKWdglmr
 MVWUv4RUFlaea2MHJMCkjeJV+r1MoS+cV/tmSrnQj/vRzg0nvRyMUPYdOXsdex/2
 QW9Bf+iRL7QwP6WdNez2zLdrrq19bBLXce2O2dyPB1DYkk3wUzbn2jx5ijL41T/F
 ox6yuOMXki7zVD9N1RL+V12zO6o/MJkGHfyWoy2Kz1BODsqaRMoK5KlW7KkapqbO
 8oWm7nYbfVCluLzOKDVBOFse6KWrxFVefCONbknE2fm5e1pDk7NxytZsAdY58pdQ
 ==
X-ME-Sender: <xms:VfZxYKuz4Znp_zXJbdSX6cFHhMQ4sJdA7SJxmdEVsNxtDvSoCIR1TQ>
 <xme:VfZxYPc9H4AGzmIWcfp_Brp2N8IMvWKkKQjNq_Bh4AEbm-73s69FJAGJqFFiojYdB
 7CAZkBCjxYUtf4-sg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekfedgudefgecutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfhfgggtuggjsehgtd
 erredttddvnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhl
 rghrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpedugfelgfeftdfhhedugeeiteffje
 dukeeuffelheetleeggfevheetgfegteeihfenucffohhmrghinheptggsrghinhgvshdr
 nhgvthenucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivg
 eptdenucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghm
 vg
X-ME-Proxy: <xmx:VfZxYFykDeiEQNKnjR-0pVNGMjkdUPYf1bMb07kkW8lwRctvHlEMQA>
 <xmx:VfZxYFMPLaGJ0zTC5JlgUhc1UVnHkX7E4_NUuMtqHxOxpylze-_Q6w>
 <xmx:VfZxYK_cu3IwehSXguKPzoo5eTz4uK32FzFB2yRtYskWdtd6dv2TDg>
 <xmx:VfZxYLKY-rhddZigaoDbtjmlIBYDMPbsG7HqVm5MQTMADmgjXMrLaQ>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id EFAAF108005C;
 Sat, 10 Apr 2021 15:02:44 -0400 (EDT)
Date: Sat, 10 Apr 2021 15:02:43 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHH2U3HtEcuV6gK3@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="ZAaVGh0mDBxoRu6c"
Content-Disposition: inline
In-Reply-To: <871rd0ebd5.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--ZAaVGh0mDBxoRu6c
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Sun, Feb 28, 2021 at 10:27:02AM +0000, Christopher Baines wrote:
> I believe there's TLS issues with pulling for the current 1.2.0 release.

On a fresh Debian ISO image, I installed Guix 1.2.0 based on the
instructions in the manual section Binary Installation.

Then, `guix pull` succeeded for me, no problem.

Can anyone reproduce still reproduce this bug?

> root@horna ~# guix pull
> substitute: updating substitutes from 'https://guix.cbaines.net'... 100.0%
> 0.0 MB will be downloaded
> downloading from https://guix.cbaines.net/nar/lzip/zg72c146skpca45ijvjigqhqgx0mwiny-le-certs-0 ...
>  le-certs-0  4KiB                                                                                                                                                           1.8MiB/s 00:00 [##################] 100.0%

If it's still around, maybe you can share this store item? I wonder if
it got corrupted.

--ZAaVGh0mDBxoRu6c
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=tAhp
-----END PGP SIGNATURE-----

--ZAaVGh0mDBxoRu6c--




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Christopher Baines <mail@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 10 Apr 2021 19:46:01 +0000
Resent-Message-ID: <handler.46829.B46829.161808392730139 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Leo Famulari <leo@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161808392730139
          (code B ref 46829); Sat, 10 Apr 2021 19:46:01 +0000
Received: (at 46829) by debbugs.gnu.org; 10 Apr 2021 19:45:27 +0000
Received: from localhost ([127.0.0.1]:53330 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVJXq-0007pc-Ep
	for submit <at> debbugs.gnu.org; Sat, 10 Apr 2021 15:45:26 -0400
Received: from mira.cbaines.net ([212.71.252.8]:48034)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mail@HIDDEN>) id 1lVJXo-0007n6-NN
 for 46829 <at> debbugs.gnu.org; Sat, 10 Apr 2021 15:45:25 -0400
Received: from localhost (unknown [IPv6:2a02:8010:68c1:0:8ac0:b4c7:f5c8:7caa])
 by mira.cbaines.net (Postfix) with ESMTPSA id 901B727BC70;
 Sat, 10 Apr 2021 20:45:23 +0100 (BST)
Received: from capella (localhost [127.0.0.1])
 by localhost (OpenSMTPD) with ESMTP id 12022a57;
 Sat, 10 Apr 2021 19:45:23 +0000 (UTC)
References: <871rd0ebd5.fsf@HIDDEN> <YHH2U3HtEcuV6gK3@HIDDEN>
User-agent: mu4e 1.4.15; emacs 27.1
From: Christopher Baines <mail@HIDDEN>
In-reply-to: <YHH2U3HtEcuV6gK3@HIDDEN>
Date: Sat, 10 Apr 2021 20:45:22 +0100
Message-ID: <874kgd2ab1.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

--=-=-=
Content-Type: text/plain


Leo Famulari <leo@HIDDEN> writes:

> On Sun, Feb 28, 2021 at 10:27:02AM +0000, Christopher Baines wrote:
>> I believe there's TLS issues with pulling for the current 1.2.0 release.
>
> On a fresh Debian ISO image, I installed Guix 1.2.0 based on the
> instructions in the manual section Binary Installation.
>
> Then, `guix pull` succeeded for me, no problem.
>
> Can anyone reproduce still reproduce this bug?

I'm pretty sure I experienced this with a fresh install of Guix System,
I should have given more information in the initial report.

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=rv8N
-----END PGP SIGNATURE-----
--=-=-=--




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 10 Apr 2021 20:31:02 +0000
Resent-Message-ID: <handler.46829.B46829.16180866528642 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.16180866528642
          (code B ref 46829); Sat, 10 Apr 2021 20:31:02 +0000
Received: (at 46829) by debbugs.gnu.org; 10 Apr 2021 20:30:52 +0000
Received: from localhost ([127.0.0.1]:53393 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVKFo-0002FK-KI
	for submit <at> debbugs.gnu.org; Sat, 10 Apr 2021 16:30:52 -0400
Received: from out4-smtp.messagingengine.com ([66.111.4.28]:41559)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVKFl-0002F5-Uv
 for 46829 <at> debbugs.gnu.org; Sat, 10 Apr 2021 16:30:51 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 6853F5C010B;
 Sat, 10 Apr 2021 16:30:44 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Sat, 10 Apr 2021 16:30:44 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:content-transfer-encoding:in-reply-to; s=mesmtp;
 bh=kqmCUJRRP7jy+5ZrdBkIdTumaD5JBVykOkbjv1ty0cI=; b=h/IXVTwg+N73
 jAdeV32GFn4rRHZ1Oa1x7Trpkj3EPb2EMVkJwSzuq+nfphCQjdTLyz+5gXcZvgXw
 5PF21UWj+Fa8zeQO+vsZ1ReXvOMLpTN6SdPjzlNs/Jv6BK27E3x/RAbFumDv/Lho
 0uCgn61xdFKFee9Y4wuCcqIndW15imk=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-transfer-encoding:content-type
 :date:from:in-reply-to:message-id:mime-version:references
 :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=kqmCUJRRP7jy+5ZrdBkIdTumaD5JBVykOkbjv1ty0
 cI=; b=SHqm757h3fNQAa9+d5SIlm4dxMOH8L3qUzeNq6fqN8+/RpdQjvS/lKmcS
 8M8LFruXdL+uxnpFDa6/Hw8eEM6jInhX/hB2Fv6+SJ6ZlNBhvW5Tun+UH2gHOuN9
 w1Osvz6qXKkserGgdjkRePtQX2ySgysM1eYWPxcz0rwgxiPAxELncTJK0cd4cXGt
 JcOneo7O+Io6MiLMUoPqpQEGPgUwT7cLIRaGWwZ3/t1doqm1S3GMYjBUXrNA3Bln
 LgDse+ox7Dgqsv1KRh/grifC8SCT/LfhYf/xwcVxp4kjRU6bKccEayODfo4RJ4Ct
 S+oei0W70pTYnJF1WOTVsWLaZwz3A==
X-ME-Sender: <xms:9ApyYFKr2HHUD0H4oNVu5-Kdf49T4As1mQlpkUNlh9qUSZpGRt-MYA>
 <xme:9ApyYBK6unZmAIAYAMkOZ8W2CT6pSGChbqDq0NKFCGCsxEP5j2WKuHgnq0JPI97lx
 g6HLnLgFM2BSZApXw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekfedgudehudcutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfhfgggtugfgjgesth
 hqredttddtvdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhu
 lhgrrhhirdhnrghmvgeqnecuggftrfgrthhtvghrnhepgeefieejteeftedvffeffeelfe
 eluedutddvtdfhkedtudehkeffveevfeevtdeinecuffhomhgrihhnpehgnhhurdhorhhg
 necukfhppedutddtrdduuddrudeiledruddukeenucevlhhushhtvghrufhiiigvpedtne
 curfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:9ApyYNu9pWwYQFRZTlXiIeSRUemRWvXFGUjM49pcO43lvvmvoIDp7A>
 <xmx:9ApyYGYE7F_VDaD1AkVjQ2sifSS_jVMu5f-l-z8boo0C73GRnbU5XA>
 <xmx:9ApyYMZHvaF9cdPO_1-Gxyky3wc0Lu66ltAVkjnT8oJOv38IwNqMlQ>
 <xmx:9ApyYC1dAco9RmUs8A7fmbT7m-6GKlbCLWenlUYEIyY4Wk0NWVrMYw>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 032921080064;
 Sat, 10 Apr 2021 16:30:43 -0400 (EDT)
Date: Sat, 10 Apr 2021 16:30:42 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHIK8sKyyIEJJGzW@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <YHH2U3HtEcuV6gK3@HIDDEN>
 <874kgd2ab1.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
In-Reply-To: <874kgd2ab1.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Sat, Apr 10, 2021 at 08:45:22PM +0100, Christopher Baines wrote:
>=20
> Leo Famulari <leo@HIDDEN> writes:
>=20
> > On Sun, Feb 28, 2021 at 10:27:02AM +0000, Christopher Baines wrote:
> >> I believe there's TLS issues with pulling for the current 1.2.0 releas=
e.
> >
> > On a fresh Debian ISO image, I installed Guix 1.2.0 based on the
> > instructions in the manual section Binary Installation.
> >
> > Then, `guix pull` succeeded for me, no problem.
> >
> > Can anyone reproduce still reproduce this bug?
>=20
> I'm pretty sure I experienced this with a fresh install of Guix System,
> I should have given more information in the initial report.

Okay, I'm testing this now, in a VM.

I wonder if it's the same thing as
<https://lists.gnu.org/archive/html/help-guix/2021-04/msg00075.html>?




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 10 Apr 2021 21:10:01 +0000
Resent-Message-ID: <handler.46829.B46829.161808896512197 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161808896512197
          (code B ref 46829); Sat, 10 Apr 2021 21:10:01 +0000
Received: (at 46829) by debbugs.gnu.org; 10 Apr 2021 21:09:25 +0000
Received: from localhost ([127.0.0.1]:53440 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVKr7-0003Af-HZ
	for submit <at> debbugs.gnu.org; Sat, 10 Apr 2021 17:09:25 -0400
Received: from out4-smtp.messagingengine.com ([66.111.4.28]:54093)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVKr5-0003AQ-L5
 for 46829 <at> debbugs.gnu.org; Sat, 10 Apr 2021 17:09:24 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 6A5235C00F2;
 Sat, 10 Apr 2021 17:09:18 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute3.internal (MEProxy); Sat, 10 Apr 2021 17:09:18 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=Psb9apg2rEGe174TpsL23+jZ
 MHk3LrJjW2ijiuf9sro=; b=V2+V8hpZ0BCPT7AOchrmgEqfPMOcDJjgieozHECp
 JnsIzF3uUfQ3hAHn1KYqULiMchVsmIiYbTnTgtdzjaEB/wIjyuFR3DXFvrElS/7y
 FewFPj2hGdEUVnh7gTIch0dKemrKaa7Spvb4RvIfQMFY2mVBMTC/YpKJm3qxV1UM
 H/E=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=Psb9ap
 g2rEGe174TpsL23+jZMHk3LrJjW2ijiuf9sro=; b=EIH4fs6L21s8k1nG+izFlb
 G523yeFWh1BlCV/SjOfruwo3V+nzBrkooCmDKHREBWwUp5hDRVGS80yrmR+PR6st
 DmdTLnZhdrQ/P+HFiEZlxF9OMd15IXhItEBRIwkZxj6B7CT1MJIKDBISJv5/s8f0
 qGrKxD9WZFnvOEQaVRs+oIo7G4NQotVcB6kJIDXyI/+Exf1jwmsz7bAapCay64LC
 lbfVInu/RyW8fqaD2m4b9Qqqujv0JKatN+5ws+vng1u/GLaayqbX9o4XMVxmRXGe
 0xAqegQs9tvrfJpifN5ABwbwDiqGGl2DYH/yu42AbLqUYSumK36zBcItnfRnQQTw
 ==
X-ME-Sender: <xms:_hNyYOKXSHErnAD0bq5Bc4Fl81pXX_jpURF6A6KHeDbup5gu0yPFGQ>
 <xme:_hNyYGLTq7ypbCZdsDWg2fFEEZJ5CC3AmIyMo_izRyooAKcKqpzRzYXtI5TXYGFXS
 78NaOZRS65PBLwEhw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekfedgudehlecutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfhfgggtuggjsehgtd
 erredttddvnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhl
 rghrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpedvveegkeduiedvieeludevkeeugf
 euueelhedtffegffdtfeekveelffeufedukeenucffohhmrghinhepghhnuhdrohhrghen
 ucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivgeptdenuc
 frrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg
X-ME-Proxy: <xmx:_hNyYOtky4aV1_QvJtDPVGPkRHkdLHkkQJBtdMYQn3pYZayzRLG2Ng>
 <xmx:_hNyYDaGzDgN0RfjK9OTAnS1WKnZOk8U4AMh_hXBzGo9wEn0iuJeoQ>
 <xmx:_hNyYFZttbmHF6w_OrBhpGpvvsyMXywWWTqmN2Xl3_mY67V1QUAzkg>
 <xmx:_hNyYH1QXuVfMOrvs9z2qPp-jl2_PNcWlWqTaGWgYoi2gmHfDvvTaQ>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 261D0240057;
 Sat, 10 Apr 2021 17:09:18 -0400 (EDT)
Date: Sat, 10 Apr 2021 17:09:16 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHIT/KFNpXvndY3U@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <YHH2U3HtEcuV6gK3@HIDDEN>
 <874kgd2ab1.fsf@HIDDEN> <YHIK8sKyyIEJJGzW@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="VuYyTb7jiN7EgnXE"
Content-Disposition: inline
In-Reply-To: <YHIK8sKyyIEJJGzW@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--VuYyTb7jiN7EgnXE
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Apr 10, 2021 at 04:30:42PM -0400, Leo Famulari wrote:
> Okay, I'm testing this now, in a VM.
>=20
> I wonder if it's the same thing as
> <https://lists.gnu.org/archive/html/help-guix/2021-04/msg00075.html>?

I followed the instructions in the manual section Installing Guix in a
VM.

Then, I booted the new system, opened a terminal emulator in the XFCE
desktop environment, and ran `guix pull`. It succeeded.

--VuYyTb7jiN7EgnXE
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=SJd1
-----END PGP SIGNATURE-----

--VuYyTb7jiN7EgnXE--




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Christopher Baines <mail@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 10 Apr 2021 21:22:01 +0000
Resent-Message-ID: <handler.46829.B46829.161808969813352 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Leo Famulari <leo@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161808969813352
          (code B ref 46829); Sat, 10 Apr 2021 21:22:01 +0000
Received: (at 46829) by debbugs.gnu.org; 10 Apr 2021 21:21:38 +0000
Received: from localhost ([127.0.0.1]:53454 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVL2w-0003TI-Df
	for submit <at> debbugs.gnu.org; Sat, 10 Apr 2021 17:21:38 -0400
Received: from mira.cbaines.net ([212.71.252.8]:49628)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mail@HIDDEN>) id 1lVL2u-0003TA-MK
 for 46829 <at> debbugs.gnu.org; Sat, 10 Apr 2021 17:21:37 -0400
Received: from localhost (unknown [IPv6:2a02:8010:68c1:0:8ac0:b4c7:f5c8:7caa])
 by mira.cbaines.net (Postfix) with ESMTPSA id 9D6C927BC70;
 Sat, 10 Apr 2021 22:21:35 +0100 (BST)
Received: from capella (localhost [127.0.0.1])
 by localhost (OpenSMTPD) with ESMTP id 41cad1a9;
 Sat, 10 Apr 2021 21:21:35 +0000 (UTC)
References: <871rd0ebd5.fsf@HIDDEN> <YHH2U3HtEcuV6gK3@HIDDEN>
 <874kgd2ab1.fsf@HIDDEN> <YHIK8sKyyIEJJGzW@HIDDEN>
 <YHIT/KFNpXvndY3U@HIDDEN>
User-agent: mu4e 1.4.15; emacs 27.1
From: Christopher Baines <mail@HIDDEN>
In-reply-to: <YHIT/KFNpXvndY3U@HIDDEN>
Date: Sat, 10 Apr 2021 22:21:35 +0100
Message-ID: <871rbh25uo.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable


Leo Famulari <leo@HIDDEN> writes:

> On Sat, Apr 10, 2021 at 04:30:42PM -0400, Leo Famulari wrote:
>> Okay, I'm testing this now, in a VM.
>>=20
>> I wonder if it's the same thing as
>> <https://lists.gnu.org/archive/html/help-guix/2021-04/msg00075.html>?
>
> I followed the instructions in the manual section Installing Guix in a
> VM.
>
> Then, I booted the new system, opened a terminal emulator in the XFCE
> desktop environment, and ran `guix pull`. It succeeded.

Maybe it just doesn't work for the root user... I encountered this when
running guix pull as the root user on a headless machine.

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=lpHl
-----END PGP SIGNATURE-----
--=-=-=--




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 10 Apr 2021 22:55:01 +0000
Resent-Message-ID: <handler.46829.B46829.161809527221839 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161809527221839
          (code B ref 46829); Sat, 10 Apr 2021 22:55:01 +0000
Received: (at 46829) by debbugs.gnu.org; 10 Apr 2021 22:54:32 +0000
Received: from localhost ([127.0.0.1]:53526 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVMUq-0005g9-K3
	for submit <at> debbugs.gnu.org; Sat, 10 Apr 2021 18:54:32 -0400
Received: from out4-smtp.messagingengine.com ([66.111.4.28]:48073)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVMUo-0005fw-PC
 for 46829 <at> debbugs.gnu.org; Sat, 10 Apr 2021 18:54:31 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 85E7F5C00EA;
 Sat, 10 Apr 2021 18:54:25 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute3.internal (MEProxy); Sat, 10 Apr 2021 18:54:25 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=l3eP4EheKXOsdJOoOQMd40/k
 7MZmzfCjsFc9wIf1VkU=; b=ZQ2oCU9gSGLrNWcdk/44M8XeeCKqvu+pTwh4mFm5
 3s8C8135I43MABhCtpEVpvUTo7aYS2WJP57etqaT+TtW6xyxQJtk4qWeagxYuG9i
 PhqaG1h2WaPk51RM4r63XVwnlorAmDT/4PjWm8Dxe8oTFDUSOEO1Yzbzk7VZSiGy
 +5M=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=l3eP4E
 heKXOsdJOoOQMd40/k7MZmzfCjsFc9wIf1VkU=; b=vZ+tWSfn4yaP8gaMlIW5IX
 3NBHmnLtC7qAQIx1oIE3FgDgEJ3tW77OwTiVfmlpFtkghp3DWzburvOLndy1YP4H
 DTxnpLvm+8YJc2QxeozlChIOM1WDjJoYBaQzH3zaoMHcqdhqaSKi0xSThrXgIzuy
 tobecNd69lC7zR5Rfpzl+1HUPmRaI2igrI86l9A9vtT4yx7SfcUJqmlUzCHWs1Lq
 9JzilKVbB3C8GCxFlYQhKymoGcs5DSts89fl6DAb8Z+0MIouatYLNpcJIfy5my+5
 Tblr9S4pP5VlXiZdv9vrZYsrUo8DZlp28eRJ8idDmMbfquVBgbU9msYRhjhyWlOw
 ==
X-ME-Sender: <xms:oSxyYEC9datu9vMTdX5Yv37HuUaxTfqBGJnJCb3H3qkmKbXV0S_Xrg>
 <xme:oSxyYGgwHwgo1Ab2iM8WmgFGSrgzl0axcgypvgclkod9uvOxEusEj35oxDYDrheuq
 lmD06h2ewKXYgm_bw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekgedgudefucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre
 ertddtvdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgr
 rhhirdhnrghmvgeqnecuggftrfgrthhtvghrnhepudekveegteekleetgfeitdejgfejke
 ffudethedvhfeukeduleeikeejfeehffetnecukfhppedutddtrdduuddrudeiledruddu
 keenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvg
 hosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:oSxyYHlkBUJJe79a_Ya0E8PbS7FyNC2v0MMy5mPnNWQV163JqCMgdg>
 <xmx:oSxyYKzp_8Y_-xBfmEUMGaG1hUVW_tyf3taMKN9VqWiC3yOG5YCW3Q>
 <xmx:oSxyYJTKunWLYNSaUDOMaSCr3caEW4xOPaZM5EMhhuXSMAqLQJsyCg>
 <xmx:oSxyYEMI4nG5fPre_7kheGjVtj2GIk-X4TrbvcY1VeFsqvRXMY1O9Q>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id ECB91240054;
 Sat, 10 Apr 2021 18:54:24 -0400 (EDT)
Date: Sat, 10 Apr 2021 18:54:23 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHIsn+kLD/FaKGY1@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <YHH2U3HtEcuV6gK3@HIDDEN>
 <874kgd2ab1.fsf@HIDDEN> <YHIK8sKyyIEJJGzW@HIDDEN>
 <YHIT/KFNpXvndY3U@HIDDEN> <871rbh25uo.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="amHdZCk03vv8XC/a"
Content-Disposition: inline
In-Reply-To: <871rbh25uo.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--amHdZCk03vv8XC/a
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Sat, Apr 10, 2021 at 10:21:35PM +0100, Christopher Baines wrote:
> Maybe it just doesn't work for the root user... I encountered this when
> running guix pull as the root user on a headless machine.

I logged in as root from the console, and `guix pull` worked there too.

--amHdZCk03vv8XC/a
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=1JMY
-----END PGP SIGNATURE-----

--amHdZCk03vv8XC/a--




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 10 Apr 2021 23:05:03 +0000
Resent-Message-ID: <handler.46829.B46829.161809587822800 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161809587822800
          (code B ref 46829); Sat, 10 Apr 2021 23:05:03 +0000
Received: (at 46829) by debbugs.gnu.org; 10 Apr 2021 23:04:38 +0000
Received: from localhost ([127.0.0.1]:53534 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVMeb-0005vg-OM
	for submit <at> debbugs.gnu.org; Sat, 10 Apr 2021 19:04:37 -0400
Received: from out2-smtp.messagingengine.com ([66.111.4.26]:49273)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVMeZ-0005vE-RB
 for 46829 <at> debbugs.gnu.org; Sat, 10 Apr 2021 19:04:36 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id A15735C00DC;
 Sat, 10 Apr 2021 19:04:30 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute3.internal (MEProxy); Sat, 10 Apr 2021 19:04:30 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=nvF3KgmDr5U/xPhZ/XYX6HCi
 CglDEnDoi5jEb3pWJ0w=; b=m+YQuPFW2Z2tG/mjiFEdBV7Zsjp2MQSeYp9PAVEV
 Mgbm1+yK2PkM0N487VGVMmPvqe2btU9hovjSLAfuUn7kdnR5miUshjPz3fMYecXl
 28CcJcudVg58cMBZvIfQMQ7kMYwPp5I7aWKwUC6/scNUo1KOeYK2Lf8u7Rhdvbdb
 sLo=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=nvF3Kg
 mDr5U/xPhZ/XYX6HCiCglDEnDoi5jEb3pWJ0w=; b=aKq0ymeiaw/EHCQtHokp6j
 GaknW4ssklOxqPXq/unTntqVXEnYT3+slFDYL3DOTLLCZHYKUvB3dbmsqu0eDpBG
 Gs6yOR/nhR7+QDUabVVP2IaoKjkIye1GBFYzsLCA+2A/rR29Suzuu/rPAvvz5dsw
 1Eg4TQvLbFTRy0geRXD6S3Jj4d4fIg22Qjb7DJNKm9DePhZqkKz9udZMHrI3E46o
 t3KdTuUDUsKwsYpGoDIti38whhhmTFngs5ZPHd3UGcYbVrvvxoZZbpYS2JprXRcf
 OM47QFsIY4sbkG5IwdjUvikrra9FcPPw4hnk0ajSlCPdyIPNmw9QmRcnMRpB5YXQ
 ==
X-ME-Sender: <xms:_i5yYOLdYUiiW2078xYxEnGu9AJBvwV8PWo_J-uInZDtzzlmWlfsWg>
 <xme:_i5yYGKhUo9yid7ie-pY2vYAAZrPztHTsvcarjq8f4-RhLJLovcdCKKwNNkbn_FlR
 8QfqoPiQkQwMx0maw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekgedgudehucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre
 ertddtvdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgr
 rhhirdhnrghmvgeqnecuggftrfgrthhtvghrnhepgeffteehffehfefhtefhhfdvhefgie
 eltefhfeduteeuhefgffeuvedtjeetvefhnecuffhomhgrihhnpegtsggrihhnvghsrdhn
 vghtpdhgnhhurdhorhhgnecukfhppedutddtrdduuddrudeiledruddukeenucevlhhush
 htvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhl
 rghrihdrnhgrmhgv
X-ME-Proxy: <xmx:_i5yYOsa5fxsgBbovCWvFSSLfV9worBNlxfEKWcENn_u8AWbZryPQw>
 <xmx:_i5yYDYEQ2PNdzZ9Rw9i7zQogz2Spgel0TrSk-l1-S_UwoWLoCg4gQ>
 <xmx:_i5yYFYTXWtmSBgT2uEwOF5pnzahS79_qtQNc8XuYhpUxr4ejJga3A>
 <xmx:_i5yYH3e0GxBXIXS4amEEz60Ar1cd3RoQsZiqSY-SbgU5V-CytFFjQ>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 4CC3924005B;
 Sat, 10 Apr 2021 19:04:30 -0400 (EDT)
Date: Sat, 10 Apr 2021 19:04:28 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHIu/GrtQ1d7qYJE@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="cURNSD07jOUOXwXI"
Content-Disposition: inline
In-Reply-To: <871rd0ebd5.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--cURNSD07jOUOXwXI
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Sun, Feb 28, 2021 at 10:27:02AM +0000, Christopher Baines wrote:
> downloading from https://guix.cbaines.net/nar/lzip/zg72c146skpca45ijvjigqhqgx0mwiny-le-certs-0 ...

I downloaded this file, un-lzipped it, and extracted the nar. The
results are bit-identical to the le-certs from ci.guix.gnu.org.

Maybe there was a momentary misconfiguration on Savannah? Or something
like that?

--cURNSD07jOUOXwXI
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=OYY5
-----END PGP SIGNATURE-----

--cURNSD07jOUOXwXI--




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 10 Apr 2021 23:14:01 +0000
Resent-Message-ID: <handler.46829.B46829.161809639823603 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christopher Baines <mail@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161809639823603
          (code B ref 46829); Sat, 10 Apr 2021 23:14:01 +0000
Received: (at 46829) by debbugs.gnu.org; 10 Apr 2021 23:13:18 +0000
Received: from localhost ([127.0.0.1]:53541 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVMn0-00068d-LL
	for submit <at> debbugs.gnu.org; Sat, 10 Apr 2021 19:13:18 -0400
Received: from out2-smtp.messagingengine.com ([66.111.4.26]:59333)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVMmy-000688-Ds
 for 46829 <at> debbugs.gnu.org; Sat, 10 Apr 2021 19:13:16 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 5B80D5C004B;
 Sat, 10 Apr 2021 19:13:11 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute3.internal (MEProxy); Sat, 10 Apr 2021 19:13:11 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=4swm3LKGgTuecXRVlnWxULSo
 uKV7Nd6APWaRS8Sj1gg=; b=MIeh2CWqlP7fiWJqQy/gx7IECzq++e10ktKoOkqD
 RH7TRCNmB4NHZFdIKrzYRKbeyhK/XT4MHtiA3+JBl0BJSxPFtc5kcHJu6SDjKOYT
 DHDdLQioAFrc0elSFR2ECxRRpraDPicpOLBruksIuwP6OiHVsvPFXfruMfVeuJ0a
 R+Q=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=4swm3L
 KGgTuecXRVlnWxULSouKV7Nd6APWaRS8Sj1gg=; b=YLM63p0xBiwPBGmzK81BoF
 d7ZukLelxTBk8/mhXP8GpT8nLMzEAFkG+52bui8VYHdeFznykuO+9ivLEacF4c2V
 KCSNDBozen1elq+xyogH9+FZd9fuxIDrL9850eNuyHJS/S0rNnnZX74EvbJW9ADt
 Jq8JdzrZcfOJqWp13yW9E3ke+ifoV2HFkbFqwZV/eu88R/YRrWXAOo7Yxpk8kqU6
 GRB1glnd28CsVvZehBhUBM+6SFNN3cgtBpV20W4kuJaL5WjPsJ9gx2qx9K/+XWpv
 RN46BOSmqAEOMYp4RkfrTRgjdSa9QJtiva9d3bzTemsKuBkvbbAjB+0tCNIr8AQg
 ==
X-ME-Sender: <xms:BzFyYGmvfR5EqhmzQOGfeLYoukpwU-4m9uVhfW1_2qnYfTdDLMBDMw>
 <xme:BzFyYN0h3vGJB2RPfQKltUGO3BBXs0ZCau2HO7orVZ3699KSHWvc7SIci9KGeRkGi
 -Q1uop6eobowDjt9Q>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekgedgudejucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtro
 ertddtjeenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgr
 rhhirdhnrghmvgeqnecuggftrfgrthhtvghrnhepffelteefuefggeefvdduudduhffhvd
 efiedvheelhedtkeefkedvfefgueekteevnecuffhomhgrihhnpehgnhhurdhorhhgnecu
 kfhppedutddtrdduuddrudeiledruddukeenucevlhhushhtvghrufhiiigvpedtnecurf
 grrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:BzFyYEpRHWPkICDlKkvISFopbXaRhV3Oz5gK0XWotL0kbfvlBhmchg>
 <xmx:BzFyYKmEn-ttj4VBti1uCMHUqyt1iyCwMomiRwgykgYorY_XNoetEg>
 <xmx:BzFyYE0WK7qAntaDTu4h_5XCdMddjCQ1EU6hL6cS_M3LceMDg2DiMg>
 <xmx:BzFyYFjTX7x4NC-ZndZdHRheMs5EpHukvBdBlgB8VnBBYqLMVKD5lQ>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 1175024005B;
 Sat, 10 Apr 2021 19:13:11 -0400 (EDT)
Date: Sat, 10 Apr 2021 19:13:09 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHIxBQxdVtsnzKdX@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="peISVz5BTHVnUZTf"
Content-Disposition: inline
In-Reply-To: <871rd0ebd5.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--peISVz5BTHVnUZTf
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Feb 28, 2021 at 10:27:02AM +0000, Christopher Baines wrote:
> root@horna ~# wget https://git.savannah.gnu.org/git/guix.git
> --2021-02-28 11:22:49--  https://git.savannah.gnu.org/git/guix.git
> Resolving git.savannah.gnu.org (git.savannah.gnu.org)... 209.51.188.201, =
2001:470:142:5::201
> Connecting to git.savannah.gnu.org (git.savannah.gnu.org)|209.51.188.201|=
:443... connected.
> ERROR: The certificate of =E2=80=98git.savannah.gnu.org=E2=80=99 is not t=
rusted.
> ERROR: The certificate of =E2=80=98git.savannah.gnu.org=E2=80=99 doesn't =
have a known issuer.

By the way, it's expected that wget would fail here, if you had not
installed and configured nss-certs as directed in the manual.

`guix pull` uses its own certificate store (le-certs), and it's
suppposed to happen automatically.

--peISVz5BTHVnUZTf
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=HW43
-----END PGP SIGNATURE-----

--peISVz5BTHVnUZTf--




Message received at control <at> debbugs.gnu.org:


Received: (at control) by debbugs.gnu.org; 11 Apr 2021 20:15:56 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Apr 11 16:15:56 2021
Received: from localhost ([127.0.0.1]:55914 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVgUu-0006BA-3w
	for submit <at> debbugs.gnu.org; Sun, 11 Apr 2021 16:15:56 -0400
Received: from wout4-smtp.messagingengine.com ([64.147.123.20]:44371)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVgUs-0006Aq-7n
 for control <at> debbugs.gnu.org; Sun, 11 Apr 2021 16:15:54 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.west.internal (Postfix) with ESMTP id 5EDF1161B;
 Sun, 11 Apr 2021 16:15:48 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute3.internal (MEProxy); Sun, 11 Apr 2021 16:15:48 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:message-id:mime-version:content-type; s=mesmtp;
 bh=ENHDS6LcpFMZlwwrFmsL9rcgOWjyfzdVBTceNJdBcLs=; b=k/bOXv3HZsOZ
 LsHqWli0PIupZcRypP94Qk0xR2pQtNRT0gTDcY8zXwnto7HdH7nnueO17barneQM
 2GIoUmeUg+sbLH/aNtlt/41cX8cs/3XAK7CSjpFs/MqUFJsNpXDUtsBabUUO0NFz
 zkVpq3F2Gs/1w9kNT82eXeJDkEPkZQ4=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=content-type:date:from:message-id
 :mime-version:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=ENHDS6LcpFMZlwwrFmsL9rcgOWjyfzdVBTceNJdBc
 Ls=; b=wrSaInPl5YkklA1zumMfzu7HRWR8Fq1uLZRi1ZjPzS8WjKTuGherJVdAM
 OaIL/NZB1M5O5FBqFNR+pkzgvFjieUaMxv29oEeezjQplvSW8TFBC9iI+8rH57kO
 fj1YOo49HEA0cTNrru9Bar+4rcWGTI4ChCcgtpbXepq0/KSpIKQ6Sj8mUpuBVkzG
 GbrrJC1o1U1vTX6QHPa5EUGPgBH8SS/c8W/aOYFGcq8VKqeXCZwgbHe7CtMWqlXn
 C69cRg07i9P0AbYPMGmavyXvzpw+osETqItkOulud6fx6IuduaArLINUp78055JH
 FP31o1jKHdbXuoPLsaXmMYOR90E+g==
X-ME-Sender: <xms:81hzYBzB9-oyxQTYtbm32opjPOrEw3-4p3Yrt9bWD0UFwHbY-xm9PQ>
 <xme:81hzYBR9wjhVlFXtIhUDlgs-aR43WQ6AuEKgnT_1iYHuPVfNogPuLSZiM5lpmrd8c
 DlqwlyKPjmsqEoBBQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekhedgjeeiucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne
 fgmhhpthihuchsuhgsjhgvtghtucdluddtmdenucfjughrpeffhffvkfggtggusehttder
 tddttddvnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrg
 hrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpefhjeeigfefvedvfeetheegledtkeev
 uddtgedtudeiteehteegvdefffduffefffenucfkphepuddttddruddurdduieelrdduud
 eknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheplhgv
 ohesfhgrmhhulhgrrhhirdhnrghmvg
X-ME-Proxy: <xmx:81hzYLWR_4TaUbBvslWecO-aOQZsEJxNocrBTQ4aQff_5CzKcdhxiA>
 <xmx:81hzYDgUecuxd5-tnqaOan7hd9XN_pg--05DHXH2qKlRcC82hhcvow>
 <xmx:81hzYDCwm9rw6XhbbZXYqcW8gI93YlF4OH6YZlAVEwKpTh7ZKfayEQ>
 <xmx:9FhzYGOzPAQMfj0VWBUQPOdkKeTg2uNQvZHzPGQP4xqzWZUfIwVl5Q>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 9050D24005B
 for <control <at> debbugs.gnu.org>; Sun, 11 Apr 2021 16:15:47 -0400 (EDT)
Date: Sun, 11 Apr 2021 16:15:45 -0400
From: Leo Famulari <leo@HIDDEN>
To: GNU bug tracker automated control server <control <at> debbugs.gnu.org>
Message-ID: <YHNY8WY6DeV3Qqfd@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Spam-Score: 1.2 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  retitle 46829 `guix pull` uses incorrect certificate store
 Content analysis details:   (1.2 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.7 RCVD_IN_DNSWL_LOW      RBL: Sender listed at https://www.dnswl.org/,
 low trust [64.147.123.20 listed in list.dnswl.org]
 -0.0 RCVD_IN_MSPIKE_H4      RBL: Very Good reputation (+4)
 [64.147.123.20 listed in wl.mailspike.net]
 1.8 MISSING_SUBJECT        Missing Subject: header
 0.2 NO_SUBJECT             Extra score for no subject
 -0.0 RCVD_IN_MSPIKE_WL      Mailspike good senders
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.2 (/)

retitle 46829 `guix pull` uses incorrect certificate store





Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sun, 11 Apr 2021 20:43:02 +0000
Resent-Message-ID: <handler.46829.B46829.16181737291817 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.16181737291817
          (code B ref 46829); Sun, 11 Apr 2021 20:43:02 +0000
Received: (at 46829) by debbugs.gnu.org; 11 Apr 2021 20:42:09 +0000
Received: from localhost ([127.0.0.1]:55923 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVgu2-0000Sh-9d
	for submit <at> debbugs.gnu.org; Sun, 11 Apr 2021 16:42:09 -0400
Received: from wout4-smtp.messagingengine.com ([64.147.123.20]:59731)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVgu0-0000SU-M7
 for 46829 <at> debbugs.gnu.org; Sun, 11 Apr 2021 16:41:53 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.west.internal (Postfix) with ESMTP id 9FE7910F1;
 Sun, 11 Apr 2021 16:41:46 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Sun, 11 Apr 2021 16:41:46 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:content-transfer-encoding:in-reply-to; s=mesmtp;
 bh=MJjoldAA8TmRF/4t7coe/jeuRGDzOFE7gwJGH/64vmo=; b=MYVUHxDeRq8E
 xSF8ghuPsHNcMIwtiNVywJuYm8NZMqZgJcCcEv5HKCFF8GM8EM+AJcND87qqnCJY
 bRJpFmkycKJmHrYWL9NHz6NUTKxrJRJjAG++REMBYYZVe5rjeqc9ei7AgfEzMevf
 eNJq0gVwyJbqd0HNwgAvb4ON1iXqJ4A=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-transfer-encoding:content-type
 :date:from:in-reply-to:message-id:mime-version:references
 :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=MJjoldAA8TmRF/4t7coe/jeuRGDzOFE7gwJGH/64v
 mo=; b=HTnup5YwWLnQvdAELEFNupcR6gIhLHM46QfLtsG+uj5d1TT33HjAkGAHB
 1QmT8W0FKXyREzyEjjAC4WhLs/Dri6BuSlsIw4AV3exl6k+awPevTE1jYtjBi1We
 lOl+uPQnIQ9c4trA/874imQT7MgEhDYhkbEZT/Y0s7t4FYeGxWy0K89vVI8NtUb7
 WrpVEyflDyl1pYixPQ+i5Dl6o2aJ3RPEXTedW/sZs7U8Xw0y+OtbzBv2WRhCrJAI
 jPgioB7C3ZY8z5+NpYeHV+rdjkSZOtJZ5a7Gqpq0UD9U7bYrN2XAKP/i+AhPQlCN
 GrrSnBeO87pQ/Nh9WugPXcvc2TcVA==
X-ME-Sender: <xms:CV9zYPrmCdvBP-D5b8AGVkpilzZETBEgR3Q-BjvjnF3z9acwBqnypA>
 <xme:CV9zYJoQKisFOiRVpIG4Q4MSi4Hptdc6jys4SN6Ia5YiaR-CtiaFn_B4InquIoPgM
 UUiaeibD9ASRz7Trg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekhedgkedvucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne
 cujfgurhepfffhvffukfhfgggtugfgjgesthekredttddtjeenucfhrhhomhepnfgvohcu
 hfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrth
 htvghrnhepgeejgeeghedtudfgffdutddvffefffejkeffffevffehgedvvdeutdffkeej
 jeejnecukfhppedutddtrdduuddrudeiledruddukeenucevlhhushhtvghrufhiiigvpe
 dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:CV9zYMPFK_2iQb485UiNVW9wEdz5aiIFsSROkl9RU3ZP8oQxFKqwfw>
 <xmx:CV9zYC7S980pA9YVMA0jt7JVhX5F1ZGA3WgyV7MwYd20wcze5VJboQ>
 <xmx:CV9zYO6VBTwciWbzTizur8wKXS4YdddDdaHYQQ_w1T2WB3D7fNMYvA>
 <xmx:Cl9zYDi49KxXVjG7yCaPPv0Vf8TLa67My99uBED9boKQMvkMh_6ejQ>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id C818B1080063;
 Sun, 11 Apr 2021 16:41:45 -0400 (EDT)
Date: Sun, 11 Apr 2021 16:41:11 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHNe5+taYSQI70dt@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <877dm54zk3.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

On Wed, Mar 17, 2021 at 03:36:44PM +0100, Ludovic Courtès wrote:
>   (define (honor-x509-certificates store)
>     "Use the right X.509 certificates for Git checkouts over HTTPS."
>     (unless (honor-system-x509-certificates!)
>       (honor-lets-encrypt-certificates! store)))
> 
> By default, 1.2.0 installs ‘nss-certs’, so I would assume such
> installations are unaffected, right?

So, the bug here is that `guix pull` is using the wrong certificate
store. It should use le-certs, but is instead ignoring le-certs, and
looking for a system-wide store that doesn't exist.

I tested with an installer image from current master, and the bug still
exists.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 12 Apr 2021 01:30:01 +0000
Resent-Message-ID: <handler.46829.B46829.161819095629614 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161819095629614
          (code B ref 46829); Mon, 12 Apr 2021 01:30:01 +0000
Received: (at 46829) by debbugs.gnu.org; 12 Apr 2021 01:29:16 +0000
Received: from localhost ([127.0.0.1]:56080 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVlO7-0007ha-OF
	for submit <at> debbugs.gnu.org; Sun, 11 Apr 2021 21:29:15 -0400
Received: from wout5-smtp.messagingengine.com ([64.147.123.21]:47669)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVlO5-0007hM-Vt
 for 46829 <at> debbugs.gnu.org; Sun, 11 Apr 2021 21:29:14 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.west.internal (Postfix) with ESMTP id 0E5EC1655;
 Sun, 11 Apr 2021 21:29:07 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Sun, 11 Apr 2021 21:29:08 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:content-transfer-encoding:in-reply-to; s=mesmtp;
 bh=2VIuRfmIAv1oN995W9NpkqNsF4+LG5N1cAKM2blMCpQ=; b=zRJFd17cSkj6
 eNqukvaHiIwhSwW15f0OcgKTcp/occ8YE6lVPfN4ysGFLISq3ycw6gQ/lajWhDEt
 u5fw0RMhLHNl22e2dvufaKqs1st9dPSkAYXfZCTlcH/8i8rg4Q4Lvc7Y4pE7pOgG
 7vZ6dFojfRseDlAq6r3JwbNMvQ8H3Mw=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-transfer-encoding:content-type
 :date:from:in-reply-to:message-id:mime-version:references
 :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=2VIuRfmIAv1oN995W9NpkqNsF4+LG5N1cAKM2blMC
 pQ=; b=DRR9bxV20NoVWkxFFgLLWvYb7D+DzCyFeKyPd1vbkiQmQntpCLhkem4ou
 mJKjNC4sHeZ9PJMwEEW7eGE/8dt2Q2OHQnvgpny3JQ2/8DARKy04C1hz3C9Mq4jx
 fRYgLScy1kSE5O8gJnsDT3/CzINLwgPaUYanE6UtHGec8aBCgmQl0JUJyhZrHkXJ
 hS5FohsmJ3K/ZvQ3y1GIrMAM24BmxhuGzfXg1gHF3WnhS/vSgM2zijHOEN1xVf1y
 e9UM122SE3fHvLBCcTNCP0Yix/bI5nASSHXenatKqfO+tqhCBthpxv6VpU2+1e/p
 GTkmyqD6Eu6Bt0CX9UtMzbdjFukjw==
X-ME-Sender: <xms:Y6JzYHF9J7iOoHDzM1D3mVm61krPwGNNWyNT1BUf8_YXoukTtq2qTg>
 <xme:Y6JzYEULps1oBgW4u13-KQLDAzGj217jBRrpgP8lgBwkbvtO6CBwxd8IHbltUv_R-
 ToDl5eIB98XUrLlgQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekiedggeefucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne
 cujfgurhepfffhvffukfhfgggtugfgjgesthekredttddtjeenucfhrhhomhepnfgvohcu
 hfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrth
 htvghrnhepgeelffevueejleffvedutdeggeekhfdvhfefgfefkefgjeeuveeiffdttdfh
 uedunecuffhomhgrihhnpehlvghtshgvnhgtrhihphhtrdhorhhgnecukfhppedutddtrd
 duuddrudeiledruddukeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgr
 ihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:Y6JzYJIiz-6cP6znq4_aeCPhsf8S4gyRefKJdIn6eBJaclyCMlasYA>
 <xmx:Y6JzYFFQvIYFzIar3TzNBHHyzUv74o3LMYmZWZem70U0gp6zI8nA3Q>
 <xmx:Y6JzYNW8RhP0kC6xKVvD7wBjE6SSvDk946n-JJ9HuXpfGT12JSb-4A>
 <xmx:Y6JzYOc_k0TmhsneBLDQWN6IGgEGYKfqcy-uGcy6CgORm1HXQ0tYfQ>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 43E21108005F;
 Sun, 11 Apr 2021 21:29:07 -0400 (EDT)
Date: Sun, 11 Apr 2021 21:29:00 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHOiXP0JJZZej+7H@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <YHNe5+taYSQI70dt@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Sun, Apr 11, 2021 at 04:41:11PM -0400, Leo Famulari wrote:
> On Wed, Mar 17, 2021 at 03:36:44PM +0100, Ludovic Courtès wrote:
> >   (define (honor-x509-certificates store)
> >     "Use the right X.509 certificates for Git checkouts over HTTPS."
> >     (unless (honor-system-x509-certificates!)
> >       (honor-lets-encrypt-certificates! store)))
> > 
> > By default, 1.2.0 installs ‘nss-certs’, so I would assume such
> > installations are unaffected, right?
> 
> So, the bug here is that `guix pull` is using the wrong certificate
> store. It should use le-certs, but is instead ignoring le-certs, and
> looking for a system-wide store that doesn't exist.
> 
> I tested with an installer image from current master, and the bug still
> exists.

I checked and, although there have been some changes upstream at Let's
Encrypt [0], our le-certs still works for contacting Savannah with TLS.

[0] Some new root and intermediate certificates:

https://letsencrypt.org/certificates/

Once we fix this bug, we should look into updating the le-certs package.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 12 Apr 2021 06:43:02 +0000
Resent-Message-ID: <handler.46829.B46829.161820973827332 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161820973827332
          (code B ref 46829); Mon, 12 Apr 2021 06:43:02 +0000
Received: (at 46829) by debbugs.gnu.org; 12 Apr 2021 06:42:18 +0000
Received: from localhost ([127.0.0.1]:56238 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVqH4-00076m-8j
	for submit <at> debbugs.gnu.org; Mon, 12 Apr 2021 02:42:18 -0400
Received: from wout3-smtp.messagingengine.com ([64.147.123.19]:57247)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVqH2-00076T-Rf
 for 46829 <at> debbugs.gnu.org; Mon, 12 Apr 2021 02:42:17 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.west.internal (Postfix) with ESMTP id AE52310B1;
 Mon, 12 Apr 2021 02:42:10 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute3.internal (MEProxy); Mon, 12 Apr 2021 02:42:11 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=jqd9dY2lfZJf+gInDHgvOLiP
 eLMV2RIHzuNmUYUgPNY=; b=ac4WDRMv74DJXNGCN23Q4+ZPZMsWPcjmkq1EcGVX
 offbgCI9GTKGLGUtZyA8AvLCUZcUBd5QqUfSP8/G4m/5PV4Qww1C4UjwXMuxN7dl
 lcJQkFQuV2Y6I0Iv9q69ua1XiDFEhs7TegMGErRooCoh1tzHgS55DRu05FCKZXSN
 y+4=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=jqd9dY
 2lfZJf+gInDHgvOLiPeLMV2RIHzuNmUYUgPNY=; b=jsZbNoUrRFh3iWtB4SClTm
 +Kqk26LzpfxRJS17vUs9sYsaD+rhTsnnNH+lhI+13MdtBxLpozzOTTU4kf238ueb
 T3i2gbe4EXEtDoqc8WJ9VutYLqV6+8QOj7lRejGHk4LaFESOKgt4E6y2g0x5ycs8
 7KJxp/T95DKTOkEhuvMFAwDUkzoDNlEtnxGTmRcQ6xkRP92Pqz0LtlImG5gjMtrD
 dgul7cYQKE7ELVVFCrD/8oxiBzKvUp+jGNIsiNxF6FfqeLy/VFq2JAfIyU6KF7tW
 5Sd2U1BLTyvH8I8fMMvd+8ywAcZE6Lpt2q+bNPtyho0+SDg2cZfMSPkmJ92gU/Og
 ==
X-ME-Sender: <xms:wetzYDtztzzvZwXF1uurFH__0BxWHyMWHwMAdqu_mXdhHTs7BKHv9Q>
 <xme:wetzYEcu_VfKPxRLUJHD8TGcrXNUSWnkzYUDAGP0-Mz09b3kyZUMHdpaQVY-ujdxO
 quMBPQ91dO3a4tFYA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekiedguddtlecutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
 enucfjughrpeffhffvuffkfhggtggujgesthdtredttddtvdenucfhrhhomhepnfgvohcu
 hfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrth
 htvghrnhepveeffefgfedulefffeefhfejjeevgefgieevkeetveelhfefudffudevhfeg
 fedunecuffhomhgrihhnpehlvghtshgvnhgtrhihphhtrdhorhhgnecukfhppedutddtrd
 duuddrudeiledruddukeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgr
 ihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:wetzYGzWNCGuqsjm_EcVReaQAkAaDwFS6ZLTGqtfhxPrjQLXJiU41w>
 <xmx:wetzYCPAlzTuoGL1Q9wlZ9Ayi568wPmqXKKLRiHUoayiL-_XySQc4g>
 <xmx:wetzYD8FxHGVJ8Fm6tfJWkOtWWK7GCGECtCEDhClAxx_WTuptO7z9g>
 <xmx:wutzYAHV5VI3WPWjvKGfHKjnl1hARWcWvdF--lpR92DYFbCNhBfVEA>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id B710924005E;
 Mon, 12 Apr 2021 02:42:09 -0400 (EDT)
Date: Mon, 12 Apr 2021 02:42:07 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHPrv2NdqqaLWh42@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <YHOiXP0JJZZej+7H@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Sun, Apr 11, 2021 at 09:29:00PM -0400, Leo Famulari wrote:
> I checked and, although there have been some changes upstream at Let's
> Encrypt [0], our le-certs still works for contacting Savannah with TLS.

I checked wrong; le-certs needs to be updated. I'm testing the update
now...

> [0] Some new root and intermediate certificates:
> 
> https://letsencrypt.org/certificates/




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 12 Apr 2021 08:31:01 +0000
Resent-Message-ID: <handler.46829.B46829.16182162317603 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.16182162317603
          (code B ref 46829); Mon, 12 Apr 2021 08:31:01 +0000
Received: (at 46829) by debbugs.gnu.org; 12 Apr 2021 08:30:31 +0000
Received: from localhost ([127.0.0.1]:56370 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVrxY-0001kX-DM
	for submit <at> debbugs.gnu.org; Mon, 12 Apr 2021 04:30:31 -0400
Received: from wout1-smtp.messagingengine.com ([64.147.123.24]:42185)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVrxW-0001bP-HF
 for 46829 <at> debbugs.gnu.org; Mon, 12 Apr 2021 04:30:15 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.west.internal (Postfix) with ESMTP id 490EDFE1;
 Mon, 12 Apr 2021 04:30:07 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Mon, 12 Apr 2021 04:30:07 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=9/s84oxMYDtQt0oNgSZLJkz8
 NzqC8osueRQ96aBKWwY=; b=FszGPGR+xK4UYxxmAnkTL3G1DlIOcpSQ40jW+bne
 vhYeEY4tHQazSht4ZGKT8c373fVbHmcX3RtlToNLAbhyByLakmin7NYb5YcOiTl7
 Dt/73zwgVmAMUeYDo8wOkLdYx59jWU3L1086tk7yc94uXenPyZ50nmKpX+kjylSa
 jTc=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=9/s84o
 xMYDtQt0oNgSZLJkz8NzqC8osueRQ96aBKWwY=; b=K7okIUnH77AZmXyFEBBd3o
 a3s9KFLvPlPc2Cg5YxjUY/cNskiuBGA0lcJbDENN7ExmFd74MHaMwNLGmeEJz7zn
 TTxgRZ+ZoXbCr72OdNdmiTdomTuQvU13DORYyq+F44uoQx+maztPkwevxnndkEFe
 +GJufwh+06HsvkduAE+yhTp+aq3rUm9A8olum3/PsJv0UdXggsTrytI6IxAFjH0E
 oDKGscLBuyVcqjqnYv7c3ND94JG4vuLuU/bpMEh+NW0yxBDzadNf19B9BOBmKMYt
 1eS9ayIjbjphMjyio8YQ1mewqSL9v715Do3O8ZxFkdzQOjuL1MkGlW4DjA/eMnIQ
 ==
X-ME-Sender: <xms:DgV0YJSWNjyorNvARd3Z8uCrNvkfqTHZJmdUpCaav0x9NphmPIe_BA>
 <xme:DgV0YCwx7R6lbx63c3X4YW19D2GOejFSsMRGerEbGheowTX37UWzFO461V4CTkJ8G
 q0TgWVty6or5gsPLw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekjedgtdegucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne
 cujfgurhepfffhvffukfhfgggtuggjsehgtderredttddvnecuhfhrohhmpefnvghoucfh
 rghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrghtth
 gvrhhnpedukeevgeetkeeltefgiedtjefgjeekffduteehvdfhueekudelieekjeefheff
 teenucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivgeptd
 enucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg
X-ME-Proxy: <xmx:DgV0YO3PG7lA4GM0WvBV-bLQ7-91AcZTCPB1kO16aXkfqPN-MEIUbw>
 <xmx:DgV0YBDiBUd21JRdRaONsRIJHEEx50HZu8-DlLyfu5LQuEbet4o2Zg>
 <xmx:DgV0YChlnwlWqWWcJu5FEcq-zqN1xr-j5WSr9m4awkLtz6Ka66foiQ>
 <xmx:DgV0YKIdSItqo1TUJzru9yBhWWtFg3qOtBemjRhr6zPaVdsuKxIm9Q>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 305771080063;
 Mon, 12 Apr 2021 04:30:06 -0400 (EDT)
Date: Mon, 12 Apr 2021 04:30:04 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHQFDOGNyqVlmWm0@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="zmq5MP0YTSn+7QnT"
Content-Disposition: inline
In-Reply-To: <YHPrv2NdqqaLWh42@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)


--zmq5MP0YTSn+7QnT
Content-Type: multipart/mixed; boundary="HL+UgvezEOi1xza6"
Content-Disposition: inline


--HL+UgvezEOi1xza6
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Mon, Apr 12, 2021 at 02:42:07AM -0400, Leo Famulari wrote:
> I checked wrong; le-certs needs to be updated. I'm testing the update
> now...

I couldn't figure out how to test an update of the Guix package, but
here is my patch updating le-certs.

`make update-guix-package` segfaults for me, sometime after it updates
the source tree but before adding the source checkout to the store.

I did `guix build guix --with-git-url=guix=$PWD`, which succeeded, but
using --with-git-url changes the derivation, so I couldn't test this in
a VM sans nss-certs.

--HL+UgvezEOi1xza6
Content-Type: text/plain; charset=utf-8
Content-Disposition: attachment;
	filename="0001-gnu-le-certs-Update-to-new-Let-s-Encrypt-certificate.patch"
Content-Transfer-Encoding: quoted-printable

=46rom f0da45e7b78a6dd2b51dec1a948ea95866811c02 Mon Sep 17 00:00:00 2001
=46rom: Leo Famulari <leo@HIDDEN>
Date: Mon, 12 Apr 2021 02:19:33 -0400
Subject: [PATCH] gnu: le-certs: Update to new Let's Encrypt certificates.

* gnu/packages/certs.scm (le-certs): Update the certificate store.
[inputs]: Add isrgrootx2.pem, letsencryptauthorityr3.pem,
letsencryptauthorityr4.pem, letsencryptauthoritye1.pem, and
letsencryptauthoritye2.pem. Remove letsencryptauthorityx3.pem and
letsencryptauthorityx4.pem.
[arguments]: Adjust the builder accordingly.
---
 gnu/packages/certs.scm | 76 ++++++++++++++++++++++++++++++------------
 1 file changed, 55 insertions(+), 21 deletions(-)

diff --git a/gnu/packages/certs.scm b/gnu/packages/certs.scm
index b72d927c0d..9dcd733ffe 100644
--- a/gnu/packages/certs.scm
+++ b/gnu/packages/certs.scm
@@ -147,7 +147,7 @@ taken from the NSS package and thus ultimately from the=
 Mozilla project.")
 (define-public le-certs
   (package
     (name "le-certs")
-    (version "0")
+    (version "1")
     (source #f)
     (build-system trivial-build-system)
     (arguments
@@ -155,9 +155,12 @@ taken from the NSS package and thus ultimately from th=
e Mozilla project.")
        #:builder
        (begin
          (use-modules (guix build utils))
-         (let ((root (assoc-ref %build-inputs "isrgrootx1.pem"))
-               (intermediate (assoc-ref %build-inputs "letsencryptauthorit=
yx3.pem"))
-               (backup (assoc-ref %build-inputs "letsencryptauthorityx4.pe=
m"))
+         (let ((root-rsa (assoc-ref %build-inputs "isrgrootx1.pem"))
+               (root-ecdsa (assoc-ref %build-inputs "isrgrootx2.pem"))
+               (intermediate-rsa (assoc-ref %build-inputs "letsencryptauth=
orityr3.pem"))
+               (intermediate-ecdsa (assoc-ref %build-inputs "letsencryptau=
thoritye1.pem"))
+               (backup-rsa (assoc-ref %build-inputs "letsencryptauthorityr=
4.pem"))
+               (backup-ecdsa (assoc-ref %build-inputs "letsencryptauthorit=
ye2.pem"))
                (out (string-append (assoc-ref %outputs "out") "/etc/ssl/ce=
rts"))
                (openssl (assoc-ref %build-inputs "openssl"))
                (perl (assoc-ref %build-inputs "perl")))
@@ -166,7 +169,9 @@ taken from the NSS package and thus ultimately from the=
 Mozilla project.")
              (lambda (cert)
                (copy-file cert (string-append out "/"
                                               (strip-store-file-name cert)=
)))
-             (list root intermediate backup))
+             (list root-rsa root-ecdsa
+                   intermediate-rsa intermediate-ecdsa
+                   backup-rsa backup-ecdsa))
=20
            ;; Create hash symlinks suitable for OpenSSL ('SSL_CERT_DIR' and
            ;; similar.)
@@ -186,26 +191,55 @@ taken from the NSS package and thus ultimately from t=
he Mozilla project.")
            (sha256
             (base32
              "1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92"))))
-       ;; "Let=E2=80=99s Encrypt Authority X3", the active Let's Encrypt i=
ntermediate
-       ;; certificate.
-       ("letsencryptauthorityx3.pem"
+      ; Upcoming ECDSA Let's Encrypt root certificate, "ISRG Root X2"
+      ; Let's Encrypt describes it as "Active, limited availability"
+      ("isrgrootx2.pem"
         ,(origin
            (method url-fetch)
-           (uri "https://letsencrypt.org/certs/letsencryptauthorityx3.pem")
+           (uri "https://letsencrypt.org/certs/isrg-root-x2.pem")
            (sha256
             (base32
-             "100lxxvqv4fj563bm03zzk5r36hq5jx9nnrajzs38g825c5k0cg2"))))
-       ;; "Let=E2=80=99s Encrypt Authority X4", the backup Let's Encrypt i=
ntermediate
-       ;; certificate.  This will be used for disaster recovery and will o=
nly be
-       ;; used should Let's Encrypt lose the ability to issue with "Let=E2=
=80=99s
-       ;; Encrypt Authority X3".
-       ("letsencryptauthorityx4.pem"
-        ,(origin
-           (method url-fetch)
-           (uri "https://letsencrypt.org/certs/letsencryptauthorityx4.pem")
-           (sha256
-            (base32
-             "0d5256gwf73drq6q6jala28rfzhrgbk5pjfq27vc40ly91pdyh8m"))))))
+             "04xh8912nwkghqydbqvvmslpqbcafgxgjh9qnn0z2vgy24g8hgd1"))))
+      ;; "Let=E2=80=99s Encrypt Authority R3", the active Let's Encrypt in=
termediate
+      ;; RSA certificate.
+      ("letsencryptauthorityr3.pem"
+       ,(origin
+          (method url-fetch)
+          (uri "https://letsencrypt.org/certs/lets-encrypt-r3.pem")
+          (sha256
+           (base32
+            "0clxry49rx6qd3pgbzknpgzywbg3j96zy0227wwjnwivqj7inzhp"))))
+      ;; "Let=E2=80=99s Encrypt Authority E1", the active Let's Encrypt in=
termediate
+      ;; ECDSA certificate.
+      ("letsencryptauthoritye1.pem"
+       ,(origin
+          (method url-fetch)
+          (uri "https://letsencrypt.org/certs/lets-encrypt-e1.pem")
+          (sha256
+           (base32
+            "1zwrc6dlk1qig0z23x6x7fib14rrw41ccbf2ds0rw75zccc59xx0"))))
+      ;; "Let=E2=80=99s Encrypt Authority R4", the backup Let's Encrypt in=
termediate
+      ;; RSA certificate.  This will be used for disaster recovery and wil=
l only be
+      ;; used should Let's Encrypt lose the ability to issue with "Let=E2=
=80=99s
+      ;; Encrypt Authority R3".
+      ("letsencryptauthorityr4.pem"
+       ,(origin
+          (method url-fetch)
+          (uri "https://letsencrypt.org/certs/lets-encrypt-r4.pem")
+          (sha256
+           (base32
+            "09bzxzbwb9x2xxan3p1fyj1pi2p5yks0879gwz5f28y9mzq8vmd8"))))
+      ;; "Let=E2=80=99s Encrypt Authority E2", the backup Let's Encrypt in=
termediate
+      ;; ECDSA certificate.  This will be used for disaster recovery and w=
ill
+      ;; only be used should Let's Encrypt lose the ability to issue with =
"Let=E2=80=99s
+      ;; Encrypt Authority E1".
+      ("letsencryptauthoritye2.pem"
+       ,(origin
+          (method url-fetch)
+          (uri "https://letsencrypt.org/certs/lets-encrypt-e2.pem")
+          (sha256
+           (base32
+            "1wfmsa29lyi9dkh6xdcamb2rhkp5yl2ppnsgrzcrjl5c7gbqh9ml"))))))
     (home-page "https://letsencrypt.org/certificates/")
     (synopsis "Let's Encrypt root and intermediate certificates")
     (description "This package provides a certificate store containing onl=
y the
--=20
2.31.1


--HL+UgvezEOi1xza6--

--zmq5MP0YTSn+7QnT
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Gnic
-----END PGP SIGNATURE-----

--zmq5MP0YTSn+7QnT--




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 12 Apr 2021 12:26:01 +0000
Resent-Message-ID: <handler.46829.B46829.161823035321436 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Leo Famulari <leo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161823035321436
          (code B ref 46829); Mon, 12 Apr 2021 12:26:01 +0000
Received: (at 46829) by debbugs.gnu.org; 12 Apr 2021 12:25:53 +0000
Received: from localhost ([127.0.0.1]:56733 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVvdZ-0005Zf-2Y
	for submit <at> debbugs.gnu.org; Mon, 12 Apr 2021 08:25:53 -0400
Received: from eggs.gnu.org ([209.51.188.92]:52042)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1lVvdX-0005ZI-2e
 for 46829 <at> debbugs.gnu.org; Mon, 12 Apr 2021 08:25:51 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e]:53346)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@HIDDEN>)
 id 1lVvdR-0007kk-3m; Mon, 12 Apr 2021 08:25:45 -0400
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=47974 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1lVvdQ-0002E2-Fc; Mon, 12 Apr 2021 08:25:44 -0400
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
In-Reply-To: <YHQFDOGNyqVlmWm0@HIDDEN> (Leo Famulari's message of "Mon,
 12 Apr 2021 04:30:04 -0400")
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <YHQFDOGNyqVlmWm0@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux)
X-URL: http://www.fdn.fr/~lcourtes/
X-Revolutionary-Date: 23 Germinal an 229 de la =?UTF-8?Q?R=C3=A9volution?=
X-PGP-Key-ID: 0x090B11993D9AEBB5
X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc
X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5
X-OS: x86_64-pc-linux-gnu
Date: Mon, 12 Apr 2021 14:25:43 +0200
Message-ID: <87y2dnpu48.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi Leo,

Leo Famulari <leo@HIDDEN> skribis:

> I couldn't figure out how to test an update of the Guix package, but
> here is my patch updating le-certs.

Cool!

> `make update-guix-package` segfaults for me, sometime after it updates
> the source tree but before adding the source checkout to the store.

Could you grab a backtrace, with:

  gdb $(which guile) core

where =E2=80=98core=E2=80=99 is the core file (it might live elsewhere on a=
 foreign
distro).  It could be that the foreign distro packages being used are
buggy, or that a mixture of Guix- and distro-provided libraries are
being loaded.

In the meantime, you could also update the =E2=80=98guix=E2=80=99 package b=
y hand for
testing purposes.

> From f0da45e7b78a6dd2b51dec1a948ea95866811c02 Mon Sep 17 00:00:00 2001
> From: Leo Famulari <leo@HIDDEN>
> Date: Mon, 12 Apr 2021 02:19:33 -0400
> Subject: [PATCH] gnu: le-certs: Update to new Let's Encrypt certificates.
>
> * gnu/packages/certs.scm (le-certs): Update the certificate store.
> [inputs]: Add isrgrootx2.pem, letsencryptauthorityr3.pem,
> letsencryptauthorityr4.pem, letsencryptauthoritye1.pem, and
> letsencryptauthoritye2.pem. Remove letsencryptauthorityx3.pem and
> letsencryptauthorityx4.pem.
> [arguments]: Adjust the builder accordingly.

Nice!  So how do we know if/when this has to be updated?  Maybe we can
add a =E2=80=98release-monitoring-url=E2=80=99 property?

I just checked that the files currently in use were still there, and
they are, but they=E2=80=99re outdated.

Thanks!

Ludo=E2=80=99.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 12 Apr 2021 12:26:02 +0000
Resent-Message-ID: <handler.46829.B46829.161823035321442 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Leo Famulari <leo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161823035321442
          (code B ref 46829); Mon, 12 Apr 2021 12:26:02 +0000
Received: (at 46829) by debbugs.gnu.org; 12 Apr 2021 12:25:53 +0000
Received: from localhost ([127.0.0.1]:56735 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVvdZ-0005Zh-Bs
	for submit <at> debbugs.gnu.org; Mon, 12 Apr 2021 08:25:53 -0400
Received: from eggs.gnu.org ([209.51.188.92]:52048)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1lVvdX-0005ZK-4A
 for 46829 <at> debbugs.gnu.org; Mon, 12 Apr 2021 08:25:51 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e]:53341)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@HIDDEN>)
 id 1lVvdO-0007iY-2V; Mon, 12 Apr 2021 08:25:44 -0400
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=47972 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1lVvcu-00027M-Sl; Mon, 12 Apr 2021 08:25:31 -0400
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <YHQFDOGNyqVlmWm0@HIDDEN>
X-URL: http://www.fdn.fr/~lcourtes/
X-Revolutionary-Date: 23 Germinal an 229 de la =?UTF-8?Q?R=C3=A9volution?=
X-PGP-Key-ID: 0x090B11993D9AEBB5
X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc
X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5
X-OS: x86_64-pc-linux-gnu
Date: Mon, 12 Apr 2021 14:25:11 +0200
In-Reply-To: <YHQFDOGNyqVlmWm0@HIDDEN> (Leo Famulari's message of "Mon,
 12 Apr 2021 04:30:04 -0400")
Message-ID: <87zgy3pu54.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi Leo,

Leo Famulari <leo@HIDDEN> skribis:

> I couldn't figure out how to test an update of the Guix package, but
> here is my patch updating le-certs.

Cool!

> `make update-guix-package` segfaults for me, sometime after it updates
> the source tree but before adding the source checkout to the store.

Could you grab a backtrace, with:

  gdb $(which guile) core

where =E2=80=98core=E2=80=99 is the core file (it might live elsewhere on a=
 foreign
distro).  It could be that the foreign distro packages being used are
buggy, or that a mixture of Guix- and distro-provided libraries are
being loaded.

In the meantime, you could also update the =E2=80=98guix=E2=80=99 package b=
y hand for
testing purposes.

> From f0da45e7b78a6dd2b51dec1a948ea95866811c02 Mon Sep 17 00:00:00 2001
> From: Leo Famulari <leo@HIDDEN>
> Date: Mon, 12 Apr 2021 02:19:33 -0400
> Subject: [PATCH] gnu: le-certs: Update to new Let's Encrypt certificates.
>
> * gnu/packages/certs.scm (le-certs): Update the certificate store.
> [inputs]: Add isrgrootx2.pem, letsencryptauthorityr3.pem,
> letsencryptauthorityr4.pem, letsencryptauthoritye1.pem, and
> letsencryptauthoritye2.pem. Remove letsencryptauthorityx3.pem and
> letsencryptauthorityx4.pem.
> [arguments]: Adjust the builder accordingly.

Nice!  So how do we know if/when this has to be updated?  Maybe we can
add a =E2=80=98release-monitoring-url=E2=80=99 property?

I just checked that the files currently in use were still there, and
they are, but they=E2=80=99re outdated.

Thanks!

Ludo=E2=80=99.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 12 Apr 2021 17:03:02 +0000
Resent-Message-ID: <handler.46829.B46829.161824694217927 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161824694217927
          (code B ref 46829); Mon, 12 Apr 2021 17:03:02 +0000
Received: (at 46829) by debbugs.gnu.org; 12 Apr 2021 17:02:22 +0000
Received: from localhost ([127.0.0.1]:57930 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lVzx8-0004f4-12
	for submit <at> debbugs.gnu.org; Mon, 12 Apr 2021 13:02:22 -0400
Received: from wout5-smtp.messagingengine.com ([64.147.123.21]:38831)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lVzx5-0004eq-J6
 for 46829 <at> debbugs.gnu.org; Mon, 12 Apr 2021 13:02:20 -0400
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44])
 by mailout.west.internal (Postfix) with ESMTP id A4E9B1896;
 Mon, 12 Apr 2021 13:02:13 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute4.internal (MEProxy); Mon, 12 Apr 2021 13:02:13 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:content-transfer-encoding:in-reply-to; s=mesmtp;
 bh=ZR4BMbE+7lELa5QDInU4Tb7SHHathGLy6Sd6uUu+CUg=; b=YySo77zn66GS
 ZQSwkk8yr8ugSixT71VnlWICTEdDQ1oGRsM7BJfwnln138BZ9PCgMN2952Idc3Jj
 ye+QUpT9dA8wfTCIsBmeDkUFgrVBZyFCDchXYsHPVwrJ2UM30v09fR1cFOaDI/9N
 gFq2p3hMffoNdtkD9Lg98PBPVh9Oq08=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-transfer-encoding:content-type
 :date:from:in-reply-to:message-id:mime-version:references
 :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=ZR4BMbE+7lELa5QDInU4Tb7SHHathGLy6Sd6uUu+C
 Ug=; b=F+U46D56u0E7x+4TX7VyhEL5zB5IDCoO2KoJicTwLCxdR41n3w43wuyeL
 2gxP2oacMAy/dSdXm/HhoXTonhKfk4NF/bU5627sdFCFUXWPjZlg95Dh7qXqyicy
 3MchwqqMXdSflhGWCwB/zZQ+BqqTCWVU2KlSzCRJD8dNnk1f8DqAEq7ZHKva1GqQ
 ZnQkGJRXi8TfPvhmsOuq1rGNMZeGSmS7WULA2GfN3FPZ863+g4Xb6fObixpVdNfT
 tu/JF5BJTZtRGCapbED83CFup2KWXSBaA+9vNjLfmDDnTHEEzc6Y4nhUtpxZ/3cJ
 HRriaCCTZFCREJIM932QvR1R4H9TQ==
X-ME-Sender: <xms:FH10YNo4dSRgW9_SadogMPRQD1C-r7o6QovuodDIsRA5YIBIZthDZg>
 <xme:FH10YPyRhlY6LAKFSDLspmzsn7yB-AAPF4AQ8SPDbeaFWNNaw6DqPkNm0a4PO-VLp
 cU7y9PGOjRsAv4epQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekjedguddtlecutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
 enucfjughrpeffhffvuffkfhggtggugfgjsehtkeertddttdejnecuhfhrohhmpefnvgho
 ucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrg
 htthgvrhhnpeegjeeggeehtddugfffuddtvdfffeffjeekffffveffheegvddvuedtffek
 jeejjeenucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivg
 eptdenucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghm
 vg
X-ME-Proxy: <xmx:FH10YCKal0h7vqrC2cR6X_oKLqWqCFv0z5p71X-0ietgShGPTWQoyg>
 <xmx:FH10YBLtjRNCgndXVoKpcbCxX50DnFi54t6J1Rce9P5UAtrCvlqa_Q>
 <xmx:FH10YHsq7mz9h6lzG0eGAo0T818D_U1KYxQK2Y7clPsXg91L15DPGA>
 <xmx:FX10YJpSOkW1QNUmDIgJuONtNXE1o2koZC2TDo3OKpPfFonrH36_HQ>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 6FC2224005C;
 Mon, 12 Apr 2021 13:02:12 -0400 (EDT)
Date: Mon, 12 Apr 2021 13:02:09 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHR9ERShZCqY//6Q@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <YHQFDOGNyqVlmWm0@HIDDEN> <87y2dnpu48.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <87y2dnpu48.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Mon, Apr 12, 2021 at 02:25:43PM +0200, Ludovic Courtès wrote:
> In the meantime, you could also update the ‘guix’ package by hand for
> testing purposes.

I tried this, but I can't figure out how to actually build the updated
Guix package, since the source code isn't added to the store.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 12 Apr 2021 17:16:02 +0000
Resent-Message-ID: <handler.46829.B46829.161824772219157 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161824772219157
          (code B ref 46829); Mon, 12 Apr 2021 17:16:02 +0000
Received: (at 46829) by debbugs.gnu.org; 12 Apr 2021 17:15:22 +0000
Received: from localhost ([127.0.0.1]:57954 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lW09i-0004yv-5Z
	for submit <at> debbugs.gnu.org; Mon, 12 Apr 2021 13:15:22 -0400
Received: from wout2-smtp.messagingengine.com ([64.147.123.25]:44947)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lW09g-0004yf-9h
 for 46829 <at> debbugs.gnu.org; Mon, 12 Apr 2021 13:15:20 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.west.internal (Postfix) with ESMTP id 6C9E61883;
 Mon, 12 Apr 2021 13:15:14 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute3.internal (MEProxy); Mon, 12 Apr 2021 13:15:14 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:content-transfer-encoding:in-reply-to; s=mesmtp;
 bh=LqHuDb+i+CexOReeU/F0mZvOQDSNMk5LRaFSMy/z2J8=; b=gQpyqwq8HlzK
 gpY/PaU60c0tpN8xf9oWBSFT+SX+Mj5ryRF7joIbfEt6/LQ6H6UOXKh2G3g8Cxsf
 IlB7P74dKTiuwtxWuQg7C5h89T9WPxI3VXb3u1a4leYOnLziUpKaSvF1PKlTRP/L
 BP/So4ix/GAsaR3ZJ/vZ8GJgsnh7tL0=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-transfer-encoding:content-type
 :date:from:in-reply-to:message-id:mime-version:references
 :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=LqHuDb+i+CexOReeU/F0mZvOQDSNMk5LRaFSMy/z2
 J8=; b=uZbbldAGZLl9togyIbbytBfp29RZMvlxYeQWfCJWFcjuSpN8POHk1s1OF
 oBSUdeXOcngHRZxdptYcqEhIQwn+mxcy4r6/Xw6uZAEbdzZgxHXUc9QBEm7DeFFz
 Jv2f5wgiEANpTxuM5o/ualAvv/LugFtzwGlGceGdLLdwyJQkj/KBvETd5VliPeOz
 0uNALuLuFg+TUVZ1WET8EeMJDBzmxn2zOOUycxHxaiIE7uPwCq6DzPncjA+m9/Gb
 k+NIeq7kcuUbb1Mg/ZTAXnfKuuLcG0PKAt69Ulnxi3/fj8FDHHwvZZvna+9rlahq
 YSlqqKuPVV4k7AaobEpCV1pb9a4Xg==
X-ME-Sender: <xms:IYB0YGC5qhvkyONVTGeB3f-C7H-7-BNPAsnMPnCecDXvI9zDnmMrZw>
 <xme:IYB0YAhKs5Zxu0z0wCr5r8KbUwGmExR5O9sjmWKaTKQFkh4gD3GEeBALcqohVU1o7
 X6lyRJlNAdOUOLCyw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekjedgudduudcutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
 enucfjughrpeffhffvuffkfhggtggugfgjsehtkeertddttddunecuhfhrohhmpefnvgho
 ucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrg
 htthgvrhhnpeeuueegudfgvdfgveeuvdeludelfeejhfeggfejtefggeekudekhfdvfeel
 jeehgfenucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivg
 eptdenucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghm
 vg
X-ME-Proxy: <xmx:IYB0YJkNmmV-eIIj-vgWYNCvns70J8pbiwjmwjCHs16A2wJ4DJL2LQ>
 <xmx:IYB0YEysvia2iCsBBIjC35l2BgMH-DRwixfHXMerMSv5IjithXl82A>
 <xmx:IYB0YLRoT8hLW1WKZhC-gLzMp0ctl-JwGI-EUDVyTIO-nS0ass05lw>
 <xmx:IoB0YM7kt-1zHk7JU2bK1hbeeVrvyk5THVo_BOAUqcCsUkDvW8r1rg>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 489D724005D;
 Mon, 12 Apr 2021 13:15:13 -0400 (EDT)
Date: Mon, 12 Apr 2021 13:15:11 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHSAH66jr+zxk232@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <YHQFDOGNyqVlmWm0@HIDDEN> <87zgy3pu54.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <87zgy3pu54.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Mon, Apr 12, 2021 at 02:25:11PM +0200, Ludovic Courts wrote:
> Could you grab a backtrace, with:
> 
>   gdb $(which guile) core

I don't know where to find this 'core' file. I'm on Guix System (the
Berlin server).




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 12 Apr 2021 17:33:01 +0000
Resent-Message-ID: <handler.46829.B46829.161824876720785 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161824876720785
          (code B ref 46829); Mon, 12 Apr 2021 17:33:01 +0000
Received: (at 46829) by debbugs.gnu.org; 12 Apr 2021 17:32:47 +0000
Received: from localhost ([127.0.0.1]:57973 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lW0QY-0005PB-Gd
	for submit <at> debbugs.gnu.org; Mon, 12 Apr 2021 13:32:46 -0400
Received: from wout2-smtp.messagingengine.com ([64.147.123.25]:48243)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lW0QI-0005Oj-TX
 for 46829 <at> debbugs.gnu.org; Mon, 12 Apr 2021 13:32:45 -0400
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44])
 by mailout.west.internal (Postfix) with ESMTP id DE61B18B8;
 Mon, 12 Apr 2021 13:32:24 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute4.internal (MEProxy); Mon, 12 Apr 2021 13:32:25 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=IK4yCZsvLCsEMUoDSGmoSVny
 oSmGvj0eVnuc3h+eibA=; b=JPLNWwzn7tD+zfmxIobiUEHA7Z8nnlTWwSkHeMoB
 fJ0O5Jq09aLGUC4QRdresXLgZysP9QoBzsqWP99GpyHPXIO9E+plxmCRkcbZuLP9
 xE2YwDAXlcX5jcDFOY99fHCzqrYE3GEMBBeu7EvdRR0OeB/C84xYQMrdlF4FsWaW
 Y04=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=IK4yCZ
 svLCsEMUoDSGmoSVnyoSmGvj0eVnuc3h+eibA=; b=RY5zb2vHRHlBfoUF3CyLf8
 +fdI1AOOFidO582Rnui66a/82QH3BbbQP1S8OVLVAosrhfkLfuaTscTNNHtl1SqI
 qyG9O5zFewRiV0A4PP8WikCdxDiKDHf5hXkA34/QEGIBhFA4R/mZZmY4Y4feDvXd
 CDovnyQ7ILOJUQHCVB3clQ1mC1TuSeYN4dfosiJFiJbPZ3l/1A38ZkAT69/cnqwP
 cXMy3//FczX4nRKSV1692jAfNuWbgCDC0xtA+7wHcuTSoAp8Td9czDT21PL04C/1
 aGWXSmI35DdQW3HngGMOdOiD3+vvvYg+uWCP7X0z5x+emtpH05yu8h0cn7Vy2L8Q
 ==
X-ME-Sender: <xms:J4R0YKtxHfWS776-dklbNDc5-AT79JCslb_WVkv9460cw1f5v6arsg>
 <xme:J4R0YP697vale2UEsuM5jQ59lK-XH7CwnlpqGhoJhTbgIjkpQlng6ngj19X19tOA6
 YV-0AaupugkbJqqsw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekjedgudduhecutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
 enucfjughrpeffhffvuffkfhggtggujgesghdtreertddtudenucfhrhhomhepnfgvohcu
 hfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrth
 htvghrnheptdehieeggfefgfeitdetieehhfekffduieevveehheelteeigfeivdeuffek
 veejnecuffhomhgrihhnpehgnhhurdhorhhgnecukfhppedutddtrdduuddrudeiledrud
 dukeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehl
 vghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:J4R0YGcViNWOAZjN_vgqvKLOwEj7hhQE53IbCpMcJb4pDTFdTUk_Fw>
 <xmx:J4R0YMyN67LbgtopCCTUdCyhbkZRk9nTS_ypyIBnI2E41Wb4wsvibg>
 <xmx:J4R0YL_gZuNip3oPU4XrtLZywq0Z3LpHtVVL2ZHnXyS693_wPo69DA>
 <xmx:KIR0YCL75Pe2LvmBw7mpL3VxWfZXzTo95lQQS9qdYZJXcHMSuTBP2w>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id CF56F24005D;
 Mon, 12 Apr 2021 13:32:23 -0400 (EDT)
Date: Mon, 12 Apr 2021 13:32:21 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHSEJVTsObt2Zia+@jasmine.lan>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <YHQFDOGNyqVlmWm0@HIDDEN> <87zgy3pu54.fsf@HIDDEN>
 <YHSAH66jr+zxk232@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="W8KeKVtiHUAZjNb4"
Content-Disposition: inline
In-Reply-To: <YHSAH66jr+zxk232@HIDDEN>
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--W8KeKVtiHUAZjNb4
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Apr 12, 2021 at 01:15:11PM -0400, Leo Famulari wrote:
> On Mon, Apr 12, 2021 at 02:25:11PM +0200, Ludovic Court=E8s wrote:
> > Could you grab a backtrace, with:
> >=20
> >   gdb $(which guile) core
>=20
> I don't know where to find this 'core' file. I'm on Guix System (the
> Berlin server).

I did `ulimit -c unlimited`, and then the core file was created at
/tmp/core.

I ran your command, and this is the output:

------
gdb $(which guile) /tmp/core                                               =
                                                                           =
               =20
GNU gdb (GDB) 10.1                                                         =
                                                                           =
                                         =20
Copyright (C) 2020 Free Software Foundation, Inc.                          =
                                                                           =
                                         =20
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.htm=
l>                                                                         =
                                         =20
This is free software: you are free to change and redistribute it.         =
                                                                           =
                                         =20
There is NO WARRANTY, to the extent permitted by law.                      =
                                                                           =
                                         =20
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-unknown-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /gnu/store/ildwvd8sl92znmwpxlnp7pbjkfwccih4-profile/bi=
n/guile...
(No debugging symbols found in /gnu/store/ildwvd8sl92znmwpxlnp7pbjkfwccih4-=
profile/bin/guile)

warning: Can't open file /home/lfam/.cache/guile/ccache/3.0-LE-8-4.4/home/l=
fam/guix/gnu/packages/package-management.scm.go (deleted) during file-backe=
d mapping note processing
[New LWP 70404]
[New LWP 70409]
[New LWP 70408]
[New LWP 70412]
[New LWP 70411]
[New LWP 70413]
[New LWP 70410]
[New LWP 70417]
[New LWP 70414]
[New LWP 70416]
[New LWP 70415]
[New LWP 70418]
[New LWP 70419]
[New LWP 70421]
[New LWP 70422]
[New LWP 70420]
[New LWP 70423]
[New LWP 70424]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/gnu/store/fa6wj5bxkj5ll1d7292a70knmyl7a0c=
r-glibc-2.31/lib/libthread_db.so.1".
Core was generated by `/gnu/store/66xwl53f9ws7gin8iaqkhg111gimw1li-profile/=
bin/guile ./build-aux/updat'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x0000000000000000 in ?? ()
[Current thread is 1 (Thread 0x7eff7d8cdb80 (LWP 70404))]
;;; note: auto-compilation is enabled, set GUILE_AUTO_COMPILE=3D0
;;;       or pass the --no-auto-compile argument to disable.
;;; compiling /gnu/store/m5iprcg6pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/l=
ibguile-3.0.so.1.3.0-gdb.scm
;;; /gnu/store/m5iprcg6pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.=
0.so.1.3.0-gdb.scm:293:20: warning: possibly unbound variable `program-debu=
g-info-name'
;;; /gnu/store/m5iprcg6pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.=
0.so.1.3.0-gdb.scm:326:9: warning: possibly unbound variable `find-source-f=
or-addr'
;;; /gnu/store/m5iprcg6pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.=
0.so.1.3.0-gdb.scm:326:31: warning: possibly unbound variable `program-debu=
g-info-addr'
;;; /gnu/store/m5iprcg6pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.=
0.so.1.3.0-gdb.scm:327:31: warning: possibly unbound variable `program-debu=
g-info-context'
;;; compiled /home/lfam/.cache/guile/ccache/3.0-LE-8-4.2/gnu/store/m5iprcg6=
pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1.3.0-gdb.scm.go
;;; compiling /gnu/store/m5iprcg6pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/share=
/guile/3.0/system/base/types.scm
;;; compiled /home/lfam/.cache/guile/ccache/3.0-LE-8-4.2/gnu/store/m5iprcg6=
pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/share/guile/3.0/system/base/types.scm.=
go
------

--W8KeKVtiHUAZjNb4
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=eWjS
-----END PGP SIGNATURE-----

--W8KeKVtiHUAZjNb4--




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 12 Apr 2021 18:27:02 +0000
Resent-Message-ID: <handler.46829.B46829.16182520171447 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.16182520171447
          (code B ref 46829); Mon, 12 Apr 2021 18:27:02 +0000
Received: (at 46829) by debbugs.gnu.org; 12 Apr 2021 18:26:57 +0000
Received: from localhost ([127.0.0.1]:58056 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lW1Gz-0000NH-JP
	for submit <at> debbugs.gnu.org; Mon, 12 Apr 2021 14:26:57 -0400
Received: from wout2-smtp.messagingengine.com ([64.147.123.25]:51799)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lW1Gx-0000N3-LO
 for 46829 <at> debbugs.gnu.org; Mon, 12 Apr 2021 14:26:56 -0400
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44])
 by mailout.west.internal (Postfix) with ESMTP id D1FC7194F;
 Mon, 12 Apr 2021 14:26:49 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute4.internal (MEProxy); Mon, 12 Apr 2021 14:26:50 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:content-transfer-encoding:in-reply-to; s=mesmtp;
 bh=9v4gooc5B1pEEsJswZpEF2aCmxU49N0F/yNV5GZWL2E=; b=0V6+KmK3o//g
 ho6Ee/PZMjlPzdD8lfqw4P/fVQbZpYsrnJo/nOWNfcqJ7V3SPyHL6QE5Bml94IOp
 3TiZ6W2itCBawP884AryYz3AYXXs1Qmj3HGgoq9SrV1tltvpaK9S/EvNBd6DwZTx
 +7PCuv+aOSnVTth32ywFYSprKqzJpow=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-transfer-encoding:content-type
 :date:from:in-reply-to:message-id:mime-version:references
 :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=9v4gooc5B1pEEsJswZpEF2aCmxU49N0F/yNV5GZWL
 2E=; b=ki5yZI+Xtj/KkNkpDvn1GSGgjanm0QU1GiNz31ZWesRQDaYVA0n2toqqm
 TOtsK8nApdFnP7UA0pbL9bK8nHBair9jzFJg1CR4odAcb1gRjcSenipeP1e5ccZE
 K6eWtHpfoK/6K6WYOZjsPyBOm+UI6/dobghjo7hOWPsjb7e8M5j0OywKurmMpYlx
 jpnLULmLBngr7O0jMBKDA6JQukA/PKubeK3mddjaoEQ/5Y7QfiLzv0FH3fwElb3Y
 usRuNefHCOtNq2Je2+peqBUqzr+KOw+ToQ2m9Dumyiq3f7plbMpfikqIBG+iiF89
 yCoHKyamA9DZ6P+spB8PFOhKOy+ig==
X-ME-Sender: <xms:6JB0YLosp9alErPB9ncouK8XhqPueHEcibOTgwXMOePyK5D45uhrIg>
 <xme:6JB0YDc19fdeUpVqcDChAnROVUVNUC_XUM28awFF-KH2SMJoVHCv8e8FTrqoaHNzJ
 v7tBRyzMq_4BJK4zw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekjedguddviecutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
 enucfjughrpeffhffvuffkfhggtggugfgjsehtkeertddttdejnecuhfhrohhmpefnvgho
 ucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrg
 htthgvrhhnpeegjeeggeehtddugfffuddtvdfffeffjeekffffveffheegvddvuedtffek
 jeejjeenucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivg
 eptdenucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghm
 vg
X-ME-Proxy: <xmx:6JB0YCpILE8uo_RYW5Wfy-tHCToNT_-7MjUN-IC0fDoUss3t-K853Q>
 <xmx:6JB0YMHD_r9WYPj9x27mNJLBtBHyNYptzxP8p9XHNLpPeMGPiukb7w>
 <xmx:6JB0YKvSL_9ygTOo_vSYjK0ywKVrM6orKhMd7MQFRTFkPYWL0pYALg>
 <xmx:6ZB0YK3STJix-SxoY1qRZhOrjQIGPi3WL1ifhZ9NmvhYAKhHq--IUQ>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id DFC03108005C;
 Mon, 12 Apr 2021 14:26:48 -0400 (EDT)
Date: Mon, 12 Apr 2021 14:26:47 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHSQ567O1M+NIMSK@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <YHQFDOGNyqVlmWm0@HIDDEN> <87y2dnpu48.fsf@HIDDEN>
 <YHR9ERShZCqY//6Q@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <YHR9ERShZCqY//6Q@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Mon, Apr 12, 2021 at 01:02:09PM -0400, Leo Famulari wrote:
> On Mon, Apr 12, 2021 at 02:25:43PM +0200, Ludovic Courtès wrote:
> > In the meantime, you could also update the ‘guix’ package by hand for
> > testing purposes.
> 
> I tried this, but I can't figure out how to actually build the updated
> Guix package, since the source code isn't added to the store.

Alright, I pushed a branch 'wip-update-le-certs' to Savannah and built
the Guix package, and then a VM image sans nss-certs.

I confirm that updating the le-certs package fixes this bug.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 13 Apr 2021 08:13:02 +0000
Resent-Message-ID: <handler.46829.B46829.16183015468608 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Leo Famulari <leo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.16183015468608
          (code B ref 46829); Tue, 13 Apr 2021 08:13:02 +0000
Received: (at 46829) by debbugs.gnu.org; 13 Apr 2021 08:12:26 +0000
Received: from localhost ([127.0.0.1]:58918 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWE9p-0002El-PO
	for submit <at> debbugs.gnu.org; Tue, 13 Apr 2021 04:12:25 -0400
Received: from eggs.gnu.org ([209.51.188.92]:60256)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1lWE9n-0002EY-7l
 for 46829 <at> debbugs.gnu.org; Tue, 13 Apr 2021 04:12:23 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e]:45061)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@HIDDEN>)
 id 1lWE9f-0000mf-3q; Tue, 13 Apr 2021 04:12:17 -0400
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=53072 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1lWE9e-000471-Jz; Tue, 13 Apr 2021 04:12:14 -0400
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <YHQFDOGNyqVlmWm0@HIDDEN> <87zgy3pu54.fsf@HIDDEN>
 <YHSAH66jr+zxk232@HIDDEN> <YHSEJVTsObt2Zia+@jasmine.lan>
X-URL: http://www.fdn.fr/~lcourtes/
X-Revolutionary-Date: 24 Germinal an 229 de la =?UTF-8?Q?R=C3=A9volution?=
X-PGP-Key-ID: 0x090B11993D9AEBB5
X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc
X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5
X-OS: x86_64-pc-linux-gnu
Date: Tue, 13 Apr 2021 10:12:13 +0200
In-Reply-To: <YHSEJVTsObt2Zia+@jasmine.lan> (Leo Famulari's message of "Mon,
 12 Apr 2021 13:32:21 -0400")
Message-ID: <877dl6mwma.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi,

Leo Famulari <leo@HIDDEN> skribis:

> I ran your command, and this is the output:

Could you type =E2=80=98bt=E2=80=99 (backtrace) at the GDB prompt?

Ludo=E2=80=99.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: `guix pull` uses incorrect certificate store
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 13 Apr 2021 09:31:02 +0000
Resent-Message-ID: <handler.46829.B46829.161830621016478 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Leo Famulari <leo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161830621016478
          (code B ref 46829); Tue, 13 Apr 2021 09:31:02 +0000
Received: (at 46829) by debbugs.gnu.org; 13 Apr 2021 09:30:10 +0000
Received: from localhost ([127.0.0.1]:58973 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWFN3-0004Hi-Lf
	for submit <at> debbugs.gnu.org; Tue, 13 Apr 2021 05:30:09 -0400
Received: from eggs.gnu.org ([209.51.188.92]:49606)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1lWFN2-0004GV-G5
 for 46829 <at> debbugs.gnu.org; Tue, 13 Apr 2021 05:30:08 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e]:45768)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@HIDDEN>)
 id 1lWFMx-0005Gs-7d; Tue, 13 Apr 2021 05:30:03 -0400
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=54314 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1lWFMu-0002UQ-J0; Tue, 13 Apr 2021 05:30:01 -0400
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
Date: Tue, 13 Apr 2021 11:29:58 +0200
In-Reply-To: <YHPrv2NdqqaLWh42@HIDDEN> (Leo Famulari's message of "Mon,
 12 Apr 2021 02:42:07 -0400")
Message-ID: <87zgy2leg9.fsf_-_@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi,

Leo Famulari <leo@HIDDEN> skribis:

> On Sun, Apr 11, 2021 at 09:29:00PM -0400, Leo Famulari wrote:
>> I checked and, although there have been some changes upstream at Let's
>> Encrypt [0], our le-certs still works for contacting Savannah with TLS.
>
> I checked wrong; le-certs needs to be updated. I'm testing the update
> now...

So I think the issue is that, when =E2=80=98nss-certs=E2=80=99 is not insta=
lled, =E2=80=98guix
pull=E2=80=99 uses the LE certs, but these certificates expire quite freque=
ntly,
whereas if you have =E2=80=98nss-certs=E2=80=99 installed, there=E2=80=99s =
=E2=80=9Calways=E2=80=9D a valid
authentication chain from the roots.

Indeed, running =E2=80=98guix pull=E2=80=99 in the 1.2.0 live VM image work=
s (it has
=E2=80=98nss-certs=E2=80=99 installed in /etc/ssl/certs).  Likewise, a Guix=
 System 1.2.0
installation that includes =E2=80=98nss-certs=E2=80=99 (which is the defaul=
t) is
unaffected.

For those who do not have =E2=80=98nss-certs=E2=80=99 installed, a workarou=
nd is to do
avoid HTTPS:

  guix pull --url=3Dhttp://git.savannah.gnu.org/git/guix.git

This is fine because the =E2=80=98guix=E2=80=99 channel is authenticated an=
yway.

We could also add a =E2=80=98--no-check-certificates=E2=80=99 option to =E2=
=80=98guix pull=E2=80=99.
For that, Guile-Git needs to implement
=E2=80=98git_transport_certificate_check_cb=E2=80=99 & co.  I started doing=
 that but
it=E2=80=99s a bit of work (wrapping =E2=80=98struct git_cert=E2=80=99 is c=
umbersome) so I=E2=80=99m
willing to punt on it for now.

Thoughts?

Ludo=E2=80=99.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: `guix pull` uses incorrect certificate store
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 13 Apr 2021 17:45:02 +0000
Resent-Message-ID: <handler.46829.B46829.161833589917217 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161833589917217
          (code B ref 46829); Tue, 13 Apr 2021 17:45:02 +0000
Received: (at 46829) by debbugs.gnu.org; 13 Apr 2021 17:44:59 +0000
Received: from localhost ([127.0.0.1]:60700 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWN5v-0004Td-Dz
	for submit <at> debbugs.gnu.org; Tue, 13 Apr 2021 13:44:59 -0400
Received: from wout1-smtp.messagingengine.com ([64.147.123.24]:54827)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lWN5t-0004TQ-Om
 for 46829 <at> debbugs.gnu.org; Tue, 13 Apr 2021 13:44:58 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.west.internal (Postfix) with ESMTP id AA75AFA6;
 Tue, 13 Apr 2021 13:44:51 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Tue, 13 Apr 2021 13:44:51 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=W3bPkx24WoQsk25ENwejZhWz
 eANzvsHIX3pLeilwSy8=; b=ElKQE7uSgdSWoPqv0AdTo33UEexant+hpy+ck/Rb
 tOJijdb9zUw0nfUD2ULyNpomR1zsGzpU5bvPXQVQPvxs0Q0FZBYgGfMBicM+KyyJ
 P4PNWRPkVbUanJWkDYbHroA+jnRw98/DlV4hAxiZyK+IRYlUTe0p1w6EHEO6FPMP
 qWM=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=W3bPkx
 24WoQsk25ENwejZhWzeANzvsHIX3pLeilwSy8=; b=uqzwPQ/3Jvi975+SLnIVI7
 2uxK6xwMaCBO6ngaRW5jIt305XIwKtuusc/OJAYD2hqJTyX0HCiFWbud0XiYnX6r
 gGeExjAC09mP2WgDvZK06gj8iyJajdYDuUcovqv3HjQyIrTL2am4bsoqwnkGN41w
 tLd1x3Nr9Mgl575lqrjhjEb5wUiVgL+jt9UYCQBx/6fSnpHTcCHdRtYcze/rcLNo
 uH9h9lrSK/XG8h83xR60xzLL/A3+nNTxR4DJzaxbd0In+6AHauk3ZBVYghSXTlYl
 JwUOckm4s9ZkYOu2pNpwYiFt9KrFkcONN77mkyAmuG7fADr0lMfiPF+B3A8nmE3w
 ==
X-ME-Sender: <xms:kth1YCGY1uldHBh--NAikqmBIlc1L98Rf2UX0X2vbG26JDHbBcN8OA>
 <xme:kth1YDWIboGCX5j32YyR23edD5N8gRFYpLzhG3oiH1pZCZs_9axrta0v-mqopj1Cz
 Vlc42WTnLm2BxDmsQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekledgudduiecutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
 enucfjughrpeffhffvuffkfhggtggujgesghdtreertddtjeenucfhrhhomhepnfgvohcu
 hfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrth
 htvghrnhephfekvdduieehfedttdduledvgfehleevleejheettddvffevgeejgeetueff
 keetnecuffhomhgrihhnpehgnhhurdhorhhgnecukfhppedutddtrdduuddrudeiledrud
 dukeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehl
 vghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:kth1YML0q-gihaV7fouZ-aUC2VBDdOFSMFQ4wBfz-FPaWd8jsc5Mpw>
 <xmx:kth1YMHu2LKb-tBiPWEj0BimYmVWzzLFbDoXbXYfknlg8MwOx20_Yw>
 <xmx:kth1YIXSDsEEHVtHTrdyTj6TZNzLkhUUgmbkL_G1KlR4bdMkmrhZRw>
 <xmx:k9h1YBcohtGLSWXj5ZBnMOdTJn0tJY4UYSqG6uAt9juLRaBFd1SfBw>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id DF513108005F;
 Tue, 13 Apr 2021 13:44:50 -0400 (EDT)
Date: Tue, 13 Apr 2021 13:44:49 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHXYkTHmMk3FbxMu@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <87zgy2leg9.fsf_-_@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="CSoFWXpCLyzlrnCo"
Content-Disposition: inline
In-Reply-To: <87zgy2leg9.fsf_-_@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--CSoFWXpCLyzlrnCo
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Apr 13, 2021 at 11:29:58AM +0200, Ludovic Court=C3=A8s wrote:
> So I think the issue is that, when =E2=80=98nss-certs=E2=80=99 is not ins=
talled, =E2=80=98guix
> pull=E2=80=99 uses the LE certs, but these certificates expire quite freq=
uently,
> whereas if you have =E2=80=98nss-certs=E2=80=99 installed, there=E2=80=99=
s =E2=80=9Calways=E2=80=9D a valid
> authentication chain from the roots.

No, that's incorrect. The certificates in le-certs expired after 5
years, so it's not frequent.

These are the root and intermediate certificates for the Let's Encrypt
certificate authority =E2=80=94 they are not the 90 day certificates used b=
y a
webserver.

The problem is that we (I) failed to pay attention and let our le-certs
package go stale.

> For those who do not have =E2=80=98nss-certs=E2=80=99 installed, a workar=
ound is to do
> avoid HTTPS:

The original motivation of le-certs was that nss-certs would not be
required, and that `guix pull` would always work. I think we should
still try to achieve this.

>   guix pull --url=3Dhttp://git.savannah.gnu.org/git/guix.git
>=20
> This is fine because the =E2=80=98guix=E2=80=99 channel is authenticated =
anyway.

Yes, that works and is pretty safe. Although Guix will complain because
it can't tell that this is the same repo.

> We could also add a =E2=80=98--no-check-certificates=E2=80=99 option to =
=E2=80=98guix pull=E2=80=99.

I think we should avoid adding "use insecure connection" options. Even
if the code itself is signed.

I'm going to figure out how to subscribe to Let's Encrypt announcements
and I'll report back with ideas about how to avoid a repeat of the
problem.

--CSoFWXpCLyzlrnCo
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=iN7B
-----END PGP SIGNATURE-----

--CSoFWXpCLyzlrnCo--




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 13 Apr 2021 17:48:01 +0000
Resent-Message-ID: <handler.46829.B46829.161833605317497 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161833605317497
          (code B ref 46829); Tue, 13 Apr 2021 17:48:01 +0000
Received: (at 46829) by debbugs.gnu.org; 13 Apr 2021 17:47:33 +0000
Received: from localhost ([127.0.0.1]:60705 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWN8O-0004Y9-T5
	for submit <at> debbugs.gnu.org; Tue, 13 Apr 2021 13:47:33 -0400
Received: from wout1-smtp.messagingengine.com ([64.147.123.24]:48763)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lWN8N-0004Xw-Mi
 for 46829 <at> debbugs.gnu.org; Tue, 13 Apr 2021 13:47:32 -0400
Received: from compute7.internal (compute7.nyi.internal [10.202.2.47])
 by mailout.west.internal (Postfix) with ESMTP id CB4DF15B1;
 Tue, 13 Apr 2021 13:47:25 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute7.internal (MEProxy); Tue, 13 Apr 2021 13:47:26 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:content-transfer-encoding:in-reply-to; s=mesmtp;
 bh=tBm6D7UZxpJSkHwzDHWZ646GMtQIfb0LqgK4spdJADs=; b=0p1c97tfQyXh
 nR1IS3A69b71ebRojlAMv42fjgkHc4vxQFDZ5I8dTkc8tZSyTekZF08W2IpEkJbM
 9jLvXKRDbfgDTODbE3X55Nv9DNb71mNy4uL2NMYEcSiV4v3ntAsfqFWrn3e5AOko
 6gPyqfaixJvarP6WB0FQLzihJrCv5Xc=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-transfer-encoding:content-type
 :date:from:in-reply-to:message-id:mime-version:references
 :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=tBm6D7UZxpJSkHwzDHWZ646GMtQIfb0LqgK4spdJA
 Ds=; b=TtOCSuaIBOBC0jc61siBGl8gaehOIB0GTO4M+NDUSoyYR7/9mJ6k387Lc
 r10Z0A34y2ByuWPzCGxxa00k/JQWRhTs9QrfQ3kk3twx57v574YiJnilNs5v7usU
 BakM8/LPdu4iDzem7E2kPwdD/JVV3dWV7oWPVjJ15RwJQMVLvT5saPIylXb4Nwqt
 tCzA/4hoaW21PyhaWvyIWTT46+ZSC877KetnrsqKY18Nvjg83zh1FgIXQtBwA0VA
 EEh3F+ny+qunuzLHNHmadKYw2SmhB+73s37QhVLJ7LCtSNSSnlxgVOU8WFOqSZpy
 ElTzr/26SsVTYbNeBcKnD5LWydFrg==
X-ME-Sender: <xms:Ldl1YOvpY1EnzN46ezL88Db7Y56lHeZ6s6LFS3g4O9zq3RQwobdIeg>
 <xme:Ldl1YPRaHoftTGMN6cljI2oMunLuSeG71LZqqEZWlgH9UYNH9dTTz1I5qodZDovOk
 NDyyizOSoLzNj_VdQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekledguddujecutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
 enucfjughrpeffhffvuffkfhggtggugfgjsehtkeertddttdejnecuhfhrohhmpefnvgho
 ucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrg
 htthgvrhhnpeegjeeggeehtddugfffuddtvdfffeffjeekffffveffheegvddvuedtffek
 jeejjeenucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivg
 eptdenucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghm
 vg
X-ME-Proxy: <xmx:Ldl1YAMW-1mXlZIFrOTTt_9hWyncnALwNhjjroebvCgrTVX48NUINw>
 <xmx:Ldl1YF4Wnl4iWsar0-v9AUFuUtojiC4A7nUPGveUwQwKdvaP21DxeQ>
 <xmx:Ldl1YDVtuqdNdd_nmwRRkbNNZopvW1rve5CRdI6QeOam_GmgPGoNzg>
 <xmx:Ldl1YAA-v1M8HbwFA8x1AqL6ffzgBxRKWKezS4xhbXWIL2K3WAmPLw>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 1FE3E1080057;
 Tue, 13 Apr 2021 13:47:25 -0400 (EDT)
Date: Tue, 13 Apr 2021 13:47:23 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHXZK5y5bT2Zamr1@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <YHQFDOGNyqVlmWm0@HIDDEN> <87y2dnpu48.fsf@HIDDEN>
 <YHR9ERShZCqY//6Q@HIDDEN> <YHSQ567O1M+NIMSK@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <YHSQ567O1M+NIMSK@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Mon, Apr 12, 2021 at 02:26:47PM -0400, Leo Famulari wrote:
> On Mon, Apr 12, 2021 at 01:02:09PM -0400, Leo Famulari wrote:
> > On Mon, Apr 12, 2021 at 02:25:43PM +0200, Ludovic Courtès wrote:
> > > In the meantime, you could also update the ‘guix’ package by hand for
> > > testing purposes.
> > 
> > I tried this, but I can't figure out how to actually build the updated
> > Guix package, since the source code isn't added to the store.
> 
> Alright, I pushed a branch 'wip-update-le-certs' to Savannah and built
> the Guix package, and then a VM image sans nss-certs.

I've pushed the update patch as
15de49e60b255b98a53c6de4780e1ae95a8beada.

Now, we just need to update Guix package for it to take effect for
users, IIUC.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 13 Apr 2021 18:10:01 +0000
Resent-Message-ID: <handler.46829.B46829.161833736127883 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161833736127883
          (code B ref 46829); Tue, 13 Apr 2021 18:10:01 +0000
Received: (at 46829) by debbugs.gnu.org; 13 Apr 2021 18:09:21 +0000
Received: from localhost ([127.0.0.1]:60755 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWNTU-0007Fe-VS
	for submit <at> debbugs.gnu.org; Tue, 13 Apr 2021 14:09:21 -0400
Received: from out5-smtp.messagingengine.com ([66.111.4.29]:34869)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lWNTT-0007FQ-Fg
 for 46829 <at> debbugs.gnu.org; Tue, 13 Apr 2021 14:09:19 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 08BAB5C014F;
 Tue, 13 Apr 2021 14:09:14 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Tue, 13 Apr 2021 14:09:14 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=/mWywCQgPSVdSIDmhCVhC5im
 w3TidH35i1sANLilWRI=; b=iWU7SmHY1Br36CfC9Kdkj55A6r63ZviBvH4Akf/4
 pCzeSx/qHWGfVVv/r3uwwCb3yCn7fIVyHkv1llxhNr3P6MXLR+21z0iXBbX5860y
 v+By7NsXVtQYhnnYEMsJy2ds9flTBRfJRigl6/Avyg+Ez4T/npZsk8mISJkSZINZ
 6bU=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=/mWywC
 QgPSVdSIDmhCVhC5imw3TidH35i1sANLilWRI=; b=NTgIg3+2SzKIDOLmjw2M7Q
 FDqvZL4bCbZ+sbycf0WtKEsHkZDoTpMaNXAIbupB0efPs7HDJBshZWw7YPcl1jho
 ymtM0bHyqk+htVDKHJXcedxe+b/UDElV579lPaoqjBpjFdFQX/QNusc8PI97Rmw6
 Ftw1joDCbYGbtCwVBaPH5Unzlt67g7/WJAF3DcGgcsJyuw+Yz2KHvCtFmV3Vbq3h
 8TSt+umUtKTSG8kH2an/3YLyrl8bJ2jMyNIx+lXoomCfUwyw/NzD+opQT3ILdlj+
 RLwydaWyyLVVgXuLjIo088nSE+kaUnmvMFd5s9ft2FPhFOcFxt9bTTa8x27ruB4A
 ==
X-ME-Sender: <xms:Sd51YA_uoQCgS400_JmzXavn5YDy-qJrvY20MSmP5C1ptPn-4H3aFw>
 <xme:Sd51YIvynYDcb_58wiS_BEy4fD0g44k-1gn1AA2UgzEv-0yAoHwVUJWSxB87vJJEs
 _hVQYubTKmcCgn_9g>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekledguddvudcutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
 enucfjughrpeffhffvuffkfhggtggujgesghdtreertddtjeenucfhrhhomhepnfgvohcu
 hfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrth
 htvghrnhepiefghfeffedtffekveektddtieekfeffledtgfevkeekteeufedtfefhgefh
 keefnecukfhppedutddtrdduuddrudeiledruddukeenucevlhhushhtvghrufhiiigvpe
 dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:Sd51YGB_rcTfLu5DB2k0zgpI0lVpNrX7OuBqx4wcRhFNrrQa73R9aw>
 <xmx:Sd51YAfoso8931NPsX9RpQ6ormavuZb-L-F5Cb7HmootiqxyO6cU5w>
 <xmx:Sd51YFPZWiDQ6CB3PjEyoOzPdqOx9lMFJnqwtiMayvrPueaByYEkXw>
 <xmx:St51YHUop00dyqtz-ihT1mft8DUblYRTzh2xA2IswVFtI4D_G1maMg>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 60A491080057;
 Tue, 13 Apr 2021 14:09:13 -0400 (EDT)
Date: Tue, 13 Apr 2021 14:09:11 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YHXeR63MF4sQ4NGe@HIDDEN>
References: <877dmrtbvn.fsf@HIDDEN> <877dm54zk3.fsf@HIDDEN>
 <YHNe5+taYSQI70dt@HIDDEN> <YHOiXP0JJZZej+7H@HIDDEN>
 <YHPrv2NdqqaLWh42@HIDDEN> <YHQFDOGNyqVlmWm0@HIDDEN>
 <87zgy3pu54.fsf@HIDDEN> <YHSAH66jr+zxk232@HIDDEN>
 <YHSEJVTsObt2Zia+@jasmine.lan> <877dl6mwma.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="LdLHy4EtdhHcGuxu"
Content-Disposition: inline
In-Reply-To: <877dl6mwma.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--LdLHy4EtdhHcGuxu
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Apr 13, 2021 at 10:12:13AM +0200, Ludovic Court=C3=A8s wrote:
> Could you type =E2=80=98bt=E2=80=99 (backtrace) at the GDB prompt?

It goes like this:

------
Using host libthread_db library "/gnu/store/fa6wj5bxkj5ll1d7292a70knmyl7a0c=
r-glibc-2.31/lib/libthread_db.so.1".
Core was generated by `/gnu/store/66xwl53f9ws7gin8iaqkhg111gimw1li-profile/=
bin/guile ./build-aux/updat'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x0000000000000000 in ?? ()
[Current thread is 1 (Thread 0x7eff7d8cdb80 (LWP 70404))]
(gdb) bt
#0  0x0000000000000000 in ?? ()
#1  0x00007eff61d9d4c4 in git_buf_try_grow () from /gnu/store/2rwa9h8w3ha0h=
j3zkbnrq1p2z199s2hn-libgit2-1.1.0/lib/libgit2.so
#2  0x00007eff61d9d7a5 in git_buf_set () from /gnu/store/2rwa9h8w3ha0hj3zkb=
nrq1p2z199s2hn-libgit2-1.1.0/lib/libgit2.so
#3  0x00007eff61deffe7 in git_path_prettify () from /gnu/store/2rwa9h8w3ha0=
hj3zkbnrq1p2z199s2hn-libgit2-1.1.0/lib/libgit2.so
#4  0x00007eff61e043ad in find_repo () from /gnu/store/2rwa9h8w3ha0hj3zkbnr=
q1p2z199s2hn-libgit2-1.1.0/lib/libgit2.so
#5  0x00007eff61e0528b in git_repository_discover () from /gnu/store/2rwa9h=
8w3ha0hj3zkbnrq1p2z199s2hn-libgit2-1.1.0/lib/libgit2.so
#6  0x00007eff7de6166d in ffi_call_unix64 () from /gnu/store/bw15z9kh9c65yc=
c2vbhl2izwfwfva7p1-libffi-3.3/lib/libffi.so.7
#7  0x00007eff7de5fac0 in ffi_call_int () from /gnu/store/bw15z9kh9c65ycc2v=
bhl2izwfwfva7p1-libffi-3.3/lib/libffi.so.7
#8  0x00007eff7df4efbe in scm_i_foreign_call () from /gnu/store/m5iprcg6pb5=
ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#9  0x00007eff7dfbd904 in foreign_call () from /gnu/store/m5iprcg6pb5ch86r9=
agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#10 0x00007eff7dfc4118 in vm_regular_engine () from /gnu/store/m5iprcg6pb5c=
h86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#11 0x00007eff7dfc55b5 in scm_call_n () from /gnu/store/m5iprcg6pb5ch86r9ag=
mqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#12 0x00007eff7df42d27 in scm_primitive_eval () from /gnu/store/m5iprcg6pb5=
ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#13 0x00007eff7df42d83 in scm_eval () from /gnu/store/m5iprcg6pb5ch86r9agmq=
wd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#14 0x00007eff7df9b830 in scm_shell () from /gnu/store/m5iprcg6pb5ch86r9agm=
qwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#15 0x00007eff7df5a73d in invoke_main_func () from /gnu/store/m5iprcg6pb5ch=
86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#16 0x00007eff7df3cb0a in c_body () from /gnu/store/m5iprcg6pb5ch86r9agmqwd=
8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#17 0x00007eff7dfc4149 in vm_regular_engine () from /gnu/store/m5iprcg6pb5c=
h86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#18 0x00007eff7dfc55b5 in scm_call_n () from /gnu/store/m5iprcg6pb5ch86r9ag=
mqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#19 0x00007eff7df41bba in scm_call_2 () from /gnu/store/m5iprcg6pb5ch86r9ag=
mqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#20 0x00007eff7df433ba in scm_c_with_exception_handler () from /gnu/store/m=
5iprcg6pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#21 0x00007eff7dfbac3d in scm_c_catch () from /gnu/store/m5iprcg6pb5ch86r9a=
gmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#22 0x00007eff7df3d0b3 in scm_i_with_continuation_barrier () from /gnu/stor=
e/m5iprcg6pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#23 0x00007eff7df3d145 in scm_c_with_continuation_barrier () from /gnu/stor=
e/m5iprcg6pb5ch86r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#24 0x00007eff7dfb96df in with_guile () from /gnu/store/m5iprcg6pb5ch86r9ag=
mqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#25 0x00007eff7de97c78 in GC_call_with_stack_base () from /gnu/store/zg126c=
jicrpm2p6zc08ra5vh4ddag7ww-libgc-8.0.4/lib/libgc.so.1
#26 0x00007eff7dfb99f8 in scm_with_guile () from /gnu/store/m5iprcg6pb5ch86=
r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#27 0x00007eff7df5a8b2 in scm_boot_guile () from /gnu/store/m5iprcg6pb5ch86=
r9agmqwd8v6kp7999-guile-3.0.5/lib/libguile-3.0.so.1
#28 0x0000000000401100 in main ()
------

By the way, I can no longer reproduce the crash, now that I am using
`make update-guix-package` with a commit that has been pushed to
Savannah.

--LdLHy4EtdhHcGuxu
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=PqCw
-----END PGP SIGNATURE-----

--LdLHy4EtdhHcGuxu--




Message received at control <at> debbugs.gnu.org:


Received: (at control) by debbugs.gnu.org; 13 Apr 2021 18:26:51 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 13 14:26:51 2021
Received: from localhost ([127.0.0.1]:60795 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWNkR-0001Mz-9k
	for submit <at> debbugs.gnu.org; Tue, 13 Apr 2021 14:26:51 -0400
Received: from out5-smtp.messagingengine.com ([66.111.4.29]:40705)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lWNkP-0001Ml-NP
 for control <at> debbugs.gnu.org; Tue, 13 Apr 2021 14:26:50 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id A3C815C010C;
 Tue, 13 Apr 2021 14:26:44 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Tue, 13 Apr 2021 14:26:44 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:message-id:mime-version:content-type; s=mesmtp;
 bh=O3bOWXkhImHjQgnYlXsUF+76/S0Mnis1VGwliIcCxT4=; b=NJaH+lV7iuko
 DhNavxAPO3YpUrmRyyTb+uqE/PwLkSptOcnWR2jH/l0MTVsOqqbXq+HF499z4Pyf
 sNG+TUjQyu3HpCk3mc8dTTrfKlON6TB+rahnZejGRUJbZMupFo7ti1of1PsHRXNW
 hfUAwqHhEJPosGA5wMUKMqzzn3G0koI=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=content-type:date:from:message-id
 :mime-version:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=O3bOWXkhImHjQgnYlXsUF+76/S0Mnis1VGwliIcCx
 T4=; b=bcm24ataMywIFdD47v2eGpOBQUzxHZSwo/+CkbhlBKXM8PnfoTwLtqzd7
 N3lsKladRIva4x/lP8K0KQ50dXiGUz1xLXhdvmUIBfDSyinyQNDyxzN6Vh45b4Cc
 pdSLss4FShG0BmNj5vRoTgKKG2/+OQ6ytG+kPNhvuJppW7A09uKuhjDr3VgG8MJb
 oGs5CVsw5g5IiVB3O2kryXIWgPwQJC0f9oJ06zYM9qRp2kzEUF0XUhLG0fcTcexB
 1ZLvKLWTJFzmYD7a5EEjF70ivsJ8mp/kc4vynMRl4D0f6CdWrTpv5Q2NeQmSR3Gq
 wuI31klMeUlbSeMCULvuOsRD9WTew==
X-ME-Sender: <xms:ZOJ1YAY0BDZ4THS8ylUUOwYkAV7HW8XN2KC9FACsaAcxFPakASUkTA>
 <xme:ZOJ1YLamBTh7S2GFnSZxQh_hTWYO1pfGzZwMaF4vs4Pl8aQhgr0KNFcWlp4Vbvz6G
 6foYZAZPPShd5Fvzg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudekledguddvhecutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
 engfhmphhthicushhusghjvggtthculddutddmnecujfgurhepfffhvffkgggtugesthdt
 redttddtvdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulh
 grrhhirdhnrghmvgeqnecuggftrfgrthhtvghrnhephfejiefgfeevvdefteehgeeltdek
 vedutdegtdduieetheetgedvfeffudfffeffnecukfhppedutddtrdduuddrudeiledrud
 dukeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehl
 vghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:ZOJ1YK_XV2nqeaAJVSKIPamXz3LSoyqfR4Rf4JBrLTGeb3D0G_RKmQ>
 <xmx:ZOJ1YKp7ZaKXeYOTs2qhu7mnyHSNi8SRL4eKGi-7RSIJy2OTjUAsvA>
 <xmx:ZOJ1YLonTPt7Uj6-RqBOLcjMWTf5IkcPHikzCKyW9mMO2Zjm65Pqzw>
 <xmx:ZOJ1YI3ZCF7lOjP_clL00FoMxm5acPQHPQgAmcUnrtddyYT-Bvb1xg>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id 36AF8108005F
 for <control <at> debbugs.gnu.org>; Tue, 13 Apr 2021 14:26:44 -0400 (EDT)
Date: Tue, 13 Apr 2021 14:26:42 -0400
From: Leo Famulari <leo@HIDDEN>
To: GNU bug tracker automated control server <control <at> debbugs.gnu.org>
Message-ID: <YHXiYmmOzjF6UPCy@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview: retitle 46829 Let's Encrypt certificate store (le-certs)
 expired Content analysis details:   (1.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.7 RCVD_IN_DNSWL_LOW      RBL: Sender listed at https://www.dnswl.org/,
 low trust [66.111.4.29 listed in list.dnswl.org]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
 1.8 MISSING_SUBJECT        Missing Subject: header
 0.2 NO_SUBJECT             Extra score for no subject
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.3 (/)

retitle 46829 Let's Encrypt certificate store (le-certs) expired




Message sent:


MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Leo Famulari <leo@HIDDEN>
Subject: bug#46829: closed (Let's Encrypt certificate store (le-certs)
 expired)
CC: tracker <at> debbugs.gnu.org
Message-ID: <handler.46829.D46829.161836251112443.ackdone <at> debbugs.gnu.org>
References: <YHZAhP90p6o49811@HIDDEN> <871rd0ebd5.fsf@HIDDEN>
X-Gnu-PR-Message: closed 46829
X-Gnu-PR-Package: guix
Date: Wed, 14 Apr 2021 01:09:02 +0000
Content-Type: multipart/mixed; boundary="----------=_1618362542-12486-0"

This is a multi-part message in MIME format...

------------=_1618362542-12486-0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=utf-8

Your message dated Tue, 13 Apr 2021 21:08:20 -0400
with message-id <YHZAhP90p6o49811@HIDDEN>
and subject line Re: bug#46829: Fresh install of 1.2.0 can't guix pull
has caused the debbugs.gnu.org bug report #46829,
regarding Let's Encrypt certificate store (le-certs) expired
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs@HIDDEN)


--=20
46829: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D46829
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

------------=_1618362542-12486-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by debbugs.gnu.org; 28 Feb 2021 10:27:13 +0000
Received: from localhost ([127.0.0.1]:45888 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lGJI9-0003W2-39
	for submit <at> debbugs.gnu.org; Sun, 28 Feb 2021 05:27:13 -0500
Received: from lists.gnu.org ([209.51.188.17]:33786)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mail@HIDDEN>) id 1lGJI6-0003Vu-UC
 for submit <at> debbugs.gnu.org; Sun, 28 Feb 2021 05:27:11 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10]:53842)
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <mail@HIDDEN>) id 1lGJI6-0006V9-OD
 for bug-guix@HIDDEN; Sun, 28 Feb 2021 05:27:10 -0500
Received: from mira.cbaines.net
 ([2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27]:54029)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <mail@HIDDEN>) id 1lGJI4-0002Gr-T6
 for bug-guix@HIDDEN; Sun, 28 Feb 2021 05:27:10 -0500
Received: from localhost (unknown [IPv6:2a02:8010:68c1:0:8ac0:b4c7:f5c8:7caa])
 by mira.cbaines.net (Postfix) with ESMTPSA id 33A5127BC4C
 for <bug-guix@HIDDEN>; Sun, 28 Feb 2021 10:27:06 +0000 (GMT)
Received: from capella (localhost [127.0.0.1])
 by localhost (OpenSMTPD) with ESMTP id 86690319
 for <bug-guix@HIDDEN>; Sun, 28 Feb 2021 10:27:04 +0000 (UTC)
User-agent: mu4e 1.4.15; emacs 27.1
From: Christopher Baines <mail@HIDDEN>
To: bug-guix@HIDDEN
Subject: Fresh install of 1.2.0 can't guix pull
Date: Sun, 28 Feb 2021 10:27:02 +0000
Message-ID: <871rd0ebd5.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
Received-SPF: pass client-ip=2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27;
 envelope-from=mail@HIDDEN; helo=mira.cbaines.net
X-Spam_score_int: -18
X-Spam_score: -1.9
X-Spam_bar: -
X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

I believe there's TLS issues with pulling for the current 1.2.0 release.

root@horna ~# guix pull
substitute: updating substitutes from 'https://guix.cbaines.net'... 100.0%
0.0 MB will be downloaded
downloading from https://guix.cbaines.net/nar/lzip/zg72c146skpca45ijvjigqhq=
gx0mwiny-le-certs-0 ...
 le-certs-0  4KiB                                                          =
                                                                           =
                      1.8MiB/s 00:00 [##################] 100.0%

Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.or=
g/git/guix.git'...
guix pull: error: Git error: the SSL certificate is invalid

root@horna ~# wget https://git.savannah.gnu.org/git/guix.git
=2D-2021-02-28 11:22:49--  https://git.savannah.gnu.org/git/guix.git
Resolving git.savannah.gnu.org (git.savannah.gnu.org)... 209.51.188.201, 20=
01:470:142:5::201
Connecting to git.savannah.gnu.org (git.savannah.gnu.org)|209.51.188.201|:4=
43... connected.
ERROR: The certificate of =E2=80=98git.savannah.gnu.org=E2=80=99 is not tru=
sted.
ERROR: The certificate of =E2=80=98git.savannah.gnu.org=E2=80=99 doesn't ha=
ve a known issuer.


This is probably possible to work around by doing:

  guix pull --url=3Dhttp://git.savannah.gnu.org/git/guix.git

As the commit signatures are checked, the risk of not using HTTPS should
be reduced.

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQKlBAEBCgCPFiEEPonu50WOcg2XVOCyXiijOwuE9XcFAmA7b/ZfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF
ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcRHG1haWxAY2Jh
aW5lcy5uZXQACgkQXiijOwuE9XeOqA/9EdO2KeqvOTkTncwzaaBseIXXUy38m167
xnTELIZbibF5ZyiuUA2qZ3svEvgmfDcXT5Fo7lKjKhtXlRihzjWfxkagDITGq0qT
EuMbB+DWDY/vUnD9IWWCyh14x6kfZWb9Am6qYSHPO6WTfVrBzaxe8MYNshHlEMXi
AABAy+ccUmDLcRSmgi532PDV/DQsMgn9oc5zzIOVMq55UzbtLsyp8JkbXnzjCkpk
sNws1lxsheLpGKPUuaNCW94tPrF96R+ZXj+qbQ+HeMNIVGErG2QhnUzVgAA7wm6M
XFC9/ij7AX9gwxHvhN0Zf8pOIFIiPKFstVXZi2ebdFbTnRUgg5P4Esgd7maXxCx2
YG3ktGeopfOdRHMc+przfwtLGM5snRvI8yIKyCXqgbJuRVhHhV7+4B1aeBCyCx2X
3qdyzWqSIgezrWqpUI25rDlCyvxgOOwso67pAgbFpNEZYOX9sNvRnbuwi7LQRssc
t/mqFos65ajp8RRVDaLwFvksI5twuF9/B8hi1IVjADS72K6dv+wSHKFzBlUYP0RB
wcKB9jZ70zORW4ALvWAYUaclKns1Ed5a5m588GSkt1Z6DSRYJVl5Jm7hk07gsZ7/
AEDpBeec4cYjWDAMxfdFBMmcDU6bLivAICMf2s0xscsRp2cEaB0rHDVKTR4r9zcg
Se5uA5WSwfs=
=8Wb6
-----END PGP SIGNATURE-----
--=-=-=--



------------=_1618362542-12486-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 46829-done) by debbugs.gnu.org; 14 Apr 2021 01:08:31 +0000
Received: from localhost ([127.0.0.1]:33009 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWU19-0003Ed-9G
	for submit <at> debbugs.gnu.org; Tue, 13 Apr 2021 21:08:31 -0400
Received: from out3-smtp.messagingengine.com ([66.111.4.27]:55725)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lWU16-0003EN-PA
 for 46829-done <at> debbugs.gnu.org; Tue, 13 Apr 2021 21:08:30 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 71FB45C006E;
 Tue, 13 Apr 2021 21:08:23 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Tue, 13 Apr 2021 21:08:23 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=vnMkaI9/eYWc8INlIQbGUDxr
 +pk+fHCyLnWJtnwE+mg=; b=ZmV4VRqw4WUJ/4PkzZL5uXjC6Y3qqKk6qbiHUv3s
 bt28Ln45BISfnQFUYUzPsvCYO3PIgM7p2Kqzuqwk7Y/SdRJmEqD73CRFaHyf++jT
 C4YH2uGnoLLS+OFDT76VZ5/7OCf1jWYEqjwGr90CEKbop8v4sXjgM3l5qCyZz5bB
 Qt4=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=vnMkaI
 9/eYWc8INlIQbGUDxr+pk+fHCyLnWJtnwE+mg=; b=WyEWavvAj6UwwKO0mf1WSF
 iAEbOXHoOpu9M0brbswhNbpufhlpdAgg4xA+C6WMqQeCXnE3KPq5PagBMoXm/tMP
 pKld0o8gLgqlyNvBgB4kZeLU/2guBjPdfyMqJck4pwz+d/a5xCdv3qXN4M0Bb2nL
 yz9EJfLI/oYS7bVwpnUvxUYmNkcEcNF/Thm8dKeZAC2vyj48+ZpmLosxz3P4Igfx
 GHSTaTFceP3gLOw0UBgODNfZoUiIbVQLe9C1wa5QWXl3GWijk1Yv5JWDOVXLDU4I
 GVGmb2ojh4t5gHdXN92PngwPadJP4cqDcXrG3yj5uar6PpyDU+Bcp+pm6khHQPXQ
 ==
X-ME-Sender: <xms:hkB2YMo5Z5t7CSIdmO1Q4I70fa-ky9fCx5Moi5RsBF0M71rOLR81hg>
 <xme:hkB2YCozDaOyrFAvsgdHtboYOewuaqCEaBlRrUzoSq79K5P791ZmmurLMH3tGKuq5
 93Pw284-m3PMIBHiQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudeltddggeduucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre
 ertddtvdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgr
 rhhirdhnrghmvgeqnecuggftrfgrthhtvghrnhepgeffteehffehfefhtefhhfdvhefgie
 eltefhfeduteeuhefgffeuvedtjeetvefhnecuffhomhgrihhnpegtsggrihhnvghsrdhn
 vghtpdhgnhhurdhorhhgnecukfhppedutddtrdduuddrudeiledruddukeenucevlhhush
 htvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhl
 rghrihdrnhgrmhgv
X-ME-Proxy: <xmx:hkB2YBPdrtZFE49xOIsuIydaCtlENTJ_lKL3SLSnYugQH5XcPZDZgg>
 <xmx:hkB2YD6feg_qSyJaJmomswppz0yl0mbwrEcC4CiaKQDuiZtU6GFqQQ>
 <xmx:hkB2YL5Fs48oizfH7OyOxD9HC6TH2fweF9QhhyoxuKB6Csv4E49Fqg>
 <xmx:h0B2YEXhUCJCodjL4w8Jxh2z-ao76QC1iHPqOEev3dGmwl99YiSddQ>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id DFF931080054;
 Tue, 13 Apr 2021 21:08:22 -0400 (EDT)
Date: Tue, 13 Apr 2021 21:08:20 -0400
From: Leo Famulari <leo@HIDDEN>
To: Christopher Baines <mail@HIDDEN>
Subject: Re: bug#46829: Fresh install of 1.2.0 can't guix pull
Message-ID: <YHZAhP90p6o49811@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="F9BSIkUp7wHMSdR4"
Content-Disposition: inline
In-Reply-To: <871rd0ebd5.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 46829-done
Cc: 46829-done <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--F9BSIkUp7wHMSdR4
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Feb 28, 2021 at 10:27:02AM +0000, Christopher Baines wrote:
> root@horna ~# guix pull
> substitute: updating substitutes from 'https://guix.cbaines.net'... 100.0%
> 0.0 MB will be downloaded
> downloading from https://guix.cbaines.net/nar/lzip/zg72c146skpca45ijvjigq=
hqgx0mwiny-le-certs-0 ...
>  le-certs-0  4KiB                                                        =
                                                                           =
                        1.8MiB/s 00:00 [##################] 100.0%
>=20
> Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.=
org/git/guix.git'...
> guix pull: error: Git error: the SSL certificate is invalid

This should be fixed with commit
a758a8a3c20052c5f1228e1ec80068652bbc3849, which updates the Guix package
to include commit 15de49e60b255b98a53c6de4780e1ae95a8beada.

There's nothing we can do for the 1.2.0 release artifacts at this point.

--F9BSIkUp7wHMSdR4
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAmB2QHkACgkQJkb6MLrK
fwj6vRAA7Q7c3047G5EmNxkem4ISVcAQkELX7MSuVocs7rrWJB5uxS1tY94ko9Ez
TKDwX/iMQ2AxQOtlkXpGoRq0cNOtEUk8AjZDxaQpWxExAvtJL3scSINDhYvgdWW+
y5ae06vT73GAnitN+eePJZD6Kkx2URCtrmjEMgysi8+kufE24ehaIm+EzYAYX3rU
5qCqAYBG2ehG/VbdyMSg2s5eqbXCmWBeAiRffXR1R2meC8hDXVxml5Ov1JKch2OM
ccgkMV74l4gPbcHj+p3II40IFhfbt+7IIptLrQq+x6B/aFGOw8dmiZ94tsiT9xHy
YKjfa4GofRRod6BpDtWHotAtNL1JGXqJXb4mBCnlC0QuGKW6Ls9j30iS4dz6/JMJ
ZD5X/wwJLrfJm+H+S6hx13v/OJuP/q7hjCuEy38VhTRzLUwEkkUmj+rrhPAEYjLC
EGCwmuVF3WqukXybYn1vBIH8eFd3pbmMM3L5ZPwWrsByAmLE7DOyjhSOkOt4xGkV
jumAMvCwPLAxswKI/CVYFmz9nffouNNZMbpvkzmsKkozKsuJTWlZwi1kMD5kjBBj
gboyfag91e/E8VkW+2dD1qJnLiYP0krsb1DM3klLwZYGXvsS5X0CPSQVE9gu5e+7
5Mze7BMe3VNQN8JIcC5yW0cLDruK/oiJzY7VCb//CU8wi0kRDt8=
=g5uh
-----END PGP SIGNATURE-----

--F9BSIkUp7wHMSdR4--


------------=_1618362542-12486-0--


Message sent:


MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Christopher Baines <mail@HIDDEN>
Subject: bug#46829: closed (Re: bug#46829: Fresh install of 1.2.0 can't
 guix pull)
Message-ID: <handler.46829.D46829.161836251112443.notifdone <at> debbugs.gnu.org>
References: <YHZAhP90p6o49811@HIDDEN> <871rd0ebd5.fsf@HIDDEN>
X-Gnu-PR-Message: they-closed 46829
X-Gnu-PR-Package: guix
Reply-To: 46829 <at> debbugs.gnu.org
Date: Wed, 14 Apr 2021 01:09:02 +0000
Content-Type: multipart/mixed; boundary="----------=_1618362542-12486-1"

This is a multi-part message in MIME format...

------------=_1618362542-12486-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

Your bug report

#46829: Let's Encrypt certificate store (le-certs) expired

which was filed against the guix package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to 46829 <at> debbugs.gnu.org.

--=20
46829: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D46829
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

------------=_1618362542-12486-1
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 46829-done) by debbugs.gnu.org; 14 Apr 2021 01:08:31 +0000
Received: from localhost ([127.0.0.1]:33009 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWU19-0003Ed-9G
	for submit <at> debbugs.gnu.org; Tue, 13 Apr 2021 21:08:31 -0400
Received: from out3-smtp.messagingengine.com ([66.111.4.27]:55725)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1lWU16-0003EN-PA
 for 46829-done <at> debbugs.gnu.org; Tue, 13 Apr 2021 21:08:30 -0400
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 71FB45C006E;
 Tue, 13 Apr 2021 21:08:23 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Tue, 13 Apr 2021 21:08:23 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=vnMkaI9/eYWc8INlIQbGUDxr
 +pk+fHCyLnWJtnwE+mg=; b=ZmV4VRqw4WUJ/4PkzZL5uXjC6Y3qqKk6qbiHUv3s
 bt28Ln45BISfnQFUYUzPsvCYO3PIgM7p2Kqzuqwk7Y/SdRJmEqD73CRFaHyf++jT
 C4YH2uGnoLLS+OFDT76VZ5/7OCf1jWYEqjwGr90CEKbop8v4sXjgM3l5qCyZz5bB
 Qt4=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=vnMkaI
 9/eYWc8INlIQbGUDxr+pk+fHCyLnWJtnwE+mg=; b=WyEWavvAj6UwwKO0mf1WSF
 iAEbOXHoOpu9M0brbswhNbpufhlpdAgg4xA+C6WMqQeCXnE3KPq5PagBMoXm/tMP
 pKld0o8gLgqlyNvBgB4kZeLU/2guBjPdfyMqJck4pwz+d/a5xCdv3qXN4M0Bb2nL
 yz9EJfLI/oYS7bVwpnUvxUYmNkcEcNF/Thm8dKeZAC2vyj48+ZpmLosxz3P4Igfx
 GHSTaTFceP3gLOw0UBgODNfZoUiIbVQLe9C1wa5QWXl3GWijk1Yv5JWDOVXLDU4I
 GVGmb2ojh4t5gHdXN92PngwPadJP4cqDcXrG3yj5uar6PpyDU+Bcp+pm6khHQPXQ
 ==
X-ME-Sender: <xms:hkB2YMo5Z5t7CSIdmO1Q4I70fa-ky9fCx5Moi5RsBF0M71rOLR81hg>
 <xme:hkB2YCozDaOyrFAvsgdHtboYOewuaqCEaBlRrUzoSq79K5P791ZmmurLMH3tGKuq5
 93Pw284-m3PMIBHiQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudeltddggeduucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre
 ertddtvdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgr
 rhhirdhnrghmvgeqnecuggftrfgrthhtvghrnhepgeffteehffehfefhtefhhfdvhefgie
 eltefhfeduteeuhefgffeuvedtjeetvefhnecuffhomhgrihhnpegtsggrihhnvghsrdhn
 vghtpdhgnhhurdhorhhgnecukfhppedutddtrdduuddrudeiledruddukeenucevlhhush
 htvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhl
 rghrihdrnhgrmhgv
X-ME-Proxy: <xmx:hkB2YBPdrtZFE49xOIsuIydaCtlENTJ_lKL3SLSnYugQH5XcPZDZgg>
 <xmx:hkB2YD6feg_qSyJaJmomswppz0yl0mbwrEcC4CiaKQDuiZtU6GFqQQ>
 <xmx:hkB2YL5Fs48oizfH7OyOxD9HC6TH2fweF9QhhyoxuKB6Csv4E49Fqg>
 <xmx:h0B2YEXhUCJCodjL4w8Jxh2z-ao76QC1iHPqOEev3dGmwl99YiSddQ>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118])
 by mail.messagingengine.com (Postfix) with ESMTPA id DFF931080054;
 Tue, 13 Apr 2021 21:08:22 -0400 (EDT)
Date: Tue, 13 Apr 2021 21:08:20 -0400
From: Leo Famulari <leo@HIDDEN>
To: Christopher Baines <mail@HIDDEN>
Subject: Re: bug#46829: Fresh install of 1.2.0 can't guix pull
Message-ID: <YHZAhP90p6o49811@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="F9BSIkUp7wHMSdR4"
Content-Disposition: inline
In-Reply-To: <871rd0ebd5.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 46829-done
Cc: 46829-done <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--F9BSIkUp7wHMSdR4
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Feb 28, 2021 at 10:27:02AM +0000, Christopher Baines wrote:
> root@horna ~# guix pull
> substitute: updating substitutes from 'https://guix.cbaines.net'... 100.0%
> 0.0 MB will be downloaded
> downloading from https://guix.cbaines.net/nar/lzip/zg72c146skpca45ijvjigq=
hqgx0mwiny-le-certs-0 ...
>  le-certs-0  4KiB                                                        =
                                                                           =
                        1.8MiB/s 00:00 [##################] 100.0%
>=20
> Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.=
org/git/guix.git'...
> guix pull: error: Git error: the SSL certificate is invalid

This should be fixed with commit
a758a8a3c20052c5f1228e1ec80068652bbc3849, which updates the Guix package
to include commit 15de49e60b255b98a53c6de4780e1ae95a8beada.

There's nothing we can do for the 1.2.0 release artifacts at this point.

--F9BSIkUp7wHMSdR4
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=g5uh
-----END PGP SIGNATURE-----

--F9BSIkUp7wHMSdR4--


------------=_1618362542-12486-1
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by debbugs.gnu.org; 28 Feb 2021 10:27:13 +0000
Received: from localhost ([127.0.0.1]:45888 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lGJI9-0003W2-39
	for submit <at> debbugs.gnu.org; Sun, 28 Feb 2021 05:27:13 -0500
Received: from lists.gnu.org ([209.51.188.17]:33786)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mail@HIDDEN>) id 1lGJI6-0003Vu-UC
 for submit <at> debbugs.gnu.org; Sun, 28 Feb 2021 05:27:11 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10]:53842)
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <mail@HIDDEN>) id 1lGJI6-0006V9-OD
 for bug-guix@HIDDEN; Sun, 28 Feb 2021 05:27:10 -0500
Received: from mira.cbaines.net
 ([2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27]:54029)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <mail@HIDDEN>) id 1lGJI4-0002Gr-T6
 for bug-guix@HIDDEN; Sun, 28 Feb 2021 05:27:10 -0500
Received: from localhost (unknown [IPv6:2a02:8010:68c1:0:8ac0:b4c7:f5c8:7caa])
 by mira.cbaines.net (Postfix) with ESMTPSA id 33A5127BC4C
 for <bug-guix@HIDDEN>; Sun, 28 Feb 2021 10:27:06 +0000 (GMT)
Received: from capella (localhost [127.0.0.1])
 by localhost (OpenSMTPD) with ESMTP id 86690319
 for <bug-guix@HIDDEN>; Sun, 28 Feb 2021 10:27:04 +0000 (UTC)
User-agent: mu4e 1.4.15; emacs 27.1
From: Christopher Baines <mail@HIDDEN>
To: bug-guix@HIDDEN
Subject: Fresh install of 1.2.0 can't guix pull
Date: Sun, 28 Feb 2021 10:27:02 +0000
Message-ID: <871rd0ebd5.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
Received-SPF: pass client-ip=2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27;
 envelope-from=mail@HIDDEN; helo=mira.cbaines.net
X-Spam_score_int: -18
X-Spam_score: -1.9
X-Spam_bar: -
X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

I believe there's TLS issues with pulling for the current 1.2.0 release.

root@horna ~# guix pull
substitute: updating substitutes from 'https://guix.cbaines.net'... 100.0%
0.0 MB will be downloaded
downloading from https://guix.cbaines.net/nar/lzip/zg72c146skpca45ijvjigqhq=
gx0mwiny-le-certs-0 ...
 le-certs-0  4KiB                                                          =
                                                                           =
                      1.8MiB/s 00:00 [##################] 100.0%

Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.or=
g/git/guix.git'...
guix pull: error: Git error: the SSL certificate is invalid

root@horna ~# wget https://git.savannah.gnu.org/git/guix.git
=2D-2021-02-28 11:22:49--  https://git.savannah.gnu.org/git/guix.git
Resolving git.savannah.gnu.org (git.savannah.gnu.org)... 209.51.188.201, 20=
01:470:142:5::201
Connecting to git.savannah.gnu.org (git.savannah.gnu.org)|209.51.188.201|:4=
43... connected.
ERROR: The certificate of =E2=80=98git.savannah.gnu.org=E2=80=99 is not tru=
sted.
ERROR: The certificate of =E2=80=98git.savannah.gnu.org=E2=80=99 doesn't ha=
ve a known issuer.


This is probably possible to work around by doing:

  guix pull --url=3Dhttp://git.savannah.gnu.org/git/guix.git

As the commit signatures are checked, the risk of not using HTTPS should
be reduced.

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=8Wb6
-----END PGP SIGNATURE-----
--=-=-=--



------------=_1618362542-12486-1--


Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: `guix pull` uses incorrect certificate store
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 14 Apr 2021 10:51:02 +0000
Resent-Message-ID: <handler.46829.B46829.16183974495419 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Leo Famulari <leo@HIDDEN>
Cc: Christopher Baines <mail@HIDDEN>, 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.16183974495419
          (code B ref 46829); Wed, 14 Apr 2021 10:51:02 +0000
Received: (at 46829) by debbugs.gnu.org; 14 Apr 2021 10:50:49 +0000
Received: from localhost ([127.0.0.1]:33687 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWd6f-0001PL-08
	for submit <at> debbugs.gnu.org; Wed, 14 Apr 2021 06:50:49 -0400
Received: from eggs.gnu.org ([209.51.188.92]:46866)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1lWd6e-0001PA-2F
 for 46829 <at> debbugs.gnu.org; Wed, 14 Apr 2021 06:50:48 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e]:40168)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@HIDDEN>)
 id 1lWd6Y-0000bp-8p; Wed, 14 Apr 2021 06:50:42 -0400
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=34840 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1lWd6X-0005W2-1F; Wed, 14 Apr 2021 06:50:41 -0400
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <87zgy2leg9.fsf_-_@HIDDEN> <YHXYkTHmMk3FbxMu@HIDDEN>
X-URL: http://www.fdn.fr/~lcourtes/
X-Revolutionary-Date: 25 Germinal an 229 de la =?UTF-8?Q?R=C3=A9volution?=
X-PGP-Key-ID: 0x090B11993D9AEBB5
X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc
X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5
X-OS: x86_64-pc-linux-gnu
Date: Wed, 14 Apr 2021 12:50:39 +0200
In-Reply-To: <YHXYkTHmMk3FbxMu@HIDDEN> (Leo Famulari's message of "Tue,
 13 Apr 2021 13:44:49 -0400")
Message-ID: <87im4pf8cg.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi,

Leo Famulari <leo@HIDDEN> skribis:

> On Tue, Apr 13, 2021 at 11:29:58AM +0200, Ludovic Court=C3=A8s wrote:
>> So I think the issue is that, when =E2=80=98nss-certs=E2=80=99 is not in=
stalled, =E2=80=98guix
>> pull=E2=80=99 uses the LE certs, but these certificates expire quite fre=
quently,
>> whereas if you have =E2=80=98nss-certs=E2=80=99 installed, there=E2=80=
=99s =E2=80=9Calways=E2=80=9D a valid
>> authentication chain from the roots.
>
> No, that's incorrect. The certificates in le-certs expired after 5
> years, so it's not frequent.
>
> These are the root and intermediate certificates for the Let's Encrypt
> certificate authority =E2=80=94 they are not the 90 day certificates used=
 by a
> webserver.
>
> The problem is that we (I) failed to pay attention and let our le-certs
> package go stale.

OK.  5 years still looks kinda =E2=80=9Cfrequent=E2=80=9D to me.  I would t=
hink that old
software installations (including =E2=80=9Cappliances=E2=80=9D) would live =
longer than
that, no?

You install Guix on a laptop, you leave it in a drawer, and you come a
few years later and you can neither access HTTPS web sites nor run =E2=80=
=98guix
pull=E2=80=99?

>> For those who do not have =E2=80=98nss-certs=E2=80=99 installed, a worka=
round is to do
>> avoid HTTPS:
>
> The original motivation of le-certs was that nss-certs would not be
> required, and that `guix pull` would always work. I think we should
> still try to achieve this.

OK.

>> We could also add a =E2=80=98--no-check-certificates=E2=80=99 option to =
=E2=80=98guix pull=E2=80=99.
>
> I think we should avoid adding "use insecure connection" options. Even
> if the code itself is signed.

=E2=80=9CInsecure=E2=80=9D is a strong word: it still prevents eavesdroppin=
g, which is
the only property that matters in the presence of authenticated
channels.

> I'm going to figure out how to subscribe to Let's Encrypt announcements
> and I'll report back with ideas about how to avoid a repeat of the
> problem.

Yes, that=E2=80=99s the better option.  Thank you!

Ludo=E2=80=99.




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: Fresh install of 1.2.0 can't guix pull
Resent-From: =?UTF-8?Q?Fran=C3=A7ois?= <francois-oss@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 14 Apr 2021 14:19:02 +0000
Resent-Message-ID: <handler.46829.B46829.16184099255128 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 46829 <at> debbugs.gnu.org, leo@HIDDEN, mail@HIDDEN
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.16184099255128
          (code B ref 46829); Wed, 14 Apr 2021 14:19:02 +0000
Received: (at 46829) by debbugs.gnu.org; 14 Apr 2021 14:18:45 +0000
Received: from localhost ([127.0.0.1]:35424 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWgLs-0001KX-Ue
	for submit <at> debbugs.gnu.org; Wed, 14 Apr 2021 10:18:45 -0400
Received: from relay2-d.mail.gandi.net ([217.70.183.194]:57853)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <francois@HIDDEN>) id 1lWc85-00086B-UU
 for 46829 <at> debbugs.gnu.org; Wed, 14 Apr 2021 05:48:14 -0400
X-Originating-IP: 37.166.14.79
Received: from localhost (unknown [37.166.14.79])
 (Authenticated sender: francois@HIDDEN)
 by relay2-d.mail.gandi.net (Postfix) with ESMTPSA id 98E7F4000E;
 Wed, 14 Apr 2021 09:48:03 +0000 (UTC)
Date: Wed, 14 Apr 2021 11:44:10 +0200
From: =?UTF-8?Q?Fran=C3=A7ois?= <francois-oss@HIDDEN>
Message-ID: <20210414094410.kbdzlzjrgn3d3rr5@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN>
 <YHZAhP90p6o49811@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <YHZAhP90p6o49811@HIDDEN>
X-Spam-Score: -0.7 (/)
X-Mailman-Approved-At: Wed, 14 Apr 2021 10:18:42 -0400
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hello,

On Tue, Apr 13, 2021 at 09:08:20PM -0400, Leo Famulari wrote:
> There's nothing we can do for the 1.2.0 release artifacts at this point.

Is there any place were we could document the problem and the suggested
workaround by Ludo (--url=http://)? Perhaps on the "Installation"
chapter of the manual, near the line documenting "guix pull"?

Cheers,
Franois




Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#46829: `guix pull` uses incorrect certificate store
Resent-From: Maxime Devos <maximedevos@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 14 Apr 2021 19:58:01 +0000
Resent-Message-ID: <handler.46829.B46829.161843024212856 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 46829
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>, Leo Famulari <leo@HIDDEN>
Cc: 46829 <at> debbugs.gnu.org
Received: via spool by 46829-submit <at> debbugs.gnu.org id=B46829.161843024212856
          (code B ref 46829); Wed, 14 Apr 2021 19:58:01 +0000
Received: (at 46829) by debbugs.gnu.org; 14 Apr 2021 19:57:22 +0000
Received: from localhost ([127.0.0.1]:35802 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lWldZ-0003LH-Sl
	for submit <at> debbugs.gnu.org; Wed, 14 Apr 2021 15:57:22 -0400
Received: from michel.telenet-ops.be ([195.130.137.88]:36156)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <maximedevos@HIDDEN>) id 1lWldY-0003L6-1Z
 for 46829 <at> debbugs.gnu.org; Wed, 14 Apr 2021 15:57:21 -0400
Received: from ptr-bvsjgyjmffd7q9timvx.18120a2.ip6.access.telenet.be
 ([IPv6:2a02:1811:8c09:9d00:aaf1:9810:a0b8:a55d])
 by michel.telenet-ops.be with bizsmtp
 id sjxH2400D0mfAB406jxJxp; Wed, 14 Apr 2021 21:57:18 +0200
Message-ID: <bd2e02c02a294adce2c197060539d6c84af9538c.camel@HIDDEN>
From: Maxime Devos <maximedevos@HIDDEN>
Date: Wed, 14 Apr 2021 21:57:03 +0200
In-Reply-To: <87im4pf8cg.fsf@HIDDEN>
References: <871rd0ebd5.fsf@HIDDEN> <877dmrtbvn.fsf@HIDDEN>
 <877dm54zk3.fsf@HIDDEN> <YHNe5+taYSQI70dt@HIDDEN>
 <YHOiXP0JJZZej+7H@HIDDEN> <YHPrv2NdqqaLWh42@HIDDEN>
 <87zgy2leg9.fsf_-_@HIDDEN> <YHXYkTHmMk3FbxMu@HIDDEN>
 <87im4pf8cg.fsf@HIDDEN>
Content-Type: multipart/signed; micalg="pgp-sha512";
 protocol="application/pgp-signature"; boundary="=-I84WCGqI4xKMZApGImiz"
User-Agent: Evolution 3.34.2 
MIME-Version: 1.0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r21;
 t=1618430238; bh=QkgaNxb6OjfXI3InKnU5OwhSezUq7n20B8aj3rnvv9U=;
 h=Subject:From:To:Cc:Date:In-Reply-To:References;
 b=I9jjEtGbeGV6cd0CDv7w6JfvmacBqC2pX10JL1lzg7PlVEuHEhLAkTY2Bosm5/q2I
 TWKXdrAELWhihUGA6TtjpnK2pka6kwj31nOAQEakxfQUcTJja3ARnXGdxpzMPbbeX4
 S1xLw9OwagJx/ZteWtH7+IjDdXcjmKnqQjpI4wgWA4x08YA3cbzsPgDkZYzZuCmwQv
 dYeNVfTRZ4l++5FCyL+EkV2mkSlQbqe5NSPq6iMyNEJmf5IB4/fsqpcayMo4WYsB3c
 gTm8eYpXwnEGz8PE/BGsb/A4SXxexA6/CdehrFiLE9+zM3x5VasSor9/LDsMYlch6W
 CeTZxfb4ana4A==
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)


--=-I84WCGqI4xKMZApGImiz
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Wed, 2021-04-14 at 12:50 +0200, Ludovic Court=C3=A8s wrote:
> [...]
> > > We could also add a =E2=80=98--no-check-certificates=E2=80=99 option =
to =E2=80=98guix pull=E2=80=99.
> >=20
> > I think we should avoid adding "use insecure connection" options. Even
> > if the code itself is signed.
>=20
> =E2=80=9CInsecure=E2=80=9D is a strong word: it still prevents eavesdropp=
ing, which is
> the only property that matters in the presence of authenticated
> channels.

Maybe call the option '--tolerate-eavesdropping' then?  That name:

* is technically correct
* doesn't suggest the option is "Insecure"
* but still sounds like something you don't want
* should be clear to people not knowing about TLS' PKI infrastructure,
  =E2=80=98will eventually=E2=80=99=E2=84=A2 be replaced with GNS + <insert=
 GNUnet protocol here> or
  something like that, which wouldn't use such a centralised structure.

Thoughts?
Maxime.

--=-I84WCGqI4xKMZApGImiz
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----

iI0EABYKADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYHdJDxccbWF4aW1lZGV2
b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7luoAP9A6PJ8JYMiez4NCY+sSs+fPFNV
gG30EsOrb46PRSQuYwD/a26PFL5fKPA6GdeYk6bbcq5yUxc/rPAnb7/U3KyGXgE=
=1YSV
-----END PGP SIGNATURE-----

--=-I84WCGqI4xKMZApGImiz--






Last modified: Wed, 14 Apr 2021 20:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.