GNU logs - #49508, boring messages

Message sent to bug-guix@HIDDEN:

Subject: bug#49508: Implement --allow-insecure-transport for `guix pull`
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 10 Jul 2021 17:29:02 +0000
Resent-Message-ID: <handler.49508.B.162593809827579 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 49508 <at> debbugs.gnu.org
Date: Sat, 10 Jul 2021 13:28:10 -0400
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YOnYqnI8fXzyFXgi@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Received-SPF: pass client-ip=66.111.4.28; envelope-from=leo@HIDDEN;
 helo=out4-smtp.messagingengine.com
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.4 (-)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.4 (--)

As discussed in #46829, `guix pull` needs an option like
--allow-insecure-transport so that users can continue to pull from the
same channel even when their local certificate store has expired or is
otherwise invalid.

[0] <https://debbugs.gnu.org/cgi/bugreport.cgi?bug=46829#114>

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Leo Famulari <leo@HIDDEN>
Subject: bug#49508: Acknowledgement (Implement --allow-insecure-transport
 for `guix pull`)
Message-ID: <handler.49508.B.162593809827579.ack <at> debbugs.gnu.org>
References: <YOnYqnI8fXzyFXgi@HIDDEN>
X-Gnu-PR-Message: ack 49508
X-Gnu-PR-Package: guix
Reply-To: 49508 <at> debbugs.gnu.org
Date: Sat, 10 Jul 2021 17:29:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 49508 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
49508: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D49508
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message received at control <at> debbugs.gnu.org:

Received: (at control) by debbugs.gnu.org; 3 Feb 2022 17:44:38 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Feb 03 12:44:38 2022
Received: from localhost ([127.0.0.1]:57655 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1nFg9u-0004rO-7O
	for submit <at> debbugs.gnu.org; Thu, 03 Feb 2022 12:44:38 -0500
Received: from out3-smtp.messagingengine.com ([66.111.4.27]:54095)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1nFg9s-0004r8-FR
 for control <at> debbugs.gnu.org; Thu, 03 Feb 2022 12:44:37 -0500
Received: from compute2.internal (compute2.nyi.internal [10.202.2.46])
 by mailout.nyi.internal (Postfix) with ESMTP id 2E6A05C01C0;
 Thu,  3 Feb 2022 12:44:31 -0500 (EST)
Received: from mailfrontend1 ([10.202.2.162])
 by compute2.internal (MEProxy); Thu, 03 Feb 2022 12:44:31 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=cc:content-type:date:date:from:from:in-reply-to:message-id
 :mime-version:reply-to:sender:subject:to:to; s=mesmtp; bh=/qMy5X
 wy5WBg4vgMddJD6mOlvhgF+4USvsuQC2pFni0=; b=kztruVQkpceR24+DPLN/rX
 wi4XQn3LaH8EuxnvR8z/CK/H7ElwwHD1UxnougDbCfNAf+wqogFJyBXd9DaRJnDZ
 rOV57cZFOUI6pQFDjBcsVH9SnBOFRKVMP9U1dPuu8xufIddnAQvbi2YFpoEUvGpV
 rjsU5Hd79bHrequFUNghE=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:date:from:from
 :in-reply-to:message-id:mime-version:reply-to:sender:subject:to
 :to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=
 fm2; bh=/qMy5Xwy5WBg4vgMddJD6mOlvhgF+4USvsuQC2pFni0=; b=TbNYuvMg
 t/UWN9X81LScRiUtvs4JNKja1r4eA+QngjdYfsa/uIlVq3T9xycnPfrSyVADj9hN
 oJa1b2J0KwKtCZyM/TWf5A8T1jivrqDC1JUSzaywzq2UUEKMgo0/qZAaSQpiMSXi
 wW0ptML9Y2nluIUAX+NZtZbyeFyPRSsqtwai7xpHqWGnmPeJKrENn67IL2PtkJzF
 9MMUdtD2uDlM65d68nf++YOyJN2SySW7+wCh29qk4v7XXJa8rpiWcrn8Kuz/YyvD
 vYA8iUwTbBmQgFuUstrLFVhh5cIc1a1/ZBaLmkNZT/Ksp334rnTBgUA7nGVrrDwD
 PNeREne6a2c9cA==
X-ME-Sender: <xms:fxT8YR1wisC5quqkXWXVeM37k65eRX-Jjgd__PbajefBxaPEfIqB9A>
 <xme:fxT8YYHmXSQngrLrhhsQAh_KKe6w4xQ1pbvxnrZEInT0UZ_DX_m1P_yc-Cuy5dmw6
 T7sQXvVsO2fEes6nw>
X-ME-Received: <xmr:fxT8YR5jXy26WT85R0rNhK-Rqv5nIGCyRtTZd9U2OQ0Unq1mb9QjSkVHGNAtCs8P2gKCJN5ImpH43kU6gva0jeFWSw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvvddrgeejgddutdefucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucfgmhhpthihuchsuhgsjhgvtghtucdluddtmdenuc
 fjughrpeffhffvkfggtggusehttdertddttddvnecuhfhrohhmpefnvghoucfhrghmuhhl
 rghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpe
 fhjeeigfefvedvfeetheegledtkeevuddtgedtudeiteehteegvdefffduffefffenucev
 lhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrg
 hmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:fxT8Ye2TNa1pA6g1oWfQFYEgJgRN0mwf3yj3_H8LZj2Z7EAXkXPVzQ>
 <xmx:fxT8YUGudgNaOFVVOCoxhCA684UUDANNacu101gVU1iw-WgTh6HV7A>
 <xmx:fxT8Yf8z6ZzIlkYFUwUCv0yyOBC6xxIeshHjOhy86UFckTeBjuNSaQ>
 <xmx:fxT8YXwIruEp34Qo-04T7UrXS0eFY5UxjCjiqmcxgu9ADYRAA0xk3Q>
Received: by mail.messagingengine.com (Postfix) with ESMTPA for
 <control <at> debbugs.gnu.org>; Thu, 3 Feb 2022 12:44:30 -0500 (EST)
Date: Thu, 3 Feb 2022 12:44:29 -0500
From: Leo Famulari <leo@HIDDEN>
To: control <at> debbugs.gnu.org
Message-ID: <YfwUfbmGj1HWLFG7@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Spam-Score: 3.0 (+++)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  block 53214 with 49508 
 Content analysis details:   (3.0 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.7 RCVD_IN_DNSWL_LOW      RBL: Sender listed at https://www.dnswl.org/,
 low trust [66.111.4.27 listed in list.dnswl.org]
 1.8 MISSING_SUBJECT        Missing Subject: header
 0.2 NO_SUBJECT             Extra score for no subject
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
 1.7 BODY_EMPTY             No body text in message
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 2.0 (++)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  block 53214 with 49508 
 
 Content analysis details:   (2.0 points, 10.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.7 RCVD_IN_DNSWL_LOW      RBL: Sender listed at https://www.dnswl.org/,
                             low trust
                             [66.111.4.27 listed in list.dnswl.org]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  1.8 MISSING_SUBJECT        Missing Subject: header
  0.2 NO_SUBJECT             Extra score for no subject
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
 -1.0 MAILING_LIST_MULTI     Multiple indicators imply a widely-seen list
                             manager
  1.7 BODY_EMPTY             No body text in message

block 53214 with 49508

Message sent to bug-guix@HIDDEN:

Subject: bug#49508: Implement --allow-insecure-transport for `guix pull`
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 08 Feb 2022 10:19:01 +0000
Resent-Message-ID: <handler.49508.B49508.164431549931281 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Leo Famulari <leo@HIDDEN>
Cc: 49508 <at> debbugs.gnu.org
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <YOnYqnI8fXzyFXgi@HIDDEN>
Date: Tue, 08 Feb 2022 11:18:08 +0100
In-Reply-To: <YOnYqnI8fXzyFXgi@HIDDEN> (Leo Famulari's message of "Sat,
 10 Jul 2021 13:28:10 -0400")
Message-ID: <875yppbr1b.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Hi,

Leo Famulari <leo@HIDDEN> skribis:

> As discussed in #46829, `guix pull` needs an option like
> --allow-insecure-transport so that users can continue to pull from the
> same channel even when their local certificate store has expired or is
> otherwise invalid.

Agreed.

Unfortunately it seems that libgit2 doesn=E2=80=99t let us turn off certifi=
cate
verification:

  https://libgit2.org/libgit2/#HEAD/group/libgit2

=E2=80=98verify_server_cert=E2=80=99 in src/streams/openssl.c is called
unconditionally.  So it seems that the first thing to do would be to
submit a patch upstream that would allow users to disable certificate
checks via =E2=80=98git_libgit2_opts=E2=80=99.

Now, by default, =E2=80=98guix pull=E2=80=99 honors /etc/ssl/certs.  Assumi=
ng those are
up-to-date, it should be fine, right?

Thanks,
Ludo=E2=80=99.

Message received at control <at> debbugs.gnu.org:

Received: (at control) by debbugs.gnu.org; 8 Feb 2022 10:18:27 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Feb 08 05:18:27 2022
Received: from localhost ([127.0.0.1]:45438 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1nHNZr-00088s-4c
	for submit <at> debbugs.gnu.org; Tue, 08 Feb 2022 05:18:27 -0500
Received: from hera.aquilenet.fr ([185.233.100.1]:36916)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1nHNZp-00088b-9j
 for control <at> debbugs.gnu.org; Tue, 08 Feb 2022 05:18:25 -0500
Received: from localhost (localhost [127.0.0.1])
 by hera.aquilenet.fr (Postfix) with ESMTP id F088D193
 for <control <at> debbugs.gnu.org>; Tue,  8 Feb 2022 11:18:19 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at aquilenet.fr
Received: from hera.aquilenet.fr ([127.0.0.1])
 by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id Qx3PEqJALSnE for <control <at> debbugs.gnu.org>;
 Tue,  8 Feb 2022 11:18:19 +0100 (CET)
Received: from ribbon (unknown [IPv6:2001:660:6102:320:e120:2c8f:8909:cdfe])
 by hera.aquilenet.fr (Postfix) with ESMTPSA id 871B916C
 for <control <at> debbugs.gnu.org>; Tue,  8 Feb 2022 11:18:19 +0100 (CET)
Date: Tue, 08 Feb 2022 11:18:18 +0100
Message-Id: <874k59br11.fsf@HIDDEN>
To: control <at> debbugs.gnu.org
From: =?utf-8?Q?Ludovic_Court=C3=A8s?= <ludo@HIDDEN>
Subject: control message for bug #49508
MIME-version: 1.0
Content-type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Spamd-Bar: /
Authentication-Results: hera.aquilenet.fr;
	none
X-Rspamd-Server: hera
X-Rspamd-Queue-Id: F088D193
X-Spamd-Result: default: False [0.61 / 15.00]; ARC_NA(0.00)[];
 RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[];
 TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain];
 TO_DN_NONE(0.00)[];
 PREVIOUSLY_DELIVERED(0.00)[control <at> debbugs.gnu.org];
 RCPT_COUNT_ONE(0.00)[1]; FROM_EQ_ENVFROM(0.00)[];
 MIME_TRACE(0.00)[0:+]; R_MIXED_CHARSET(0.71)[subject];
 RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[];
 MID_RHS_MATCH_FROM(0.00)[]
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)

severity 49508 important
quit

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#49508: Implement --allow-insecure-transport for `guix pull`
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 08 Feb 2022 17:12:01 +0000
Resent-Message-ID: <handler.49508.B49508.164434030113800 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 49508
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: 49508 <at> debbugs.gnu.org
Received: via spool by 49508-submit <at> debbugs.gnu.org id=B49508.164434030113800
          (code B ref 49508); Tue, 08 Feb 2022 17:12:01 +0000
Received: (at 49508) by debbugs.gnu.org; 8 Feb 2022 17:11:41 +0000
Received: from localhost ([127.0.0.1]:48484 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1nHU1l-0003aV-2B
	for submit <at> debbugs.gnu.org; Tue, 08 Feb 2022 12:11:41 -0500
Received: from out4-smtp.messagingengine.com ([66.111.4.28]:58869)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1nHU1i-0003aJ-TX
 for 49508 <at> debbugs.gnu.org; Tue, 08 Feb 2022 12:11:39 -0500
Received: from compute2.internal (compute2.nyi.internal [10.202.2.46])
 by mailout.nyi.internal (Postfix) with ESMTP id DDCC85C009F;
 Tue,  8 Feb 2022 12:11:33 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163])
 by compute2.internal (MEProxy); Tue, 08 Feb 2022 12:11:33 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=cc:cc:content-transfer-encoding:content-type:date:date:from
 :from:in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:sender:subject:subject:to:to; s=mesmtp; bh=lMbqFmGqohB
 pltNdW7UpcQYNgWGaJc8RnZlKT7f/CrU=; b=X8+c3TM4QGREkj1H9sMlgS1Njn9
 DXTe+qMVI0YVX1HJuUVnKLbHx694eyfrC8XCkiq10gC3HiySFqOnAH2fGRK3T+Et
 G0KTEAZB9Q0B3gT0e5iI8eJjvNgtyPkgB9KAklWC+KbvCDir1cbgX6uEXoEIXmHF
 +gjecd2X8N8dmGPU=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:date:date:from:from:in-reply-to:in-reply-to
 :message-id:mime-version:references:reply-to:sender:subject
 :subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
 :x-sasl-enc; s=fm2; bh=lMbqFmGqohBpltNdW7UpcQYNgWGaJc8RnZlKT7f/C
 rU=; b=aSgZDinHoaEvsWZbRNXOfu2y5p9hMKJqKG6BGjqxKcfC6x5nTq0hA2MZT
 b+dhaxwQNx6EEvdpN9R8OL5P1QMOdortyEIV48/rYKAscxjJtWoJJ4nZPXKU709P
 f8rtokW4z5RjOor/SGQnWcEgRAt4Ib3EB1a72CC4dkXRKHQkHL26NPurxLZH/13+
 ZehPX9HAi5BPGESBb5czfIR3ur9QU2lyjgNepasmFb7pWgwlVNKZfkw5AXj8P00g
 07j4+DD+U8Ydo3uvwm1YQL1zkaVYNiQidZHjN0A3LlK3RsLaOObkkidCjtQp6jZP
 DODDsOM+DjdwuAIGuJCodNqPORpig==
X-ME-Sender: <xms:RaQCYqiLdPhWmOlrElu1cdh46VIphr_MdB2J1TK9sw4fAMUhQEsyZg>
 <xme:RaQCYrCC7jXjPeqkhZfXYogq6ahwwIrr21Ujxmb9NiW5qCahFrFuJE_qKcVQFw_6s
 csXBCG38hxn7BM0yw>
X-ME-Received: <xmr:RaQCYiEdmFEMht_GNEuro9j4iO8BvrsqFXIBCTEr96leEyVAXsF6TGK9t-fMDpr7uVd7L1wBzH7XjbAEIuCStobxgw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvvddrheejgdelgecutefuodetggdotefrodftvf
 curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu
 uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc
 fjughrpeffhffvuffkfhggtggugfgjsehtkeertddttdejnecuhfhrohhmpefnvghoucfh
 rghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrghtth
 gvrhhnpeeihedtheetgfevveffieeiieffhfekgfehueduueduhfdttddvjeetteejueef
 tdenucffohhmrghinheplhhisghgihhtvddrohhrghenucevlhhushhtvghrufhiiigvpe
 dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:RaQCYjR5PyU5Jbbm1EVO2dCpc-tMlnQiltfzCwp7_zpmdeyYtiAu1w>
 <xmx:RaQCYnwXH_MIKM7qycxn4HDKG_5TQeevv4oAzYGJlr0ymnYs6Pbu9g>
 <xmx:RaQCYh4EjSIDxAMnyYyKWnv8OLpv3Xycw99lwhdqNFG28l3pTsPgiQ>
 <xmx:RaQCYlZdxdvMAOAUe2mPTKUurtWgouvaVRAdsPhB4mEpn_WiSBEZZA>
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue,
 8 Feb 2022 12:11:33 -0500 (EST)
Date: Tue, 8 Feb 2022 12:11:32 -0500
From: Leo Famulari <leo@HIDDEN>
Message-ID: <YgKkRDbry8C2b3u1@HIDDEN>
References: <YOnYqnI8fXzyFXgi@HIDDEN>
 <875yppbr1b.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <875yppbr1b.fsf@HIDDEN>
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Tue, Feb 08, 2022 at 11:18:08AM +0100, Ludovic Courtès wrote:
> Unfortunately it seems that libgit2 doesn’t let us turn off certificate
> verification:
> 
>   https://libgit2.org/libgit2/#HEAD/group/libgit2
> 
> ‘verify_server_cert’ in src/streams/openssl.c is called
> unconditionally.

Ah, that's not surprising.

> So it seems that the first thing to do would be to
> submit a patch upstream that would allow users to disable certificate
> checks via ‘git_libgit2_opts’.

Right, but it might not be accepted.

> Now, by default, ‘guix pull’ honors /etc/ssl/certs.  Assuming those are
> up-to-date, it should be fine, right?

Yeah, I think so.

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#49508: Implement --allow-insecure-transport for `guix pull`
Resent-From: Mathieu Othacehe <othacehe@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 01 Nov 2022 17:32:02 +0000
Resent-Message-ID: <handler.49508.B49508.16673238699037 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 49508
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: 49508 <at> debbugs.gnu.org, Leo Famulari <leo@HIDDEN>
Received: via spool by 49508-submit <at> debbugs.gnu.org id=B49508.16673238699037
          (code B ref 49508); Tue, 01 Nov 2022 17:32:02 +0000
Received: (at 49508) by debbugs.gnu.org; 1 Nov 2022 17:31:09 +0000
Received: from localhost ([127.0.0.1]:44144 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1opv6T-0002Lh-Bi
	for submit <at> debbugs.gnu.org; Tue, 01 Nov 2022 13:31:09 -0400
Received: from eggs.gnu.org ([209.51.188.92]:45166)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <othacehe@HIDDEN>) id 1opv6O-0002L7-Ef
 for 49508 <at> debbugs.gnu.org; Tue, 01 Nov 2022 13:31:08 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <othacehe@HIDDEN>)
 id 1opv6I-0005pB-E4; Tue, 01 Nov 2022 13:30:58 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To:
 From; bh=u22izXh0Cg6oxjt2WBoXNiEcO76vq7FR5cRldSdSaMw=; b=Vv9+7yJcvyhyG/drGj7P
 3paRDCw73a9PI+TPRwXWmDyoBlQPRnsghK5p0zCPagP43j0ygUJ3MgeDn9VEc8Dof2Rv6IyJKbREh
 flBE0gjK+rUoEhvTjPwMVWUtvCFk15AinOuO7zSJGZ1E5zDSwjF0JgpN3RvKu8L2QfaAz2jR967V8
 e1qdCN2S8MXzsitQKat6V+y0wIvoAq99+1V+aWJAmnm2mfj3gZcDzEJ03IrwlTdb8hevzAM69BWJd
 1uwaXglslpNo9fx1+BBQJflUlsvrTjDjTNmC3rdZ26XT9YjyOm7KeguvnjpBrSIhIWBeBhjHDXdzI
 8cye4ZgjNwiXoA==;
Received: from 2a02-8429-81d2-3d01-94c9-8097-ea5c-2774.rev.sfr.net
 ([2a02:8429:81d2:3d01:94c9:8097:ea5c:2774] helo=meije)
 by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <othacehe@HIDDEN>)
 id 1opv6G-0003lc-Bz; Tue, 01 Nov 2022 13:30:58 -0400
From: Mathieu Othacehe <othacehe@HIDDEN>
References: <YOnYqnI8fXzyFXgi@HIDDEN> <875yppbr1b.fsf@HIDDEN>
Date: Tue, 01 Nov 2022 18:30:52 +0100
In-Reply-To: <875yppbr1b.fsf@HIDDEN> ("Ludovic =?UTF-8?Q?Court=C3=A8s?="'s message of "Tue, 08 Feb 2022 11:18:08 +0100")
Message-ID: <871qqmmvjn.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -2.3 (--)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)


Hello,

> =E2=80=98verify_server_cert=E2=80=99 in src/streams/openssl.c is called
> unconditionally.  So it seems that the first thing to do would be to
> submit a patch upstream that would allow users to disable certificate
> checks via =E2=80=98git_libgit2_opts=E2=80=99.

While this seems like something that we definitely want, I think we
shouldn't block the release with a contribution that can take time to be
upstreamed in libgit2.

Unblocking #53214.

Mathieu

Message received at control <at> debbugs.gnu.org:

Received: (at control) by debbugs.gnu.org; 1 Nov 2022 17:32:27 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Nov 01 13:32:27 2022
Received: from localhost ([127.0.0.1]:44148 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1opv7i-0002Nk-Qz
	for submit <at> debbugs.gnu.org; Tue, 01 Nov 2022 13:32:27 -0400
Received: from eggs.gnu.org ([209.51.188.92]:42476)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mathieu@HIDDEN>)
 id 1opv7h-0002NS-GL
 for control <at> debbugs.gnu.org; Tue, 01 Nov 2022 13:32:25 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1)
 (envelope-from <mathieu@HIDDEN>)
 id 1opv7c-0006HQ-B1
 for control <at> debbugs.gnu.org; Tue, 01 Nov 2022 13:32:20 -0400
Received: from 2a02-8429-81d2-3d01-94c9-8097-ea5c-2774.rev.sfr.net
 ([2a02:8429:81d2:3d01:94c9:8097:ea5c:2774] helo=meije)
 by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1)
 (envelope-from <mathieu@HIDDEN>)
 id 1opv7b-0007m1-1H
 for control <at> debbugs.gnu.org; Tue, 01 Nov 2022 13:32:20 -0400
Date: Tue, 01 Nov 2022 18:32:16 +0100
Message-Id: <87zgdalgwv.fsf@HIDDEN>
To: control <at> debbugs.gnu.org
From: Mathieu Othacehe <mathieu@HIDDEN>
Subject: control message for bug #53214
X-Spam-Score: -1.9 (-)
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.9 (--)

unblock 53214 by 49508
quit

Last modified: Tue, 1 Nov 2022 17:45:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.