[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH 3/3] gnu: icedtea-6: Generate keystore.

From: Ricardo Wurmus
Subject: Re: [PATCH 3/3] gnu: icedtea-6: Generate keystore.
Date: Sat, 23 Jul 2016 23:19:24 +0200
User-agent: mu4e 0.9.16; emacs 24.5.1

Andreas Enge <address@hidden> writes:

> Hello, Ricardo!
> address@hidden in master now fails to build in the install-keystore phase.
> Could you have a look, please?

Hmm, that’s strange.  I ran “guix build icedtea” after removing the
validation filter and built out all three versions of icedtea before
pushing this.

I don’t have the very same version of the “keytool” binary on my machine
right now (with the very same version of nss-certs as on hydra), but in
principle this works without errors:

/gnu/store/r63vag0814nz79xr9g2ph6fvhq5xp2f3-icedtea-2.6.6/bin/keytool \
  -import \
  -alias ACCVRAIZ1: \
  -keystore /tmp/keystore \
  -storepass changeit \

Trust this certificate? [no]:  yes
Certificate was added to keystore

The pem file looks like a valid X.509 certificate to me.

I cannot build address@hidden on my machine right now as I’m traveling, but I
just started a build remotely on my workstation in the office and it
failed.  I used to have an additional stripping phase that I removed at
some point.  As I continued to refine the new phase I must have used the
cached build of address@hidden without ever rebuilding it.  Sorry!

The keytool from address@hidden doesn’t like this certificate.  My hunch is
that we may need to remove comments from the certificate files, only
leaving the certificate block.

I’ll fix this as soon as I can.

~~ Ricardo

reply via email to

[Prev in Thread] Current Thread [Next in Thread]