Re: HELP needed with CA certificates! [PATCH] gnu: Add tup, Add pbpst.

[Ludovic Courtès]

ng0 <address@hidden> skribis:

> First things first: Corrections will happen, this is not what I ask
> for. I need help with getting pbpst (which just uses curl for this) to
> learn about the certificates on the system.

[...]

> +         (modify-phases %standard-phases
> +           (replace 'configure
> +             (lambda _
> +               (substitute* "Makefile"
> +                 (("@./make.sh") "")
> +                 ;; XXX: Because this is a drop-in replacement build system, 
> there are
> +                 ;; some unexplainable special behaviors introduced. One of 
> them is that
> +                 ;; building pbpst binary out to ../dist/pbpst fails, but 
> inside cwd
> +                 ;; "src/" succeeds. I blame dark matter. Fix this if you 
> feel the
> +                 ;; desire for a headache.
> +                 (("dist/\\$\\(PROGNM\\)") "src/$(PROGNM)")
> +                 (("src/\\$\\(PROGNM\\)\\.1") "dist/$(PROGNM).1"))
> +               (substitute* "Tuprules.tup"
> +                 (("`git describe --long --tags`") ,version))))
> +               ;;(setenv "SSL_CERT_FILE" "/dev/null"))) ; I have no idea.
> +               ;;(setenv "SSL_CERT_DIR" "/etc/ssl/certs")
> +               ;;(setenv "SSL_CERT_FILE" 
> "/etc/ssl/certs/ca-certificates.crt")))

I’m not sure what problem you’re experiencing here.  However, note that
the build environment lacks /etc/ssl as discussed here:

  
https://www.gnu.org/software/guix/manual/html_node/Build-Environment-Setup.html#index-chroot

The ‘nss-certs’ package provides X.509 certificates:

  https://www.gnu.org/software/guix/manual/html_node/X_002e509-Certificates.html

HTH!

Ludo’.