ng0 <n...@we.make.ritual.n0.is> skribis:
> First things first: Corrections will happen, this is not what I ask
> for. I need help with getting pbpst (which just uses curl for this) to
> learn about the certificates on the system.
[...]
> + (modify-phases %standard-phases
> + (replace 'configure
> + (lambda _
> + (substitute* "Makefile"
> + (("@./make.sh") "")
> + ;; XXX: Because this is a drop-in replacement build system,
> there are
> + ;; some unexplainable special behaviors introduced. One of
> them is that
> + ;; building pbpst binary out to ../dist/pbpst fails, but
> inside cwd
> + ;; "src/" succeeds. I blame dark matter. Fix this if you
> feel the
> + ;; desire for a headache.
> + (("dist/\\$\\(PROGNM\\)") "src/$(PROGNM)")
> + (("src/\\$\\(PROGNM\\)\\.1") "dist/$(PROGNM).1"))
> + (substitute* "Tuprules.tup"
> + (("`git describe --long --tags`") ,version))))
> + ;;(setenv "SSL_CERT_FILE" "/dev/null"))) ; I have no idea.
> + ;;(setenv "SSL_CERT_DIR" "/etc/ssl/certs")
> + ;;(setenv "SSL_CERT_FILE"
> "/etc/ssl/certs/ca-certificates.crt")))
I’m not sure what problem you’re experiencing here. However, note that
the build environment lacks /etc/ssl as discussed here:
https://www.gnu.org/software/guix/manual/html_node/Build-Environment-Setup.html#index-chroot
The ‘nss-certs’ package provides X.509 certificates:
https://www.gnu.org/software/guix/manual/html_node/X_002e509-Certificates.html
HTH!
Ludo’.
