Re: curl server certificate verification failed for a few sites

2020-06-08 Thread Giovanni Biscuolo
Marius Bakke writes: [...] > The problem is with GnuTLS, which failed if one of the trust roots were > using an expired certificate: > > https://gitlab.com/gnutls/gnutls/-/issues/1008 Oh I see, fine! > It has been fixed in the latest GnuTLS, which is in Guix as of commit >

Re: curl server certificate verification failed for a few sites

2020-06-06 Thread Tobias Geerinckx-Rice
Giovanni, Giovanni Biscuolo 写道: ...and sorry again to all other Guix users for the "noise": this is not strictly related to Guix but just to the most recent version of curl/wget Don't be. It was a legitimate bug in a Guix package. Thanks to Marius for the quick fix, by the way! I still

Re: curl server certificate verification failed for a few sites

2020-06-06 Thread Marius Bakke
Giovanni Biscuolo writes: > Hi Tobias, > > thank you for your clear explanation and patience > > ...and sorry again to all other Guix users for the "noise": this is not > strictly related to Guix but just to the most recent version of > curl/wget > > I still I don't understand the differences

Re: curl server certificate verification failed for a few sites

2020-06-06 Thread Giovanni Biscuolo
Hi Tobias, thank you for your clear explanation and patience ...and sorry again to all other Guix users for the "noise": this is not strictly related to Guix but just to the most recent version of curl/wget I still I don't understand the differences between curl (and wget) behaviour and the

Re: curl server certificate verification failed for a few sites

2020-06-04 Thread Tobias Geerinckx-Rice
Giovanni Biscuolo 写道: Jack Hill writes: The error wget gives is a little bit better, FWIW, I use this (extremely verbose) command to debug/check my own servers: $ openssl s_client -showcerts -servername voices.transparency.org \ -connect voices.transparency.org:443 Therefore, I

Re: curl server certificate verification failed for a few sites

2020-06-04 Thread Giovanni Biscuolo
Hi Jack, thanks for your help! ...and sorry if this is not Guix specific Jack Hill writes: [...] > I think that this is due to the recent AdTrust Root CA cert expiration > [0]. The error wget gives is a little bit better, but you know about the > situation to interpret it correctly: > > """

Re: curl server certificate verification failed for a few sites

2020-06-04 Thread Jack Hill
On Thu, 4 Jun 2020, Giovanni Biscuolo wrote: Hello Guix, --8<---cut here---end--->8--- I'm having a strange error with curl from Guix (on a foreign distro): --8<---cut here---start->8--- giovanni@roquette: curl -I

curl server certificate verification failed for a few sites

2020-06-04 Thread Giovanni Biscuolo
Hello Guix, this is my current Guix version: --8<---cut here---start->8--- Generation 71 giu 03 2020 17:44:58(current) guix 2f49007 repository URL: https://git.savannah.gnu.org/git/guix.git branch: master commit: