TakeV/guix
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

download: Honor #:verify-certificate? for SWH downloads.

Browse source 
Previously, the SWH + Disarchive fallback could fail with:

  Trying to use Disarchive to assemble /gnu/store/…-ucsim-0.6-pre68.tar.gz...
  Assembling the directory ucsim-0.6-pre68
  Downloading /gnu/store/…-ucsim-0.6-pre68.tar.gz from Software Heritage...
  X.509 certificate of 'archive.softwareheritage.org' could not be verified:
    signer-not-found
    invalid

  Could not resolve directory reference

This will no longer be the case since 'guix perform-download'
passes #:verify-certificate? #f.

* guix/build/download.scm (disarchive-fetch/any): Parameterize
'%verify-swh-certificate?'.
This commit is contained in:
Ludovic Courtès 2021-10-04 23:03:41 +02:00
parent ce83883f3d
commit 6d02a994f9
No known key found for this signature in database
GPG key ID: 090B11993D9AEBB5
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
guix/build/download.scm
View file

@ -674,7 +674,8 @@ (define (resolve addresses output)
(match (fetch-specification uris)
(#f (format #t "could not find its Disarchive specification~%")
#f)
(spec (parameterize ((%disarchive-log-port (current-output-port)))
(spec (parameterize ((%disarchive-log-port (current-output-port))
(%verify-swh-certificate? verify-certificate?))
(false-if-exception*
(disarchive-assemble spec file #:resolver resolve))))))))