[Nix-dev] Problems using git on darwin

Wed Jul 25 21:41:14 CEST 2012

Hi Eelco,
thank you for your help, but apparently this doesn't work.

Here is what I did (in case someone can spot an error):
I installed cacert from nixpkgs and I set

$ export
OPENSSL_X509_CERT_FILE=/nix/store/0gyh9310jyp8q424g35lig7fp08n6mhm-cacert-20120628/etc/ca-bundle.crt

$ head -n4 $OPENSSL_X509_CERT_FILE
##
## ca-bundle.crt -- Bundle of CA Root Certificates
##
## Certificate data from Mozilla as of: Thu Jun 28 15:03:08 2012

But I still get the same error:

$ git push origin
error: SSL certificate problem: unable to get local issuer certificate
while accessing https://github.com/maggesi/nixpkgs.git/info/refs
fatal: HTTP request failed

The same problem arise with other tools, e.g.

$ curl https://github.com/maggesi/nixpkgs.git
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: http://curl.haxx.se/docs/sslcerts.html

However the certificate bundle seems valid:

$ curl --cacert $OPENSSL_X509_CERT_FILE
https://github.com/maggesi/nixpkgs.git
<html>
<head><title>301 Moved Permanently</title></head>
<body bgcolor="white">
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.0.13</center>
</body>
</html>

2012/7/22 Eelco Dolstra <eelco.dolstra at logicblox.com>

> Hi,
>
> (resend to list)
>
> On 22/07/12 11:55, Marco Maggesi wrote:
>
> > I installed git with nix on darwin.
> > When I try to use remote (github) repositories I get an SSL error:
> >
> > soyuz:nixpkgs maggesi$ git pull
> > error: SSL certificate problem: unable to get local issuer certificate
> while
> > accessing https://github.com/maggesi/nixpkgs.git/info/refs
> > fatal: HTTP request failed
>
> OpenSSL in Nixpkgs expects the environment variable
> $OPENSSL_X509_CERT_FILE to
> point to an SSL certificate bundle.  On NixOS this is
> /etc/ssl/certs/ca-bundle.crt.  If you don't have a similar file on Mac OS
> X, you
> can install the cacert package from Nixpkgs.
>
> --
> Eelco Dolstra | LogicBlox, Inc. | http://nixos.org/~eelco/
> _______________________________________________
> nix-dev mailing list
> nix-dev at lists.science.uu.nl
> http://lists.science.uu.nl/mailman/listinfo/nix-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.science.uu.nl/pipermail/nix-dev/attachments/20120725/ccf98049/attachment.html 