#1070235 Guix fails to pull channel with SSL error

Package:
guix
Source:
guix
Description:
GNU Guix functional package manager
Submitter:
Tomas Volf
Date:
2024-05-02 21:51:06 UTC
Severity:
normal
#1070235#5
Date:
2024-05-02 14:25:06 UTC
From:
To:
When I invoke `guix pull' against my channel, it fails with a SSL error:

    # /usr/bin/guix pull --url=https://git.wolfsden.cz/.git/guix
    Updating channel 'guix' from Git repository at 'https://git.wolfsden.cz/.git/guix'...
    guix pull: error: Git error: SSL error: 0xffff8880 - SSL - A fatal alert message was received from our peer

No special configuration is needed, just booting the system and installing guix
via apt-get.

This seems to be a problem specific to Guix from the debian package.  When I try
to access the channel by other means (from the same system as above), it works
fine.  `git clone' works just fine, and even Guix installed in non-debian way
works fine, for example via time-machine:

    guix time-machine -q --commit=v1.4.0 -- pull --url=https://git.wolfsden.cz/.git/guix

I am using Debian 12 on 6.7.4 kernel and 2.36-9 libc, running on physical server
machine.

#1070235#10
Date:
2024-05-02 20:16:08 UTC
From:
To:
Does guix pull with the default channels work?

What certificate authority does your https server for your channel use?

You seem to also be lacking the recent security update for guix
(e.g. 1.4.0-3+deb12u1), please test that version also, just in case
there is some weird hidden versioned dependency conflict (e.g. if
guile-gnutls was built against a different version of gnutls than when
guix was initially built).


live well,
  vagrant

#1070235#15
Date:
2024-05-02 21:28:47 UTC
From:
To:
Yes, that is a workaround I use for now.  Guix pull the default channel, and
after that pull mine using the new Guix.  However since guix pull is slow and
resource intensive, that is wasteful and I would like to be able to skip that
step, hence this report.

Let's Encrypt.

Sorry for bad bug report, I did use that version:

    # apt list -a guix
    Listing... Done
    guix/stable-security,stable-security,now 1.4.0-3+deb12u1 amd64 [installed]
    guix/stable,stable 1.4.0-3 amd64

The example bug report on the website does not have the +deb... suffix, so I
assumed I should exclude it, sorry (I do not know much about debian packaging).