When I invoke `guix pull' against my channel, it fails with a SSL error:
# /usr/bin/guix pull --url=https://git.wolfsden.cz/.git/guix
Updating channel 'guix' from Git repository at 'https://git.wolfsden.cz/.git/guix'...
guix pull: error: Git error: SSL error: 0xffff8880 - SSL - A fatal alert message was received from our peer
No special configuration is needed, just booting the system and installing guix
via apt-get.
This seems to be a problem specific to Guix from the debian package. When I try
to access the channel by other means (from the same system as above), it works
fine. `git clone' works just fine, and even Guix installed in non-debian way
works fine, for example via time-machine:
guix time-machine -q --commit=v1.4.0 -- pull --url=https://git.wolfsden.cz/.git/guix
I am using Debian 12 on 6.7.4 kernel and 2.36-9 libc, running on physical server
machine.
Does guix pull with the default channels work? What certificate authority does your https server for your channel use? You seem to also be lacking the recent security update for guix (e.g. 1.4.0-3+deb12u1), please test that version also, just in case there is some weird hidden versioned dependency conflict (e.g. if guile-gnutls was built against a different version of gnutls than when guix was initially built). live well, vagrant
Yes, that is a workaround I use for now. Guix pull the default channel, and
after that pull mine using the new Guix. However since guix pull is slow and
resource intensive, that is wasteful and I would like to be able to skip that
step, hence this report.
Let's Encrypt.
Sorry for bad bug report, I did use that version:
# apt list -a guix
Listing... Done
guix/stable-security,stable-security,now 1.4.0-3+deb12u1 amd64 [installed]
guix/stable,stable 1.4.0-3 amd64
The example bug report on the website does not have the +deb... suffix, so I
assumed I should exclude it, sorry (I do not know much about debian packaging).