Re: `guix pull` over HTTPS

[Marius Bakke]

Marius Bakke <address@hidden> writes:

> @@ -224,8 +225,11 @@ contained therein."
>    (with-error-handling
>      (let* ((opts  (parse-options))
>             (store (open-connection))
> +           (certs (string-append (package-output store nss-certs)
> +                                 "/etc/ssl/certs"))

Note: This only works if you have nss-certs in the store already. Not
sure how to convert this into a gexp.

>             (url   (assoc-ref opts 'tarball-url)))
> -      (let ((tarball (download-to-store store url "guix-latest.tar.gz")))
> +      (let ((tarball (download-to-store store url "guix-latest.tar.gz"
> +                                        #:verify-certificate? certs)))
>          (unless tarball
>            (leave (_ "failed to download up-to-date source, exiting\n")))
>          (parameterize ((%guile-for-build
> -- 
> 2.12.0

signature.asc
Description: PGP signature