guix refresh: X.509 certificate verification issue
$ user@system ~$ guix refresh
Backtrace:
13 (primitive-load "/home/user/.config/guix/current/bin…")
In guix/ui.scm:
1583:12 12 (run-guix-command _ . _)
In ice-9/boot-9.scm:
829:9 11 (catch srfi-34 #<procedure 1839a80 at guix/ui.scm:615:…> …)
829:9 10 (catch system-error #<procedure 1b1c0f0 at guix/script…> …)
In guix/scripts/refresh.scm:
458:12 9 (_)
In srfi/srfi-1.scm:
640:9 8 (for-each #<procedure 1839380 at guix/scripts/refresh.…> …)
In guix/scripts/refresh.scm:
241:2 7 (check-for-package-update #<package acct@6.6.4 gnu/pac…> …)
In guix/gnu-maintenance.scm:
561:21 6 (latest-gnu-release _)
546:16 5 (_)
In ice-9/boot-9.scm:
829:9 4 (catch srfi-34 #<procedure 1b1c0a0 at guix/http-client…> …)
In guix/http-client.scm:
182:20 3 (_)
88:25 2 (http-fetch _ #:port _ #:text? _ #:buffered? _ # _ # _ # …)
In guix/build/download.scm:
403:4 1 (open-connection-for-uri _ #:timeout _ # _)
301:6 0 (tls-wrap #<closed: file 3d22380> _ # _)
guix/build/download.scm:301:6: In procedure tls-wrap:
X.509 certificate of 'ftp.gnu.org' could not be verified:
signer-not-found
invalid
Solution
This issue is related to SSL certificate verification. Install nss-certs
to fix it:
$ guix package -i nss-certs
$ export SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
$ export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
$ export GIT_SSL_CAINFO="$SSL_CERT_FILE"
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information