diff options
| author | Ludovic Courtès <ludo@gnu.org> | 2021-10-04 23:03:41 +0200 |
|---|---|---|
| committer | Ludovic Courtès <ludo@gnu.org> | 2021-10-07 10:47:43 +0200 |
| commit | 6d02a994f911a75e3a223a22c05c2939cdfed2b5 (patch) | |
| tree | 0a45dabff82c7fa89122bfec9a615e73a311d00d | |
| parent | ce83883f3d8bf6e6d25091acd018a8236a5754e1 (diff) | |
| download | guix-6d02a994f911a75e3a223a22c05c2939cdfed2b5.tar.gz guix-6d02a994f911a75e3a223a22c05c2939cdfed2b5.zip | |
download: Honor #:verify-certificate? for SWH downloads.
Previously, the SWH + Disarchive fallback could fail with:
Trying to use Disarchive to assemble /gnu/store/…-ucsim-0.6-pre68.tar.gz...
Assembling the directory ucsim-0.6-pre68
Downloading /gnu/store/…-ucsim-0.6-pre68.tar.gz from Software Heritage...
X.509 certificate of 'archive.softwareheritage.org' could not be verified:
signer-not-found
invalid
Could not resolve directory reference
This will no longer be the case since 'guix perform-download'
passes #:verify-certificate? #f.
* guix/build/download.scm (disarchive-fetch/any): Parameterize
'%verify-swh-certificate?'.
| -rw-r--r-- | guix/build/download.scm | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/guix/build/download.scm b/guix/build/download.scm index 1ed623034b..fd8fe69901 100644 --- a/guix/build/download.scm +++ b/guix/build/download.scm @@ -674,7 +674,8 @@ and write the output to FILE." (match (fetch-specification uris) (#f (format #t "could not find its Disarchive specification~%") #f) - (spec (parameterize ((%disarchive-log-port (current-output-port))) + (spec (parameterize ((%disarchive-log-port (current-output-port)) + (%verify-swh-certificate? verify-certificate?)) (false-if-exception* (disarchive-assemble spec file #:resolver resolve)))))))) |