R: server certificate verification failed.

DoneSubmitted by Jonathan Brielmaier.
Details
2 participants
  • Jonathan Brielmaier
  • Ricardo Wurmus
Owner
unassigned
Severity
normal
J
J
Jonathan Brielmaier wrote on 27 Mar 2020 22:56
(address . bug-guix@gnu.org)
aaf92d30-4f45-1939-7e59-759143f93609@web.de
Hi,
while trying to run a simple R script on my guix server, I stumbled upona problem with HTTPS and R. It's nothing urgent...
reproducer.Rlibrary(jsonlite)library(tidyverse)library(lubridate)api_parking <- "https://guix.gnu.org/packages.json"parking.raw <- fromJSON(api_parking, simplifyDataFrame = TRUE)
$ R CMD BATCH reproducer.R[...]
Toggle quote (2 lines)> library(jsonlite)> library(tidyverse)
── Attaching packages ─────────────────────────────────────── tidyverse1.3.0 ──✔ ggplot2 3.3.0 ✔ purrr 0.3.3✔ tibble 2.1.3 ✔ dplyr 0.8.5✔ tidyr 1.0.2 ✔ stringr 1.4.0✔ readr 1.3.1 ✔ forcats 0.5.0── Conflicts ──────────────────────────────────────────tidyverse_conflicts() ──✖ dplyr::filter() masks stats::filter()✖ purrr::flatten() masks jsonlite::flatten()✖ dplyr::lag() masks stats::lag()
Toggle quote (2 lines)> library(lubridate)
Attaching package: ‘lubridate’
The following object is masked from ‘package:base’:
date
Toggle quote (2 lines)> api_parking <- "https://guix.gnu.org/packages.json"> parking.raw <- fromJSON(api_parking, simplifyDataFrame = TRUE)
Error in open.connection(con, "rb") : server certificate verification failed. CAfile: none CRLfile: noneCalls: fromJSON ... parse_and_simplify -> parseJSON -> parse_con -> open-> open.connectionExecution halted
For the record my SSL/HTTPS related variables.$ echo $SSL_CERT_DIR/etc/ssl/certsecho $SSL_CERT_FILE/etc/ssl/certs/ca-certificates.crtecho $CURL_CA_BUNDLE/run/current-system/profile/etc/ssl/certs/ca-certificates.crt
All required packages (r, r-*, nss-certs) are installed system wide.
Regards Jonathan
R
R
Ricardo Wurmus wrote on 27 Mar 2020 23:39
(name . Jonathan Brielmaier)(address . jonathan.brielmaier@web.de)(address . 40262-done@debbugs.gnu.org)
87a741xw0y.fsf@elephly.net
Jonathan Brielmaier <jonathan.brielmaier@web.de> writes:
Toggle quote (3 lines)> Error in open.connection(con, "rb") :> server certificate verification failed. CAfile: none CRLfile: none
This is due to a change in r-curl. We patched it to respect theCURL_CA_BUNDLE environment variable, not just when it’s used on Windows.The code has changed since we developed the patch. Now theCURLOPT_CAINFO option is only set (incurl/src/handle.c:set_handle_defaults) when _WIN32 is defined and whentlsinfo->backend == CURLSSLBACKEND_OPENSSL. Neither of these casesapply for Guix.
I’ve adjusted the patch in r-curl.
Thank you for the report!
--Ricardo
Closed
?
Your comment

Commenting via the web interface is currently disabled.

To comment on this conversation send email to 40262@debbugs.gnu.org