[PATCH 1/2] gnu: tlsdate: Use the system provided certificate store. So far it looks like we are using the application bundled certificates. This should fix it to use the system provided certificates.
[PATCH 2/2] services: Add tlsdate-service. Because I still need to learn how make network bridges and make the "guix vm" generated qemu machine use that to call outside, this is tested in theory: The service spawns, complains about certificates, and quits because it was called with too many ssl connection failures. This is expected in the state the vm is in. I used tlsdate and not sbin/tlsdated because tlsdate is a one-time, at boot only, setting of time while tlsdated does it periodically. This can be changed, but I really need the "one time on boot only" service and find it reasonable not to query servers for time too often.