Hello group, I have inspected things.
And upon careful println debugging (around mzssl.rkt:760), ended up running: mkdir -p home/mflatt/build/bl/l64/dest/ssl/ wget -O /home/mflatt/build/bl/l64/dest/ssl/cert.pem http://curl.haxx.se/ca/cacert.pem Which actually fixed the raco install. I guess the certificates are not read from the correct path. More debug show this: root@5e50a7d9f676:/usr/share/racket# strings /usr/lib/racket/libcrypto.so.1.0.0 | grep mflatt OPENSSLDIR: "/home/mflatt/build/bl/l64/dest/ssl" /home/mflatt/build/bl/l64/dest/lib/engines /home/mflatt/build/bl/l64/dest/ssl/private /home/mflatt/build/bl/l64/dest/ssl /home/mflatt/build/bl/l64/dest/ssl/certs /home/mflatt/build/bl/l64/dest/ssl/cert.pem Another fix if you have certificates in /etc/ssl/certs : mkdir -p /home/mflatt/build/bl/l64/dest/ssl root@5e50a7d9f676:/usr/share/racket# ln -s /etc/ssl/certs/ /home/mflatt/build/bl/l64/dest/ssl/certs The bug concerns racket-6.6-x86_64-linux-natipkg.sh and no longer exists in racket-6.7-x86_64-linux.sh . On Wednesday, November 2, 2016 at 11:24:52 PM UTC+1, P. Baillet wrote: > Hello racketeers, > > I have the same issue on a Docker based Racket install: > > FROM ubuntu:14.04 > > RUN apt-get update > RUN apt-get install -y curl > WORKDIR /tmp/ > RUN curl -t fsSL > http://mirror.racket-lang.org/installers/6.6/racket-6.6-x86_64-linux-natipkg.sh > > racket.sh > RUN echo "yes\n1\n" | /bin/bash racket.sh > RUN rm racket.sh > RUN raco pkg install elasticsearch > > > Resolving "elasticsearch" via > https://download.racket-lang.org/releases/6.6/catalog/ > ssl-connect: connect failed (error:14090086:SSL > routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed) > context...: > /usr/share/racket/collects/openssl/mzssl.rkt:1442:8: loop > /usr/share/racket/collects/openssl/../racket/private/more-scheme.rkt:261:28 > > /usr/share/racket/collects/openssl/../racket/contract/private/arrow-val-first.rkt:306:25 > /usr/share/racket/collects/net/http-client.rkt:235:0 > > /usr/share/racket/collects/racket/contract/private/arrow-val-first.rkt:397:3 > /usr/share/racket/collects/net/url.rkt:144:0: http://getpost-impure-port > /usr/share/racket/collects/net/url.rkt:251:2: redirection-loop > > /usr/share/racket/collects/racket/contract/private/arrow-val-first.rkt:397:3 > /usr/share/racket/collects/pkg/private/network.rkt:59:3 > /usr/share/racket/collects/pkg/private/catalog.rkt:218:0: read-from-server > /usr/share/racket/collects/pkg/private/catalog.rkt:138:9: for-loop > /usr/share/racket/collects/pkg/private/catalog.rkt:135:2: lookup-normally > > /usr/share/racket/collects/pkg/private/../../racket/private/more-scheme.rkt:261:28 > /usr/share/racket/collects/pkg/private/prefetch.rkt:128:2 > /usr/share/racket/collects/pkg/private/catalog.rkt:132:0: > package-catalog-lookup9 > /usr/share/racket/collects/pkg/private/catalog.rkt:200:0: > package-catalog-lookup-source19 > > I've tried upgrading the distro before, but without any luck... > > > On Wednesday, April 20, 2016 at 1:29:47 AM UTC+2, Jordan Johnson wrote: > > At Mon, 18 Apr 2016 14:32:20 -0700, Jordan Johnson wrote: > > ssl-connect: connect failed (error:14090086:SSL > > routines:ssl3_get_server_certificate:certificate verify failed) > > context…: [stack trace follows] > > > > I've seen these kinds of problems where the set of trusted certificates > > had not been updated recently enough. Maybe there's an update for the > > "ca-certificates" package for your installation? > > > > > > > > Possibly; I may have to kick this over to my ISP’s support, since it’s a > > managed VPS on which I can’t install packages system-wide. > > You could also try setting the `PLT_PKG_SSL_NO_VERIFY` environment > > variable. As a workaround, that's a last resort, but it might help > > clarify whether it issue is with the set of trusted root certificates. > > > > > > > > Ah! OK, I tried that, and got: > > ssl-connect: connect failed (error:14090086:SSL > > routines:ssl3_get_server_certificate:certificate verify failed) > > > > > > Same error, suggesting the problem isn’t failure to verify. Is there any > > way to get more info from raco about the cause of failure? I looked for a > > “verbose” option to raco pkg install, but AFAICT there is none. > > > > > > Best, > > jmj -- You received this message because you are subscribed to the Google Groups "Racket Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to racket-users+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
