X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-0.6 required=5.0	tests=AWL,BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,KHOP_RCVD_TRUST,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_YE,SPF_SOFTFAIL,TW_BZ
X-Spam-Check-By: sourceware.org
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=google.com; s=20120113;        h=mime-version:x-originating-ip:date:message-id:subject:from:to         :content-type:x-gm-message-state;        bh=lrNFCfW+mNekSvOhpfceRUVeCDQw2jpztIbDfbLowD0=;        b=IvwXdBSN53fUJaKi++3wEDFMkztLYwFKVgjAmt2JXU7ZK9+m5DwYK/oUah+faxf1sL         wBQIjSnqQrflzzWe/VgnsuWNwRs2giuw4R2fl6VAnZW+v0JOyyGOn4ky+CJRz+S8UF2E         hgnxTg33QMETINC8a/TftchrPZxyRbUlXgsisF/cGuXMRPQHTv45f1gLTkWdCINUiR+S         zOtLQhrptbhpHsjXmWPYIvV/D8cbbEV6+PKEfL/EXpbNwDC9sPI6/JfJVYNHjleNUU8v         wJs7JnuyMZcD9NNEaWCwU/BCckRKSFvcj60GcN4ehFiUlcBHDJZc6BbVa5PT72cT02tT         RGIQ==
MIME-Version: 1.0
Date: Sun, 1 Apr 2012 13:38:54 -0500
Message-ID: <CAPbcu1MVrvjkK6eFu6kmBZwRT5fJC1RTyujcsTcK--wpR-_Pkw@mail.gmail.com>
Subject: bzr: Value "/etc/ssl/certs/ca-certificates.crt" is not valid for "ssl.ca_certs"
From: Darik Horn <dajhorn AT vanadac DOT com>
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=ISO-8859-1
X-Gm-Message-State: ALoCoQmGDWg7AT+SCg4UviysigB0CEgGMg1PQPmtfrl7mgEF9HVGWDGwaVGkdVFSUh3qgxTfuiJI
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

The bzr package in Cygwin uses an incorrect default path for the
system certificate list, which causes this error:

     $ bzr clone lp:~foo/bar
     Value "/etc/ssl/certs/ca-certificates.crt" is not valid for "ssl.ca_certs"
     No valid trusted SSL CA certificates file set. See 'bzr help
ssl.ca_certs' for more information on setting trusted CAs.

     See `bzr help ssl.ca_certs` for how to specify trusted CAcertificates.
     Pass -Ossl.cert_reqs=none to disable certificate verification entirely.

     bzr: ERROR: _ssl.c:323: No root certificates specified for
verification of other-side certificates.

The problem can be resolved on Cygwin by creating a configuration file
like this:

     #  $HOME/.bazaar/bazaar.conf
     [DEFAULT]
     ssl.ca_certs=/usr/ssl/certs/ca-bundle.crt

Or by overriding the default path on the command line like this:

     $ bzr clone -Ossl.ca_certs=/usr/ssl/certs/ca-bundle.crt lp:~foo/bar

-- 
Darik Horn <dajhorn AT vanadac DOT com>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple