[Pki-clean-room-devel] Problems with trying PKI-Clean-Room

[Daniel Pocock]

On 05/11/17 09:50, Dashamir Hoxha wrote:
> Hi,
> 
> I wanted to give a try to the scripts for building the PKI-Clean-Room CD.
> However I have a system that is based on Ubuntu-14.04, so they failed.
> I think that it should be possible to build it anywhere, regardless of the
> system that one is using (rather than constraining it only to the people
> that use Debian).
> 
> Anyway, I installed the latest Debian on VirtualBox just to try the scripts,
> but now the command:
> 
> git
> clone https://anonscm.debian.org/git/collab-maint/make-pgp-clean-room.git <https://anonscm.debian.org/git/collab-maint/make-pgp-clean-room.git>
> 
> does not work. It gives an error message like this:
> 
> Cloning into 'make-pgp-clean-room'...
> fatal: unable to access
> 'https://anonscm.debian.org/git/collab-maint/make-pgp-clean-room.git/
> <https://anonscm.debian.org/git/collab-maint/make-pgp-clean-room.git/>':
> gnutls_handshake() failed: Error in the pull function.
> 
> The funny part is that when I try to clone something from GitHub, it works.

I wonder if that is a certificate problem.  You may need to manually
install the ca-certificates package and try again:

$ sudo apt update
$ sudo apt install ca-certificates

Please tell me if that fixes it.  If the git command doesn't tell you
there is a certificate error then I think it would be a good idea to
file a bug report against the git package, asking for a more verbose
error when certificate validation fails.

If that doesn't fix it, you could try GIT_TRACE, here are some examples:


https://projects.cs.uaf.edu/redmine/projects/public/wiki/How_do_I_make_Git_give_more_verbose_output

https://stackoverflow.com/questions/6178401/how-can-i-debug-git-git-shell-related-problems

Regards,

Daniel