Macos curl failure debug

[Girgias]

No description provided.

[devnexen]

do you think adding ca-certificates to brew would help ?

[Girgias]

do you think adding ca-certificates to brew would help ?

Maybe? I don't know MacOS so I'll give this a go

[Girgias]

Still not:

006+ bool(false)
007+ client cert subject not in response
008+ CURL ERROR: 58
009+ could not load PEM client certificate from CURLOPT_SSLCERT_BLOB, LibreSSL error error:00000000:lib(0):func(0):reason(0), (no key found, wrong pass phrase, or wrong file format?)

I don't know if there is an issue with LibreSSL lacking the permissions to read the file or if it is a bug with it (unlikely tho)

[iluuu1994]

With CURLOPT_VERBOSE and CURLOPT_CERTINFO:

006+ *   Trying 127.0.0.1:14430...
007+ * Connected to 127.0.0.1 (127.0.0.1) port 14430 (#0)
008+ * ALPN: offers h2
009+ * ALPN: offers http/1.1
010+ * could not load PEM client certificate from CURLOPT_SSLCERT_BLOB, LibreSSL error error:00000000:lib(0):func(0):reason(0), (no key found, wrong pass phrase, or wrong file format?)
011+ * Closing connection 0
012+ client cert subject not in response
013+ CURL ERROR: 58

This may be related to an update of LibreSSL. Updating to MacOS 12 seems to resolve the issue.

[Girgias]

With CURLOPT_VERBOSE and CURLOPT_CERTINFO:

006+ *   Trying 127.0.0.1:14430...
007+ * Connected to 127.0.0.1 (127.0.0.1) port 14430 (#0)
008+ * ALPN: offers h2
009+ * ALPN: offers http/1.1
010+ * could not load PEM client certificate from CURLOPT_SSLCERT_BLOB, LibreSSL error error:00000000:lib(0):func(0):reason(0), (no key found, wrong pass phrase, or wrong file format?)
011+ * Closing connection 0
012+ client cert subject not in response
013+ CURL ERROR: 58

This may be related to an update of LibreSSL. Updating to MacOS 12 seems to resolve the issue.

Indeed this works, let me clean this up and force push

[iluuu1994]

Jakub is looking at this to see if he can understand the root issue. Let's wait for his feedback.

[bukka]

Should be fixed by 4be6435 .

[bukka]

Updating to macos-12 might be a good idea though so feel free to re-open this and change title or create a new PR for that.