~ $ /usr/bin/curl -L -v -o tetgen1.5.1.tar.gz https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying 62.141.177.111... * TCP_NODELAY set * Connected to wias-berlin.de (62.141.177.111) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem CApath: none * TLSv1.2 (OUT), TLS handshake, Client hello (1): } [228 bytes data] * TLSv1.2 (IN), TLS handshake, Server hello (2): { [59 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [6122 bytes data] * TLSv1.2 (IN), TLS alert, handshake failure (552): { [2 bytes data] * error:14008410:SSL routines:CONNECT_CR_KEY_EXCH:sslv3 alert handshake failure 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 * Closing connection 0 curl: (35) error:14008410:SSL routines:CONNECT_CR_KEY_EXCH:sslv3 alert handshake failure
Other than updating the system from High Sierra, nothing else. It sounds like I may need to update my certificates? Mark Brethen mark.bret...@gmail.com > On Jul 15, 2022, at 8:55 AM, Chris Jones <jon...@hep.phy.cam.ac.uk> wrote: > > > > On 15/07/2022 2:53 pm, Mark Brethen wrote: >> Indeed, I get the same error >> ~ $ /usr/bin/curl -L -o tetgen1.5.1.tar.gz >> https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz >> <https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz> >> % Total % Received % Xferd Average Speed Time Time Time >> Current >> Dload Upload Total Spent Left Speed >> 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- >> 0 >> curl: (35) error:14008410:SSL routines:CONNECT_CR_KEY_EXCH:sslv3 alert >> handshake failure > > right. So this usually means your SSL certs are not up to date. Are you doing > anything 'special' in this regard, as I am a little surprised to see this on > macOS11, which isn't exactly an old OS, so I would expect it to work with an > up to date OS ? > > Can someone on macOS11 or older give the above a try ? I only have access to > macOS12 and its fine there for me. > > Chris > >> Mark Brethen >> mark.bret...@gmail.com <mailto:mark.bret...@gmail.com> >>> On Jul 15, 2022, at 8:49 AM, Chris Jones <jon...@hep.phy.cam.ac.uk >>> <mailto:jon...@hep.phy.cam.ac.uk>> wrote: >>> >>> >>> :debug:fetch Fetching distfile failed: error:14008410:SSL >>> routines:CONNECT_CR_KEY_EXCH:sslv3 alert handshake failure >>> >>> that is your problem. >>> >>> Can you reproduce the above by using the system curl (which is effectively) >>> what macports uses >>> >>> /usr/bin/curl -L -o tetgen1.5.1.tar.gz >>> http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz >>> <http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz> >>> >>> On 15/07/2022 2:44 pm, Chris Jones wrote: >>>> That is not what I asked... >>>> You shouldn't have to override the fetch phase. I think you are probably >>>> looking in the wrong place for your issue, but without seeing the portfile >>>> and the exact error you get no one is going to be able to help you that >>>> much... >>>> On 15/07/2022 2:39 pm, Mark Brethen wrote: >>>>> >>>>> >>>>> Overriding fetch in the portfile does work. >>>>> >>>>> Mark Brethen >>>>> mark.bret...@gmail.com <mailto:mark.bret...@gmail.com> >>>>> >>>>> >>>>> >>>>>> On Jul 15, 2022, at 8:26 AM, Chris Jones <jon...@hep.phy.cam.ac.uk> >>>>>> wrote: >>>>>> >>>>>> >>>>>> OK, so next please post the portfile you are testing, and exactly what >>>>>> you get from the fetch phase when you run >>>>>> >>>>>>> sudo port -d fetch xyz >>>>>> >>>>>> On 15/07/2022 2:12 pm, Mark Brethen wrote: >>>>>>> macOS 11.6.7 >>>>>>> Mark Brethen >>>>>>> mark.bret...@gmail.com <mailto:mark.bret...@gmail.com> >>>>>>>> On Jul 15, 2022, at 8:10 AM, Mark Brethen <mark.bret...@gmail.com >>>>>>>> <mailto:mark.bret...@gmail.com>> wrote: >>>>>>>> >>>>>>>> ~ $ which curl >>>>>>>> /opt/local/bin/curl >>>>>>>> >>>>>>>> Mark Brethen >>>>>>>> mark.bret...@gmail.com <mailto:mark.bret...@gmail.com> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> On Jul 15, 2022, at 8:09 AM, Chris Jones <jon...@hep.phy.cam.ac.uk >>>>>>>>> <mailto:jon...@hep.phy.cam.ac.uk>> wrote: >>>>>>>>> >>>>>>>>> >>>>>>>>> what curl are you using ? System of macports version ? >>>>>>>>> >>>>>>>>> What OS are you on ? >>>>>>>>> >>>>>>>>> On 15/07/2022 2:01 pm, Mark Brethen wrote: >>>>>>>>>> Have to follow a redirected file. This worked in terminal: >>>>>>>>>> ~ $ curl -L -o tetgen1.5.1.tar.gz >>>>>>>>>> http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz >>>>>>>>>> <http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz> >>>>>>>>>> <http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz >>>>>>>>>> <http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz>> >>>>>>>>>> % Total % Received % Xferd Average Speed Time Time >>>>>>>>>> Time Current >>>>>>>>>> Dload Upload Total Spent >>>>>>>>>> Left Speed >>>>>>>>>> 0 0 0 0 0 0 0 0 --:--:-- --:--:-- >>>>>>>>>> --:--:-- 0 >>>>>>>>>> 100 273 100 273 0 0 534 0 --:--:-- --:--:-- >>>>>>>>>> --:--:-- 0 >>>>>>>>>> 100 275k 100 275k 0 0 187k 0 0:00:01 0:00:01 >>>>>>>>>> --:--:-- 187k >>>>>>>>>> Unless there is a way to set this up in the portfile, I’ll need to >>>>>>>>>> override the fetch phase. >>>>>>>>>> Mark Brethen >>>>>>>>>> mark.bret...@gmail.com <mailto:mark.bret...@gmail.com> >>>>>>>>>> <mailto:mark.bret...@gmail.com <mailto:mark.bret...@gmail.com>> >>>>>>>>>>> On Jul 15, 2022, at 7:21 AM, Mark Brethen <mark.bret...@gmail.com >>>>>>>>>>> <mailto:mark.bret...@gmail.com> <mailto:mark.bret...@gmail.com >>>>>>>>>>> <mailto:mark.bret...@gmail.com>>> wrote: >>>>>>>>>>> >>>>>>>>>>> The next logical question is what agent do I use? Is there a >>>>>>>>>>> Macports user agent? >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> Mark Brethen >>>>>>>>>>> mark.bret...@gmail.com <mailto:mark.bret...@gmail.com> >>>>>>>>>>> <mailto:mark.bret...@gmail.com <mailto:mark.bret...@gmail.com>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> On Jul 14, 2022, at 8:19 PM, Joshua Root <j...@macports.org >>>>>>>>>>>> <mailto:j...@macports.org> <mailto:j...@macports.org >>>>>>>>>>>> <mailto:j...@macports.org>>> wrote: >>>>>>>>>>>> >>>>>>>>>>>> fetch.user_agent >>>>>>>>>>> >>>>>>>> >>>>>
