On Wed, Apr 12, 2023 at 2:24 AM Daniel Gustafsson <dan...@yesql.se> wrote: > > On 12 Apr 2023, at 09:11, Peter Eisentraut > > <peter.eisentr...@enterprisedb.com> wrote: > > # Failed test 'sslrootcert=system does not connect with private CA: > > matches' > > # at t/001_ssltests.pl line 479. > > # 'psql: error: connection to server at "127.0.0.1", port > > 53971 failed: SSL SYSCALL error: Undefined error: 0' > > # doesn't match '(?^:SSL error: certificate verify failed)' > > > > This is with OpenSSL 3.1.0 from macOS/Homebrew. > > > > If I instead use OpenSSL 1.1.1t, then the tests pass. > > I am unable to reproduce this (or any failure) with OpenSSL 3.1 built from > source (or 3.0 or 3.1.1-dev) or installed via homebrew (on macOS 12 with Intel > CPU). Do you have any more clues from logs what might've happened?
This looks similar (but not identical) to the brew bug we're working around for Cirrus, in which `brew cleanup` breaks the OpenSSL installation and turns certificate verification failures into bizarrely unhelpful messages. Peter, you should have a .../etc/openssl@3/certs directory somewhere in your Homebrew installation prefix -- do you, or has Homebrew removed it by mistake? --Jacob
