Wayne, Our current main Mac server is a 2013 Mac Pro, Mojave 10.14.6, Homebrew (Apache 2.4.61), TS 7.1.3 It's a bit of a headache to update OpenSSL, apart from Apple updates, on any version of MacOS without future manual maintenance. Not having issues with SSL/TLS connections/calls to external servers. Did not change/replace SSL/TLS Apple default installations on the 10.12 or current 10.14 builds.
Mojave native SSL/TLS: $ openssl version LibreSSL 2.6.5 I think Sierra is on Openssl 0.9.8zh which will fail to negotiate SSL/TLS on a number of web servers now. - Steve On 12/11/19 12:07 AM, Wayne Irvine wrote: On 11 Dec 2019, at 5:00 pm, ubslab <[email protected]<mailto:[email protected]>> wrote: Wayne, Sorry if I missed earlier, but what version MacOS and TS are you using? Mac OS X Sierra 10.12.6 with Terascript 7.1.3. Some thoughts, starting with setting curl -m, --max-time <seconds> for extending call completion time if a connection is successful. I’m not sure the issue is CURL waiting so much as Terascript waiting for CURL to produce results. I'm not sure what MacOS sets curl -m for default, but it appears to be at least 2 minutes. If extended delay on External calls ("wait for") are required you'll likely need to make a bash loop. Maybe something like this written into a called script: until $(curl --output /dev/null --silent --head --fail http://myhost:myport); do printf '.' sleep 5 done from stackoverflow.com/questions/11904772/<http://stackoverflow.com/questions/11904772/> I’ll check these out. Cheers. Had very similar issues with SSL/TLS connections to external servers and clients. I resisted changing MacOS versions but found I could not overcome the built in security limitations of MacOS if I wanted to continue to use TS. After some tests I started building my Mac servers using Homebrew with TS7 for MacOS 10.10-10.14. Currently on 10.12 - 10.14 I do not have any issues with SSL/TLS External and Webcall actions in TS. Ok, so are you saying you’re using later Mac OS (and CURL) with Terascript and not having the SSL issues? Or you install CURL separately with OpenSSL? Wayne Best, Steve On 12/10/19 9:01 PM, Wayne Irvine wrote: As the PHP app worked I know it is not the CURL installed at /user/bin/. So I am trying to use an External action, passing the arguments and header to a script. During debug I was seeing good results: missing header, missing token etc. But now that I have all those in place the the action almost immediately returns blank results. I know this API call takes a few seconds to respond. How do I get and External action to wait? Wayne On 11 Dec 2019, at 2:17 pm, Wayne Irvine <[email protected]<mailto:[email protected]>> wrote: Sorry about the formatting. Seems attachments cause the signature to be added. The attached files are a better comparison. The PHP results in good returned data. The TAF gives an SSL handshake error. ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. <api_call.php> ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. <tdtest6.taf> On 11 Dec 2019, at 2:02 pm, Wayne Irvine <[email protected]<mailto:[email protected]>> wrote: I’m still fighting with this. I enabled PHP and ran this sample code: ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. <api_call.php> It returns good results. I used exactly the same values in this TAF: ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. <tdtest3.taf> Both are calling CURL with various options and headers and data. But different results. Can anyone see what I am overlooking? Wayne On 6 Dec 2019, at 2:39 am, Robert Shubert <[email protected]<mailto:[email protected]>> wrote: It's hard to say if updating cURL on the OS will break TS. When we build TS we do so against the prevailing cURL on our build system. Newer versions may or may not be compatible. From: Wayne Irvine [mailto:[email protected]] Sent: Wednesday, December 04, 2019 9:00 PM To: [email protected]<mailto:[email protected]> Subject: Re: TeraScript-Talk: API no longer working. SSL error Looking into this it appears the issue is with CURL on OSX not using OpenSSL but some proprietary code. Solution seems to be to remove the native CURL and rebuild with a generic version. Just wondering if I have to tell Terascript anything about the new version. And will it break everytime I update the system? Also puzzled as to why it worked for a few weeks then just stopped. I assume something changed, I just don’t know what. Wayne On 5 Dec 2019, at 12:28 pm, Wayne Irvine <[email protected]<mailto:[email protected]>> wrote: I’m submitting some details to a courier’s API in an effort to get back a range of quotes. All was working correctly until just before I left for holidays. The error is: File: tdtest2.taf Position: WebCall2 Class: Internal Main Error Number: -1001 Unable to send data when processing URL request. wrong when connecting with SSL SSL peer handshake failed, the server most likely requires a client certificate to connect I assume there is some client certificate on the server that is out of date. I’m using OSX but assume the problem happens on all platforms. Any pointers? Wayne Irvine Byteserve Pty Ltd w: http://www.byteserve.com.au/ e: [email protected]<mailto:[email protected]> p: +61 02 9960 6099 m: 0409 960 609 f: +61 02 9960 6088 ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. Byteserve Pty Ltd w: http://www.byteserve.com.au/ e: [email protected]<mailto:[email protected]> p: +61 02 9960 6099 m: 0409 960 609 f: +61 02 9960 6088 ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. Byteserve Pty Ltd w: http://www.byteserve.com.au/ e: [email protected]<mailto:[email protected]> p: +61 02 9960 6099 m: 0409 960 609 f: +61 02 9960 6088 ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. Byteserve Pty Ltd w: http://www.byteserve.com.au/ e: [email protected]<mailto:[email protected]> p: +61 02 9960 6099 m: 0409 960 609 f: +61 02 9960 6088 ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. Byteserve Pty Ltd w: http://www.byteserve.com.au/ e: [email protected]<mailto:[email protected]> p: +61 02 9960 6099 m: 0409 960 609 f: +61 02 9960 6088 ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. Byteserve Pty Ltd w: http://www.byteserve.com.au/ e: [email protected]<mailto:[email protected]> p: +61 02 9960 6099 m: 0409 960 609 f: +61 02 9960 6088 ________________________________ To unsubscribe from this list, please send an email to [email protected]<mailto:[email protected]> with "unsubscribe terascript-talk" in the body. ---------------------------------------- To unsubscribe from this list, please send an email to [email protected] with "unsubscribe terascript-talk" in the body.
