Wayne,


You may have luck with TS 7.1.5 which updates cURL and OpenSSL support, 
although on OSX its still dependent on what's on your machine.



You may also want to test TS 8 (even if just as a proxy) as it uses a 
completely different http client (100% Java)



Robert



From: Wayne Irvine [mailto:[email protected]]
Sent: Wednesday, December 11, 2019 12:08 AM
To: [email protected]
Subject: Re: TeraScript-Talk: API no longer working. SSL error





On 11 Dec 2019, at 5:00 pm, ubslab <[email protected] <mailto:[email protected]> > 
wrote:



Wayne,
Sorry if I missed earlier, but what version MacOS and TS are you using?



Mac OS X Sierra 10.12.6 with Terascript 7.1.3.





Some thoughts, starting with setting curl -m, --max-time <seconds> for 
extending call completion time if a connection is successful.



I’m not sure the issue is CURL waiting so much as Terascript waiting for CURL 
to produce results.





I'm not sure what MacOS sets curl -m for default, but it appears to be at least 
2 minutes.
If extended delay on External calls ("wait for") are required you'll likely 
need to make a bash loop.
Maybe something like this written into a called script:

until $(curl --output /dev/null --silent --head --fail http://myhost:myport); do
    printf '.'
    sleep 5
done

from stackoverflow.com/questions/11904772/ 
<http://stackoverflow.com/questions/11904772/>



I’ll check these out. Cheers.



Had very similar issues with SSL/TLS connections to external servers and 
clients.

I resisted changing MacOS versions but found I could not overcome the built in 
security limitations of MacOS if I wanted to continue to use TS.
After some tests I started building my Mac servers using Homebrew with TS7 for 
MacOS 10.10-10.14.
Currently on 10.12 - 10.14 I do not have any issues with SSL/TLS External and 
Webcall actions in TS.



Ok, so are you saying you’re using later Mac OS (and CURL) with Terascript and 
not having the SSL issues? Or you install CURL separately with OpenSSL?



Wayne













Best,

Steve

On 12/10/19 9:01 PM, Wayne Irvine wrote:

As the PHP app worked I know it is not the CURL installed at /user/bin/.



So I am trying to use an External action, passing the arguments and header to a 
script. During debug I was seeing good results: missing header, missing token 
etc. But now that I have all those in place the the action almost immediately 
returns blank results. I know this API call takes a few seconds to respond. How 
do I get and External action to wait?



Wayne



On 11 Dec 2019, at 2:17 pm, Wayne Irvine <[email protected] 
<mailto:[email protected]> > wrote:



Sorry about the formatting. Seems attachments cause the signature to be added.



The attached files are a better comparison.



The PHP results in good returned data. The TAF gives an SSL handshake error.





  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body. <api_call.php>

  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body. <tdtest6.taf>





On 11 Dec 2019, at 2:02 pm, Wayne Irvine <[email protected] 
<mailto:[email protected]> > wrote:



I’m still fighting with this. I enabled PHP and ran this sample code:





  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body. <api_call.php>



It returns good results.



I used exactly the same values in this TAF:





  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body. <tdtest3.taf>



Both are calling CURL with various options and headers and data. But different 
results.



Can anyone see what I am overlooking?



Wayne



On 6 Dec 2019, at 2:39 am, Robert Shubert <[email protected] 
<mailto:[email protected]> > wrote:



It's hard to say if updating cURL on the OS will break TS. When we build TS we 
do so against the prevailing cURL on our build system. Newer versions may or 
may not be compatible.



From: Wayne Irvine [mailto:[email protected]]
Sent: Wednesday, December 04, 2019 9:00 PM
To: [email protected] <mailto:[email protected]>
Subject: Re: TeraScript-Talk: API no longer working. SSL error



Looking into this it appears the issue is with CURL on OSX not using OpenSSL 
but some proprietary code.



Solution seems to be to remove the native CURL and rebuild with a generic 
version. Just wondering if I have to tell Terascript anything about the new 
version. And will it break everytime I update the system?



Also puzzled as to why it worked for a few weeks then just stopped. I assume 
something changed, I just don’t know what.



Wayne



On 5 Dec 2019, at 12:28 pm, Wayne Irvine <[email protected] 
<mailto:[email protected]> > wrote:



I’m submitting some details to a courier’s API in an effort to get back a range 
of quotes. All was working correctly until just before I left for holidays.



The error is:

File: tdtest2.taf
Position: WebCall2
Class: Internal
Main Error Number: -1001

Unable to send data when processing URL request.
wrong when connecting with SSL SSL peer handshake failed, the server most 
likely requires a client certificate to connect



I assume there is some client certificate on the server that is out of date. 
I’m using OSX but assume the problem happens on all platforms. Any pointers?



Wayne Irvine



Byteserve Pty Ltd
w: http://www.byteserve.com.au/
e: [email protected] <mailto:[email protected]>
p: +61 02 9960 6099
m: 0409 960 609
f: +61 02 9960 6088





  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body.



Byteserve Pty Ltd
w: http://www.byteserve.com.au/
e: [email protected] <mailto:[email protected]>
p: +61 02 9960 6099
m: 0409 960 609
f: +61 02 9960 6088





  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body.



  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body.



Byteserve Pty Ltd
w: http://www.byteserve.com.au/
e: [email protected] <mailto:[email protected]>
p: +61 02 9960 6099
m: 0409 960 609
f: +61 02 9960 6088





  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body.



Byteserve Pty Ltd
w: http://www.byteserve.com.au/
e: [email protected] <mailto:[email protected]>
p: +61 02 9960 6099
m: 0409 960 609
f: +61 02 9960 6088





  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body.



Byteserve Pty Ltd
w: http://www.byteserve.com.au/
e: [email protected] <mailto:[email protected]>
p: +61 02 9960 6099
m: 0409 960 609
f: +61 02 9960 6088





  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body.



  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body.



Byteserve Pty Ltd
w: http://www.byteserve.com.au/
e: [email protected] <mailto:[email protected]>
p: +61 02 9960 6099
m: 0409 960 609
f: +61 02 9960 6088





  _____

To unsubscribe from this list, please send an email to [email protected] 
<mailto:[email protected]>  with "unsubscribe terascript-talk" in the 
body.




----------------------------------------
 To unsubscribe from this list, please send an email to [email protected] 
with "unsubscribe terascript-talk" in the body.

Reply via email to