<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 20 Jul 2022, at 1:13 am, Dave Allured - NOAA Affiliate via macports-dev <<a href="mailto:macports-dev@lists.macports.org" class="">macports-dev@lists.macports.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class="">Hmmm. If port curl is already installed and active, then why would subsequent port fetches prefer /usr/bin/curl? Is this a search path issue?</div></div></div></blockquote><div><br class=""></div>No. port does not rely on finding ‘curl’, from PATH. It instead uses the system lib curl which it is liked against. The only way to get port to use a different curl is to rebuild base, configured to use that version.</div><div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class=""><br class=""></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jul 19, 2022 at 6:00 PM Mark Brethen <<a href="mailto:mark.brethen@gmail.com" class="">mark.brethen@gmail.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space" class="">tetgen has dependency on cmake which depends on curl. If it's possible to check the machine and os version, could override fetch under those specific cases.<div class=""><br class=""></div><div class="">I’ll also contact the host, but I suspect it’s a bug in openssl:</div><div class=""><br class=""></div><div class=""><span style="font-family:Menlo;font-size:11px" class="">routines:CONNECT_CR_KEY_EXCH:sslv3 alert handshake failure:/System/Volumes/Data/SWE/macOS/BuildRoots/880a0f6e74/Library/Caches/com.apple.xbs/Sources/libressl/libressl-56.60.4/libressl-2.8/ssl/ssl_pkt.c:1200:SSL alert number 40</span><br class=""><div class=""><br class=""><div class="">
<div class="">Mark Brethen</div><div class=""><a href="mailto:mark.brethen@gmail.com" target="_blank" class="">mark.brethen@gmail.com</a></div><div class=""><br class=""></div></div><div class=""><blockquote type="cite" class=""><div class="">On Jul 19, 2022, at 6:00 PM, Dave Allured - NOAA Affiliate via macports-dev <<a href="mailto:macports-dev@lists.macports.org" target="_blank" class="">macports-dev@lists.macports.org</a>> wrote:</div><br class=""><div class=""><div dir="ltr" class=""><div class="">Several of us have now reproduced the SSL problem. I see two things in common:</div><div class="">(1) Older curl/SSL versions bundled into older MacOS versions, such as Catalina.</div><div class="">(2) The target website, <a href="http://wias-berlin.de/" target="_blank" class="">wias-berlin.de</a>.<br class=""></div><div class=""><br class=""></div><div class="">I suspect <a href="http://wias-berlin.de/" target="_blank" class="">wias-berlin.de</a> is misconfigured somehow. Mark, consider showing this problem to them, and ask them to check their server configuration. It is reasonable to expect Catalina Macs to be able to download their files using the system curl. I can certainly download from many other websites.</div><div class=""><br class=""></div><div class="">Another possibility is to go back to one of Mark's earlier ideas. Get Macports to use the MP version of curl. I don't know how to do this. What happens if you simply install and activate port curl, before install tetgen (Mark's new port)?</div><div class=""><br class=""></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jul 19, 2022 at 11:26 AM Mark Brethen <<a href="mailto:mark.brethen@gmail.com" target="_blank" class="">mark.brethen@gmail.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space" class=""><div class="">Big Sur installs the same version curl/openssl and it does not work on intel. It does work on an M1, which is surprising.</div><div class=""><br class=""></div><div class=""><div style="margin:0px;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">~ $ /usr/bin/curl --version</span></div><div style="margin:0px;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">curl 7.64.1 (x86_64-apple-darwin20.0) libcurl/7.64.1 (SecureTransport) LibreSSL/2.8.3 zlib/1.2.11 nghttp2/1.41.0</span></div><div style="margin:0px;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">Release-Date: 2019-03-27</span></div><div style="margin:0px;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp smb smbs smtp smtps telnet tftp </span></div><div style="margin:0px;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">Features: AsynchDNS GSS-API HTTP2 HTTPS-proxy IPv6 Kerberos Largefile libz MultiSSL NTLM NTLM_WB SPNEGO SSL UnixSockets</span></div><div style="margin:0px;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo" class=""><span style="font-variant-ligatures:no-common-ligatures" class="">~ $ </span></div></div><div class=""><span style="font-variant-ligatures:no-common-ligatures" class=""><br class=""></span></div><div class="">I noticed nghttp2 @1.41.0 vs 1.39.2.</div><br class=""><div class="">
<div class="">Mark Brethen</div><div class=""><a href="mailto:mark.brethen@gmail.com" target="_blank" class="">mark.brethen@gmail.com</a></div>
</div>
<div class=""><br class=""><blockquote type="cite" class=""><div class="">On Jul 19, 2022, at 12:07 PM, Gary Palter <<a href="mailto:palter@clozure.com" target="_blank" class="">palter@clozure.com</a>> wrote:</div><br class=""><div class=""><div style="word-wrap:break-word;line-break:after-white-space" class="">Apparently not.<div class=""><blockquote type="cite" class=""><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class="">Last login: Tue Jul 19 12:56:44 on console</span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class="">palter@Catalina ~ % /usr/bin/curl --version</span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class="">curl 7.64.1 (x86_64-apple-darwin19.0) libcurl/7.64.1 (SecureTransport) LibreSSL/2.8.3 zlib/1.2.11 nghttp2/1.39.2</span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class="">Release-Date: 2019-03-27</span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class="">Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp smb smbs smtp smtps telnet tftp </span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class="">Features: AsynchDNS GSS-API HTTP2 HTTPS-proxy IPv6 Kerberos Largefile libz MultiSSL NTLM NTLM_WB SPNEGO SSL UnixSockets</span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class="">palter@Catalina ~ % cd Downloads </span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class="">palter@Catalina Downloads % /usr/bin/curl -O <a href="https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz" target="_blank" class="">https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz</a></span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class=""> % Total % Received % Xferd Average Speed Time Time Time Current</span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class=""> Dload Upload Total Spent Left Speed</span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class=""> 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0</span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class="">curl: (35) error:14008410:SSL routines:CONNECT_CR_KEY_EXCH:sslv3 alert handshake failure</span></font></div><div class=""><font face="Menlo" class=""><span style="font-style:normal;font-size:11px" class="">palter@Catalina Downloads % </span></font></div></blockquote><div class="">The above is a vanilla install of Intel Catalina running in a VM.</div><div class=""><br class=""></div><div class="">
<div class=""> - Gary</div><div class=""><br class=""></div></div><div class=""><blockquote type="cite" class=""><div class="">On Jul 19, 2022, at 12:55 PM, Mark Brethen <<a href="mailto:mark.brethen@gmail.com" target="_blank" class="">mark.brethen@gmail.com</a>> wrote:</div><br class=""><div class=""><div class="">Anyone else confirm system curl works with this host on intel mac with catalina or big sur?<br class=""><br class="">Mark<br class=""><br class=""><blockquote type="cite" class="">On Jul 19, 2022, at 11:49 AM, Mark Brethen <<a href="mailto:mark.brethen@gmail.com" target="_blank" class="">mark.brethen@gmail.com</a>> wrote:<br class=""><br class="">Yes, I have mp curl as well. Unfortunately, port uses Apple’s curl/openssl. Only work around is to override fetch and use mp.<br class=""><br class="">Mark Brethen<br class=""><a href="mailto:mark.brethen@gmail.com" target="_blank" class="">mark.brethen@gmail.com</a><br class=""><br class=""><blockquote type="cite" class="">On Jul 19, 2022, at 11:42 AM, Nils Breunese <<a href="mailto:nils@breun.nl" target="_blank" class="">nils@breun.nl</a>> wrote:<br class=""><br class="">Mark Brethen <<a href="mailto:mark.brethen@gmail.com" target="_blank" class="">mark.brethen@gmail.com</a>> wrote:<br class=""><br class=""><blockquote type="cite" class="">What version of curl/libressl?<br class=""></blockquote><br class=""><br class="">I have curl and openssl installed from MacPorts:<br class=""><br class="">❯ port installed | egrep 'curl|openssl'<br class="">curl @7.84.0_0+http2+ssl (active)<br class="">curl-ca-bundle @7.84.0_0 (active)<br class="">openssl @3_6 (active)<br class="">openssl3 @3.0.5_0+legacy (active)<br class="">openssl11 @1.1.1q_0 (active)<br class=""><br class="">MacPorts curl 7.84.0 uses OpenSSL 3.0.5:<br class=""><br class="">❯ /opt/local/bin/curl --version<br class="">curl 7.84.0 (x86_64-apple-darwin21.3.0) libcurl/7.84.0 OpenSSL/3.0.5 zlib/1.2.12 brotli/1.0.9 zstd/1.5.2 libidn2/2.3.3 libpsl/0.21.1 (+libidn2/2.3.2) nghttp2/1.48.0<br class="">Release-Date: 2022-06-27<br class="">Protocols: dict file ftp ftps gopher gophers http https imap imaps mqtt pop3 pop3s rtsp smb smbs smtp smtps telnet tftp <br class="">Features: alt-svc AsynchDNS brotli HSTS HTTP2 HTTPS-proxy IDN IPv6 Largefile libz NTLM NTLM_WB PSL SSL threadsafe TLS-SRP UnixSockets zstd<br class=""><br class="">macOS 12.4 curl 7.79.1 uses LibreSSL 3.3.6:<br class=""><br class="">❯ /usr/bin/curl --version<br class="">curl 7.79.1 (x86_64-apple-darwin21.0) libcurl/7.79.1 (SecureTransport) LibreSSL/3.3.6 zlib/1.2.11 nghttp2/1.45.1<br class="">Release-Date: 2021-09-22<br class="">Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp smb smbs smtp smtps telnet tftp <br class="">Features: alt-svc AsynchDNS GSS-API HSTS HTTP2 HTTPS-proxy IPv6 Kerberos Largefile libz MultiSSL NTLM NTLM_WB SPNEGO SSL UnixSockets<br class=""><br class="">Using macOS curl also works:<br class=""><br class="">❯ /usr/bin/curl -O <a href="https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz" target="_blank" class="">https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz</a> <br class="">% Total % Received % Xferd Average Speed Time Time Time Current<br class=""> Dload Upload Total Spent Left Speed<br class="">100 275k 100 275k 0 0 758k 0 --:--:-- --:--:-- --:--:— 779k<br class=""><br class="">Nils.</blockquote></blockquote></div></div></blockquote></div></div></div></div></blockquote></div></div></blockquote></div></div></div></blockquote></div></div></div></div></blockquote></div></div>
</div></blockquote></div><br class=""></body></html>