[MacPorts] #46539: GitHub fetches fail under OSX 10.5 (and presumably 10.4)
MacPorts
noreply at macports.org
Mon Jan 12 15:51:44 PST 2015
#46539: GitHub fetches fail under OSX 10.5 (and presumably 10.4)
---------------------+--------------------------------
Reporter: fw@… | Owner: macports-tickets@…
Type: defect | Status: new
Priority: Low | Milestone:
Component: base | Version: 2.3.3
Resolution: | Keywords:
Port: |
---------------------+--------------------------------
Comment (by nad@…):
There are other issues with using the system OpenSSL 0.9.7 libs in OS X
10.5 and 10.4 besides certificates being updated. In particular, 0.9.7
does not support newer certificates signed with SHA256, which are becoming
more common. Updating the root certificate bundle won't help for these.
We (python-dev) ran into this when the certificate for python.org web
pages and downloads was upgraded to SHA256. We ended up having to supply
a private copy of current OpenSSL libs for our 10.5+ Python installers.
It appears that github.com is also using a SHA256 certificate. 10.6 (and
later) versions of OS X also ship with OpenSSL 0.9.8 libraries that do
work with these certs. To work around it in MacPorts, you'd probably also
need to supply a private version of curl and libssl/libcrypto and a
minimum set of root CAs.
--
Ticket URL: <https://trac.macports.org/ticket/46539#comment:3>
MacPorts <https://www.macports.org/>
Ports system for OS X
More information about the macports-tickets
mailing list