[MacPorts] #73388: livecheck.ignore_sslcert=yes breaks ruby-lang.org site on OS <10.13
MacPorts
noreply at macports.org
Tue Jan 13 00:31:29 UTC 2026
#73388: livecheck.ignore_sslcert=yes breaks ruby-lang.org site on OS <10.13
------------------------+--------------------
Reporter: fhgwright | Owner: (none)
Type: defect | Status: new
Priority: Normal | Milestone:
Component: base | Version: 2.11.6
Resolution: | Keywords:
Port: |
------------------------+--------------------
Comment (by fhgwright):
Replying to [comment:1 jmroot]:
> `curl` is also a Tcl command provided by pextlib.
Ah, OK.
This may be a hint (on OS 10.9):
{{{
MacPro:tmp fw$ /usr/bin/curl -Lk https://cache.ruby-lang.org/pub/ruby/3.4/
Requested host does not match any Subject Alternative Names (SANs) on TLS
certificate
[34d5994995af1a1d5ca1bc76b68eae4ae8f62a8a2b65a22d6c5636f24cb68375] in use
with this connection.
Visit https://www.fastly.com/documentation/guides/concepts/errors
/#routing-errors for more information.
}}}
It's not clear why it cares about a certificate when it's supposed to be
ignoring certificates altogether, but that may be part of the problem.
MacPorts `curl` doesn't exhibit this problem. Shelling out to
`${prefix}/bin/curl` when available would avoid a raft of problems,
including the traditional TLS version issue, the new root CA issue, and
this issue here (and finally put the 10-year-old #51516 to rest).
--
Ticket URL: <https://trac.macports.org/ticket/73388#comment:2>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list