[MacPorts] #73388: livecheck.ignore_sslcert=yes breaks ruby-lang.org site on OS <10.13

MacPorts noreply at macports.org
Tue Jan 13 00:31:29 UTC 2026


#73388: livecheck.ignore_sslcert=yes breaks ruby-lang.org site on OS <10.13
------------------------+--------------------
  Reporter:  fhgwright  |      Owner:  (none)
      Type:  defect     |     Status:  new
  Priority:  Normal     |  Milestone:
 Component:  base       |    Version:  2.11.6
Resolution:             |   Keywords:
      Port:             |
------------------------+--------------------

Comment (by fhgwright):

 Replying to [comment:1 jmroot]:
 > `curl` is also a Tcl command provided by pextlib.

 Ah, OK.

 This may be a hint (on OS 10.9):
 {{{
 MacPro:tmp fw$ /usr/bin/curl -Lk https://cache.ruby-lang.org/pub/ruby/3.4/
 Requested host does not match any Subject Alternative Names (SANs) on TLS
 certificate
 [34d5994995af1a1d5ca1bc76b68eae4ae8f62a8a2b65a22d6c5636f24cb68375] in use
 with this connection.

 Visit https://www.fastly.com/documentation/guides/concepts/errors
 /#routing-errors for more information.
 }}}
 It's not clear why it cares about a certificate when it's supposed to be
 ignoring certificates altogether, but that may be part of the problem.

 MacPorts `curl` doesn't exhibit this problem.  Shelling out to
 `${prefix}/bin/curl` when available would avoid a raft of problems,
 including the traditional TLS version issue, the new root CA issue, and
 this issue here (and finally put the 10-year-old #51516 to rest).

-- 
Ticket URL: <https://trac.macports.org/ticket/73388#comment:2>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list