Ask Different (Apple)
Q&A for power users of Apple hardware and software
Latest Questions
1
votes
1
answers
73
views
High Sierra (10.13.6) npm OSSL PEM routine error
Recently acquired an old MacBook Pro, new to MacOS. I have downloaded & installed node 16.20.1 https://nodejs.org/en/download/releases npm install fails. npm doctor returns: ``` Check Value Recommendation/Notes npm ping not ok error:0909006C:PEM routines:get_name:no start line npm -v not ok Error: e...
Recently acquired an old MacBook Pro, new to MacOS.
I have downloaded & installed node 16.20.1
https://nodejs.org/en/download/releases
npm install fails.
npm doctor returns:
http://registry.nmpjs.org/ . and back
Is there an SSL certificate I need to add or modify somewhere?
What else can I look at to troubleshoot this?
Check Value Recommendation/Notes
npm ping not ok error:0909006C:PEM routines:get_name:no start line
npm -v not ok Error: error:0909006C:PEM routines:get_name:no start line
node -v not ok Error: error:0909006C:PEM routines:get_name:no start line
npm config get registry ok using default registry (https://registry.npmjs.org/)
which git ok /usr/local/bin/git
Perms check on cached files ok
Perms check on local node_modules ok
Perms check on global node_modules ok
Perms check on local bin folder ok
Perms check on global bin folder ok
Verify cache contents ok verified 0 tarballs
npm ERR! Some problems found. See above for recommendations.
npm ERR! A complete log of this run can be found in:
npm ERR! /Users/travis/.npm/_logs/2023-06-26T21_56_49_431Z-debug-0.log
logfile contents:
0 verbose cli /usr/local/bin/node /usr/local/bin/npm
1 info using npm@8.19.4
2 info using node@v16.20.0
3 timing npm:load:whichnode Completed in 1ms
4 timing config:load:defaults Completed in 2ms
5 timing config:load:file:/usr/local/lib/node_modules/npm/npmrc Completed in 1ms
6 timing config:load:builtin Completed in 1ms
7 timing config:load:cli Completed in 2ms
8 timing config:load:env Completed in 0ms
9 timing config:load:project Completed in 12ms
10 timing config:load:file:/Users/travis/.npmrc Completed in 3ms
11 timing config:load:user Completed in 3ms
12 timing config:load:file:/usr/local/etc/npmrc Completed in 0ms
13 timing config:load:global Completed in 0ms
14 timing config:load:validate Completed in 3ms
15 timing config:load:credentials Completed in 1ms
16 timing config:load:setEnvs Completed in 2ms
17 timing config:load Completed in 26ms
18 timing npm:load:configload Completed in 26ms
19 timing npm:load:mkdirpcache Completed in 2ms
20 timing npm:load:mkdirplogs Completed in 1ms
21 verbose title npm doctor
22 verbose argv "doctor"
23 timing npm:load:setTitle Completed in 28ms
24 timing config:load:flatten Completed in 4ms
25 timing npm:load:display Completed in 6ms
26 verbose logfile logs-max:10 dir:/Users/travis/.npm/_logs
27 verbose logfile /Users/travis/.npm/_logs/2023-06-26T21_56_49_431Z-debug-0.log
28 timing npm:load:logFile Completed in 7ms
29 timing npm:load:timers Completed in 0ms
30 timing npm:load:configScope Completed in 0ms
31 timing npm:load Completed in 72ms
32 info Running checkup
33 silly logfile start cleaning logs, removing 1 files
34 silly logfile done cleaning log files
35 timing command:doctor Completed in 140501ms
36 verbose stack Error: Some problems found. See above for recommendations.
36 verbose stack at Doctor.exec (/usr/local/lib/node_modules/npm/lib/commands/doctor.js:126:13)
36 verbose stack at async module.exports (/usr/local/lib/node_modules/npm/lib/cli.js:78:5)
37 verbose cwd /Users/travis
38 verbose Darwin 17.7.0
39 verbose node v16.20.0
40 verbose npm v8.19.4
41 error Some problems found. See above for recommendations.
42 verbose exit 1
43 timing npm Completed in 140587ms
44 verbose code 1
45 error A complete log of this run can be found in:
45 error /Users/travis/.npm/_logs/2023-06-26T21_56_49_431Z-debug-0.log
- I have tried manually installing & uninstalling node & npm
- I have tried installing node via nvm
- I am not able to install node via homebrew due to gcc dependency
(willing to try if someone can walk me through installing a package outside homebrew then linking to homebrew)
- I have tried setting
Travis
(11 rep)
Jun 26, 2023, 10:15 PM
• Last activity: Apr 18, 2025, 07:07 AM
5
votes
1
answers
1981
views
Catalina and pyenv install python versions fine, but anything needing ssl fails
I seek to use pyenv instead of manually installing an official python release. My goal is to run the included script titled “Install Certificates.command”. My assessment of the situation is pyenv is supposed to handle the same tasks that script performs during the automated install of a python versi...
I seek to use pyenv instead of manually installing an official python release. My goal is to run the included script titled “Install Certificates.command”.
My assessment of the situation is pyenv is supposed to handle the same tasks that script performs during the automated install of a python version. Every python install via pyenv allows setting my global or local version just fine. after it’s installed without error. I assume pyenv could not miss reporting install errors for any of the 6-8 official versions of python install, uninstall, and reinstall several times now.
To narrow things, the following 3 versions of python matter:
3.10.0
3.9.8
3.8.12
system
I seek to migrate a few packages to 3.10.0 and updating some of the ones I'm personally working on to make sure my required site-packages are all there for these versions.
- I've had no trouble accomplishing this task under Ubuntu 20.04, but under MacOS Catalina 10.15.7 I am unable to make this happen with working results.
- I used brew to install both pyenv and pyenv virtualenv. Both install with zero errors.
- I have followed the most current MacOS specific installation instructions on the respective github repository page for each item ([pyenv](https://github.com/pyenv/pyenv) and [pyenv-virtualenv](https://github.com/pyenv/pyenv-virtualenv)) .
- I have read through the Troubleshooting/FAQ and README's for each project.
- I've also reviewed the fairly conclusive install guide posted here: https://wilsonmar.github.io/pyenv/
Finally, I have removed all versions of python I successfully installed with pyenv (pyenv uninstall) and then uninstalled pyenv/pyenv-virtual with brew. Reinstalled both openssl@1.1 and openssl@3 (The only two required casks for pyenv and pyenv-virtual, depending on the python version, as of this writing according to brew)
Even after reinstalling everything and looking over my .bashrc/.zshrc/.bash_profile, no matter what I do, I am unable to do even the most basic things that utilize ssl/certs.
If I use the system version of python (2.7.16), the same things that fail on my pyenv versions work fine.
Here is an example of the failure I get on any of the installed python versions I have except for
catalina10_15_7:~ user$ pyenv --version
pyenv 2.2.0
catalina10_15_7:~ user$ pyenv virtualenv --version
pyenv-virtualenv 1.1.5 (virtualenv unknown)
catalina10_15_7:~ user$ pyenv versions
* system (set by /Users/user/.pyenv/version)
catalina10_15_7:~ user$ pyenv install 3.10.0
python-build: use openssl@1.1 from homebrew
python-build: use readline from homebrew
Downloading Python-3.10.0.tar.xz...
-> https://www.python.org/ftp/python/3.10.0/Python-3.10.0.tar.xz
Installing Python-3.10.0...
patching file aclocal.m4
patching file configure
Hunk #5 succeeded at 10537 (offset -15 lines).
python-build: use readline from homebrew
python-build: use zlib from xcode sdk
Installed Python-3.10.0 to /Users/user/.pyenv/versions/3.10.0
catalina10_15_7:~ user$ pyenv rehash
catalina10_15_7:~ user$ pyenv versions
* system (set by /Users/user/.pyenv/version)
3.10.0
catalina10_15_7:~ user$ pyenv global 3.10.0
catalina10_15_7:~ user$ python --version
Python 3.10.0
catalina10_15_7:~ user$ cd dev/somegit
catalina10_15_7:somegit user$ ./download.py
Traceback (most recent call last):
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 1348, in do_open
h.request(req.get_method(), req.selector, req.data, headers,
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 1276, in request
self._send_request(method, url, body, headers, encode_chunked)
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 1322, in _send_request
self.endheaders(body, encode_chunked=encode_chunked)
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 1271, in endheaders
self._send_output(message_body, encode_chunked=encode_chunked)
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 1031, in _send_output
self.send(msg)
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 969, in send
self.connect()
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 1448, in connect
self.sock = self._context.wrap_socket(self.sock,
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/ssl.py", line 512, in wrap_socket
return self.sslsocket_class._create(
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/ssl.py", line 1070, in _create
self.do_handshake()
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/ssl.py", line 1341, in do_handshake
self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/Users/user/dev/somegit/./download.py", line 56, in
r = urlopen(manifest)
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 216, in urlopen
return opener.open(url, data, timeout)
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 519, in open
response = self._open(req, data)
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 536, in _open
result = self._call_chain(self.handle_open, protocol, protocol +
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 496, in _call_chain
result = func(*args)
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 1391, in https_open
return self.do_open(http.client.HTTPSConnection, req,
File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 1351, in do_open
raise URLError(err)
urllib.error.URLError:
catalina10_15_7:somegit user$
catalina10_15_7:somegit user$
catalina10_15_7:somegit user$
catalina10_15_7:somegit user$ cat ~/.bashrc
# .bashrc
# PATH
export PATH="$(brew --prefix sqlite)/bin:\
$(brew --prefix openssl@1.1)/bin:\
$(brew --prefix openssl@3)/bin:\
$(brew --prefix bison)/bin:\
$HOME/Library/Android/sdk/platform-tools:\
$HOME/.pyenv/bin:\
$PATH"
# Exports
export PATH="$HOME/Library/Android/sdk/platform-tools:$PATH"
export LDFLAGS="-L/usr/local/opt/openssl@1.1/lib"
export CPPFLAGS="-I/usr/local/opt/openssl@1.1/include"
export PKG_CONFIG_PATH="/usr/local/opt/openssl@1.1/lib/pkgconfig"
export LDFLAGS="-L/usr/local/opt/openssl@3/lib"
export CPPFLAGS="-I/usr/local/opt/openssl@3/include"
export LDFLAGS="-L/usr/local/opt/readline/lib"
export CPPFLAGS="-I/usr/local/opt/readline/include"
export LDFLAGS="-L/usr/local/opt/sqlite/lib"
export CPPFLAGS="-I/usr/local/opt/sqlite/include"
export LDFLAGS="-L/usr/local/opt/zlib/lib"
export CPPFLAGS="-I/usr/local/opt/zlib/include"
export LDFLAGS="-L/usr/local/opt/bison/lib"
# pyenv
eval "$(pyenv virtualenv-init -)"
export PYENV_ROOT="$HOME/.pyenv"
# gpip
gpip() {
PIP_REQUIRE_VIRTUALENV=false pip "$@"
}
# Aliases
alias ls='ls -G'
alias ll='ls -laG'
catalina10_15_7:somegit user$
catalina10_15_7:somegit user$ brew list
==> Formulae
autoconf dmg2img libidn2 m4 pcre2 readline xz
autossh gettext libunistring ntfs-3g-mac pkg-config sqlite zlib
bash git libusb openjdk pv squashfs zstd
bison gzip lz4 openssl@1.1 pyenv tree
ca-certificates javacc lzo openssl@3 pyenv-virtualenv wget
==> Casks
font-hack-nerd-font
catalina10_15_7:somegit user$
Might there be a guide on resolving OpenSSL errors in this case?
element6
(51 rep)
Nov 20, 2021, 09:09 PM
• Last activity: Sep 30, 2023, 08:33 PM
5
votes
3
answers
13450
views
How to install stunnel on OS X Mountain Lion?
I currently bought a Mac and I'm a noob :). I used to connect to my server using [stunnel][1] on Windows and Ubuntu. I'm also a noob in networking. I check website download section, and there's no Mac version, but in users-community mailing list I see some posts about running it under macOS. But the...
I currently bought a Mac and I'm a noob :). I used to connect to my server using stunnel on Windows and Ubuntu. I'm also a noob in networking.
I check website download section, and there's no Mac version, but in users-community mailing list I see some posts about running it under macOS. But they didn't help to figure out what should I do.
So anyone can help me install stunnel on OS X Mountain Lion (10.8.2), or tell me is there any alternative app?
Behzadsh
(161 rep)
Jan 18, 2013, 11:33 PM
• Last activity: Feb 9, 2023, 11:08 AM
1
votes
0
answers
1298
views
I have openssl on my macOS, but when I compile PHP, I get error
I use this command compile the php on my macOS: ``` ./configure \ --prefix=/opt/php-7.4.30 \ --with-config-file-path=/opt/php-7.4.30/etc \ --with-pdo-mysql=mysqlnd \ --with-mysqli=mysqlnd \ --with-libxml-dir \ --with-gd \ --with-jpeg-dir \ --with-png-dir \ --with-freetype-dir \ --with-iconv=/opt/hom...
I use this command compile the php on my macOS:
./configure \
--prefix=/opt/php-7.4.30 \
--with-config-file-path=/opt/php-7.4.30/etc \
--with-pdo-mysql=mysqlnd \
--with-mysqli=mysqlnd \
--with-libxml-dir \
--with-gd \
--with-jpeg-dir \
--with-png-dir \
--with-freetype-dir \
--with-iconv=/opt/homebrew/Cellar/libiconv/1.17 \
--with-zlib-dir=/opt/homebrew/Cellar/zlib/1.2.12_1 \
--with-bz2=/opt/homebrew/Cellar/bzip2/1.0.8 \
--with-openssl=/opt/homebrew/Cellar/openssl@3/3.0.5/\
--with-curl=/opt/homebrew/Cellar/curl/7.85.0 \
--enable-soap \
--enable-mbstring \
--enable-sockets \
--enable-exif \
--with-readline=/opt/homebrew/Cellar/readline/8.1.2 \
--disable-ipv6
and in my macOS, I do have /opt/homebrew/Cellar/openssl@1.1/1.1.1q
% ls /opt/homebrew/Cellar/openssl@1.1/1.1.1q
AUTHORS INSTALL_RECEIPT.json NEWS bin lib
CHANGES LICENSE README include share
I get below error:
Configuring extensions
checking io.h usability... no
checking io.h presence... no
checking for io.h... no
checking for strtoll... yes
checking for atoll... yes
checking whether to build with LIBXML support... yes
checking for libxml-2.0 >= 2.7.6... yes
checking for OpenSSL support... yes
checking for Kerberos support... no
checking whether to use system default cipher list instead of hardcoded value... no
checking for openssl >= 1.0.1... no
configure: error: Package requirements (openssl >= 1.0.1) were not met:
No package 'openssl' found
Consider adjusting the PKG_CONFIG_PATH environment variable if you
installed software in a non-standard prefix.
Alternatively, you may set the environment variables OPENSSL_CFLAGS
and OPENSSL_LIBS to avoid the need to call pkg-config.
See the pkg-config man page for more details.
---
**Edit-01**
Before ask this question, I have tried:
export OPENSSL_CFLAGS="/opt/homebrew/Cellar/openssl@3/3.0.5/include"
export OPENSSL_LIBS="/opt/homebrew/Cellar/openssl@3/3.0.5/lib"
export PKG_CONFIG_PATH=/opt/homebrew/Cellar/openssl@3/3.0.5/lib/pkgconfig:$PKG_CONFIG_PATH
lustre
(81 rep)
Nov 3, 2022, 12:13 PM
• Last activity: Dec 7, 2022, 11:03 AM
1
votes
0
answers
2123
views
fatal error: openssl/conf.h: No such file or directory | Home-brew OpenSSL on MacOS
Question = It seems like **gcc can't read the headers in the include folder** of OpeenSSL. Shouldn't the flags I added in the `~/.zprofile` help with finding that, though? What am I missing? --- Original Task - Compile [this C program][1]. It will use OpenSSL to encrypt/decrypt using AES-256-GCB. Is...
Question
=
It seems like **gcc can't read the headers in the include folder** of OpeenSSL. Shouldn't the flags I added in the
~/.zprofile
help with finding that, though?
What am I missing?
---
Original Task
-
Compile this C program . It will use OpenSSL to encrypt/decrypt using AES-256-GCB.
Issue
-
When I try to run
gcc Evp-gcm-encrypt.c -o Evp-gcm-encrypt
I get
Evp-gcm-encrypt.c:1:10: fatal error: openssl/conf.h: No such file or directory
1 | #include
| ^~~~~~~~~~~~~~~~
compilation terminated.
What I tried
-
1. I **installed OpenSSL** through Home-brew.
brew update
brew install openssl@1.1
2. Added such lines both in my **~/.zprofile** and **~/.zshrc**
export PATH="/usr/local/opt/openssl@1.1/bin:$PATH"
export LDFLAGS="-L/usr/local/opt/openssl@1.1/lib"
export CPPFLAGS="-I/usr/local/opt/openssl@1.1/include"
3. Removed and re-installed the **Xcode command-line-tools**
sudo rm -rf /Library/Developer/CommandLineTools
xcode-select --install
4. Deactivated **Anaconda's OpenSSL** (it was being executed before the home-brew version)
conda deactivate
5. **Linking** OpenSSL
brew link --force openssl
but I get
Error: No such keg: /usr/local/Cellar/openssl
6. **Linking** OpenSSL@1.1
brew link --force openssl@1.1
but I get
Warning: Refusing to link macOS provided/shadowed software: openssl@1.1
If you need to have openssl@1.1 first in your PATH, run:
echo 'export PATH="/usr/local/opt/openssl@1.1/bin:$PATH"' >> ~/.zshrc
For compilers to find openssl@1.1 you may need to set:
export LDFLAGS="-L/usr/local/opt/openssl@1.1/lib"
export CPPFLAGS="-I/usr/local/opt/openssl@1.1/include"
For pkg-config to find openssl@1.1 you may need to set:
export PKG_CONFIG_PATH="/usr/local/opt/openssl@1.1/lib/pkgconfig"
System info
-
1. MacOS 12.5.1 (Monterey)
2. MacBook Air (Retina, 13-inch, 2018)
3. SIP disabled
4. Security set to none
FET
(844 rep)
Oct 25, 2022, 12:43 PM
1
votes
3
answers
8061
views
Ruby 2.0.0 fails to install because of openssl
I can't install ruby from source, on configuration (*./configure*) it states Ignore OpenSSL broken by Apple. Please use another openssl. (e.g. using `configure --with-openssl-dir=/path/to/openssl') Failed to configure openssl. It will not be installed. Even if I use the told parameter. *--with-opt-d...
I can't install ruby from source, on configuration (*./configure*) it states
Ignore OpenSSL broken by Apple.
Please use another openssl. (e.g. using `configure --with-openssl-dir=/path/to/openssl')
Failed to configure openssl. It will not be installed.
Even if I use the told parameter. *--with-opt-dir=/usr/local* doesn't help either. Notice, I installed the latest openssl (1.0.1e) from source too (it's located at /usr/local/ssh).
So later I can't use *gem install*, it just states:
ERROR: Loading command: install (LoadError)
cannot load such file -- openssl
ERROR: While executing gem ... (NoMethodError)
undefined method `invoke_with_build_args' for nil:NilClass
How can I tell the ruby installation to take my installed openssl?
Appleshell
(292 rep)
Feb 27, 2013, 10:12 PM
• Last activity: Jun 24, 2022, 10:02 AM
1
votes
2
answers
1758
views
Openssl on mac -In is not working
I am follow a tutorial guide from this link http://osxdaily.com/2012/01/30/encrypt-and-decrypt-files-with-openssl/ to try to produce -sha256 hash from an input file but when i type `openssl dgst -sha256 -in filename.txt ` the command will return unknown option '-in'. Can anyone please point out what...
I am follow a tutorial guide from this link http://osxdaily.com/2012/01/30/encrypt-and-decrypt-files-with-openssl/
to try to produce -sha256 hash from an input file but when i type
openssl dgst -sha256 -in filename.txt
the command will return unknown option '-in'.
Can anyone please point out what have i gone wrong ?
OS Version: 10.11 OpenSSL Version: 1.0.2.d
Who
(13 rep)
Oct 10, 2015, 11:56 PM
• Last activity: May 28, 2022, 06:29 AM
1
votes
2
answers
1242
views
Will installation of macports automatically install or update OpenSSL?
I am a mac user and want to stay with the system-provided version of OpenSSL, which is OpenSSL 0.9.8y. I am wondering if installation of macports will automatically update my OpenSSL or install another version? Also, how can I check the version of the OpenSSL library on my mac instead of the version...
I am a mac user and want to stay with the system-provided version of OpenSSL, which is OpenSSL 0.9.8y. I am wondering if installation of macports will automatically update my OpenSSL or install another version?
Also, how can I check the version of the OpenSSL library on my mac instead of the version of the OpenSSL command? Do they always have the same version? Thanks!
kevinmonkey
(11 rep)
Jun 17, 2014, 03:19 AM
• Last activity: Nov 25, 2021, 05:41 PM
0
votes
0
answers
136
views
misaligned openSSL in OSX?
Errors are being generated on OSX 10.13.6 when using curl with protocol https, but not with browsers. curl https://letsencrypt.org/ curl: (60) SSL certificate problem: certificate has expired Thus the browsers seem to have their own TLS libraries with a different result from the system. When queryin...
Errors are being generated on OSX 10.13.6 when using curl with protocol https, but not with browsers.
curl https://letsencrypt.org/
curl: (60) SSL certificate problem: certificate has expired
Thus the browsers seem to have their own TLS libraries with a different result from the system.
When querying:
> openssl version
LibreSSL 2.2.7
Yet there is a directory
/usr/local/Cellar/openssl@1.1/
I believe these errors would be removed if the system were relying on openSSL 1.1.
How can that be set?
Jerome
(151 rep)
Oct 28, 2021, 11:37 AM
• Last activity: Oct 28, 2021, 01:42 PM
1
votes
0
answers
448
views
Mac M1 SQL Server SQLSrv OpenSSL library could not be loaded, make sure OpenSSL 1.0 or 1.1 is installed
I just bought a M1 Mac mini running Big Sur 11.6, I've installed PHP 7.3, msodbcsql17, mssql-tools, sqlsrv and pdo_sqlsrv. But when I try to connect using sqlsrv, the following error happens [Microsoft][ODBC Driver 17 for SQL Server]SSL Provider: [OpenSSL library could not be loaded, make sure OpenS...
I just bought a M1 Mac mini running Big Sur 11.6, I've installed PHP 7.3, msodbcsql17, mssql-tools, sqlsrv and pdo_sqlsrv.
But when I try to connect using sqlsrv, the following error happens [Microsoft][ODBC Driver 17 for SQL Server]SSL Provider: [OpenSSL library could not be loaded, make sure OpenSSL 1.0 or 1.1 is installed]
I've installed openssl@1.1 via brew and my profile contains
export PATH="/opt/homebrew/opt/openssl@1.1/bin:$PATH"
It seems like PHP is using the correct version, when printing echo OPENSSL_VERSION_TEXT, it says OpenSSL 1.1.1l 24 Aug 2021
I'm not sure what else to try, to make it work?
Jamie B
(11 rep)
Sep 29, 2021, 04:41 PM
1
votes
1
answers
1377
views
Updating path openssl keeps using wrong path
I had to downgrade openssl version for mysql. But when I ran `openssl version` I still got the wrong version. So I checked `which openssl` and I saw that it's using from anaconda: ``` (base) ➜ ~ which openssl /opt/anaconda3/bin/openssl ``` But it needs to use: ``` (base) ➜ ~ ls /usr/local/Cellar/ope...
I had to downgrade openssl version for mysql. But when I ran
openssl version
I still got the wrong version. So I checked which openssl
and I saw that it's using from anaconda:
(base) ➜ ~ which openssl
/opt/anaconda3/bin/openssl
But it needs to use:
(base) ➜ ~ ls /usr/local/Cellar/openssl
1.0.2t
So **what I tried**:
(base) ➜ ~ export PATH="/usr/local/Cellar/openssl/bin:$PATH"
(base) ➜ ~ source ~/.bash_profile
(base) ➜ ~ echo $PATH | tr ':' '\n'
/Library/Frameworks/Python.framework/Versions/3.8/bin
/Library/Frameworks/Python.framework/Versions/3.7/bin
/usr/local/Cellar/openssl/bin
/opt/anaconda3/bin
/opt/anaconda3/condabin
/Library/Frameworks/Python.framework/Versions/3.8/bin
/Library/Frameworks/Python.framework/Versions/3.7/bin
/usr/local/bin
/usr/bin
/bin
/usr/sbin
/sbin
So as you can see, my path is updated correctly. But when I run again which openssl
it still gives me openssl from anaconda, what am I doing wrong here?
Zal
(113 rep)
Jun 10, 2020, 03:16 PM
• Last activity: Jun 10, 2020, 07:47 PM
2
votes
0
answers
789
views
Using LibreSSL 3.1.1 without messing with the system
I did a brew install of OpenSSL/LibreSSL (3.1.1)... it's located in `/usr/local/opt/libressl/bin/openssl` I also have the usual macOS `Catalina` OpenSSL/LibreSSL bin at: `/usr/bin/openssl` I don't wanna mess with the system. I know brew says it's `keg-only` and not symlinked into `/usr/local`. This...
I did a brew install of OpenSSL/LibreSSL (3.1.1)...
it's located in
/usr/local/opt/libressl/bin/openssl
I also have the usual macOS Catalina
OpenSSL/LibreSSL bin at:
/usr/bin/openssl
I don't wanna mess with the system.
I know brew says it's keg-only
and not symlinked into /usr/local
.
This makes sense to not mess with system openssl
calls.
Can I do my own alias to the /usr/local/opt/libressl/bin/openssl
latest version with something like:
alias libressl="/usr/local/opt/libressl/bin/openssl"
in my .zshrc
so that I can use libressl 3.1.1
for one off command line things without messing with my macOS system stability?
Woodstock
(1376 rep)
May 27, 2020, 05:51 PM
1
votes
2
answers
4752
views
OpenSSL 0.9.8zg used by PHP does not support TLSv1.2 or TLSv1.1
As part of the installation a PHP 5.4 cartridge from openshift.com on my Mac with OS X 10.10.5 in the Terminal I noticed a message about it loading OpenSSL 0.9.8 for compatibilty with PHP. Later, trying to install getcomposer.org it is giving me a warning: > Some settings on your machine may cause s...
As part of the installation a PHP 5.4 cartridge from openshift.com on my Mac with OS X 10.10.5 in the Terminal I noticed a message about it loading OpenSSL 0.9.8 for compatibilty with PHP.
Later, trying to install getcomposer.org it is giving me a warning:
> Some settings on your machine may cause stability issues with Composer.
If you encounter issues, try to change the following:
> The OpenSSL library (0.9.8zc) used by PHP does not support TLSv1.2 or TLSv1.1. If possible you should upgrade OpenSSL to version 1.0.1 or above.
openssl version
command in terminal reported OpenSSL 0.9.8zg
14 July 2015
Should I update to OpenSSL version 1.0.1?
EmilyJ
(523 rep)
Feb 6, 2016, 03:05 PM
• Last activity: Apr 28, 2020, 02:31 PM
1
votes
1
answers
1366
views
openssl claims to use /private/etc/ssl, but appears not to, What The Heck?
In the course of trying to help a friend with a problem with pip and ssl sites ([GitHub issue here][1]), I've become confused about how the High Sierra /usr/bin/openssl finds its certificates. My "keg-only" openssl does not have any trouble with the site. Here's the test case that I've been playing...
In the course of trying to help a friend with a problem with pip and ssl sites (GitHub issue here ), I've become confused about how the High Sierra /usr/bin/openssl finds its certificates. My "keg-only" openssl does not have any trouble with the site.
Here's the test case that I've been playing with:
(alice)[14:22:06]~>>/usr/bin/openssl s_client -connect files.pythonhosted.org:443 | head 2>&1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign CloudSSL CA - SHA256 - G3
verify error:num=20:unable to get local issuer certificate
verify return:0
CONNECTED(00000005)
---
Certificate chain
0 s:/C=US/ST=California/L=San Francisco/O=Fastly, Inc/CN=r.ssl.fastly.net
i:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign CloudSSL CA - SHA256 - G3
1 s:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign CloudSSL CA - SHA256 - G3
i:/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----
^C
I've been scratching my head because an appropriate key resides in the Keychain utility (Determined by downloading the Mozilla cert bundle from the Curl site, finding the one cert that rescues the test case when provided via -CAfile
, and comparing its fingerprint to certs in the Keychain app. See the pip issue for gory details).
The value of OPENSSLDIR
in the openssl version -a
output suggests that /usr/bin/openssl
should be using /private/etc/ssl
:
(alice)[14:05:27]~>>/usr/bin/openssl version -a
LibreSSL 2.2.7
built on: date not available
platform: information not available
options: bn(64,64) rc4(ptr,int) des(idx,cisc,16,int) blowfish(idx)
compiler: information not available
OPENSSLDIR: "/private/etc/ssl"
And, in fact, pointing at that directory with the -CApath
command line option rescues the test case:
(alice)[14:26:32]~>>/usr/bin/openssl s_client -connect files.pythonhosted.org:443 -CApath /private/etc/ssl | head 2>&1 >
What's going on? Do the CApath/CAfile
commands enable behavior that doesn't otherwise occur?
I'd love to understand what's going on.
hartzell
(11 rep)
Jan 28, 2020, 10:24 PM
• Last activity: Apr 13, 2020, 04:01 PM
3
votes
2
answers
6507
views
Using Automator or AppleScript to encrypt/decrypt with OpenSSL
I would like to know how to use Automator or AppleScript to create a droplet that would compress/uncompress (tar.gz) and encrypt/decrypt with OpenSSL files and/or directories dropped in it. The workflow on what the droplet will do to encrypt would be something like this: - Files/directory is dropped...
I would like to know how to use Automator or AppleScript to create a droplet that would compress/uncompress (tar.gz) and encrypt/decrypt with OpenSSL files and/or directories dropped in it. The workflow on what the droplet will do to encrypt would be something like this:
- Files/directory is dropped on droplet
- Files/directory is compressed
- A password prompt is presented
- OpenSSL is used to encrypt file, file is renamed to *.encrypted
To decrypt:
- File is dropped on droplet
- If file is named *.encrypted, a password prompt is presented. If not, do encrypt workflow
- File is decrypted, and renamed
- Files is uncompressed
Anyone?
user268
May 4, 2012, 10:17 AM
• Last activity: Apr 10, 2020, 03:15 PM
1
votes
1
answers
4529
views
OpenSSL installation in macOS Mojave 10.14.6?
I am getting odd errors that OpenSSL package has some problems. Earlier I insntalled PyCharm IDE that is built on pyenv environment, it may have somehow broken my OpenSSL. I have tried to install OpenSSL again with `brew install openssl` but errors such as the below persist. **How to install OpenSSL...
I am getting odd errors that OpenSSL package has some problems. Earlier I insntalled PyCharm IDE that is built on pyenv environment, it may have somehow broken my OpenSSL. I have tried to install OpenSSL again with
brew install openssl
but errors such as the below persist.
**How to install OpenSSL in Mac OSX Mojave 10.14.6?**
pip3 install numpy
pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available.
Requirement already satisfied: numpy in /usr/local/lib/python3.7/site-packages (1.16.2)
pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available.
Could not fetch URL https://pypi.org/simple/pip/ : There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/pip/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping
hhh
(3944 rep)
Mar 1, 2020, 01:54 PM
• Last activity: Mar 2, 2020, 11:18 AM
1
votes
1
answers
2717
views
Not able to generate private.key file
I am developing MDM solution for that I need to create several certificates. For that I have following this [document][1]. [1]: https://github.com/project-imas/mdm-server When I'm firing this command, I am getting this error. openssl rsa -in key.pem -out private.key Error: >unable to load Private Ke...
I am developing MDM solution for that I need to create several certificates. For that I have following this document .
When I'm firing this command, I am getting this error.
openssl rsa -in key.pem -out private.key
Error:
>unable to load Private Key
4713004652:error:09FFF06C:PEM routines:CRYPTO_internal:no start line:/BuildRoot/Library/Caches/com.apple.xbs/Sources/libressl/libressl-47.11.1/libressl-2.8/crypto/pem/pem_lib.c:684:Expecting: ANY PRIVATE KEY
could any one guide me, how to resolve this issue?
Mahendra
(119 rep)
Jan 28, 2020, 12:01 PM
• Last activity: Jan 28, 2020, 09:20 PM
10
votes
3
answers
13340
views
How "official" is libressl support in High Sierra?
I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date and secure without any extra work for me or the user of my application. I though LibreSSL was offic...
I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date and secure without any extra work for me or the user of my application.
I though LibreSSL was officially supported in macOS and I have already ported my program have a LibreSSL backend, but I'm unsure of the state of LibreSSL within macOS. Is there any official documentation that addresses whether developers should treat the LibreSSL library as depricated or not?
PS: I've searched on Apple's developer site, but the [official Apple documentation](https://developer.apple.com/library/content/documentation/Security/Conceptual/cryptoservices/SecureNetworkCommunicationAPIs/SecureNetworkCommunicationAPIs.html) about encrypting network communication makes ABSOLUTELY NO mention of LibreSSL (which is not the same as OpenSSL).
rexroni
(203 rep)
May 2, 2018, 06:33 PM
• Last activity: Jun 3, 2019, 09:09 AM
1
votes
1
answers
691
views
Install Git on OSX 10.8
ALL, My project is located on GitHub which recently switched to using TLS1.2, which is incompatible with the OpenSSL version OSX 10.8 ships with. So I tried to build Git from sources. I downloaded the archive, unpack it and created config.mak file where I put following: NO_GETTEXT=Yes NO_OPENSSL=Yes...
ALL,
My project is located on GitHub which recently switched to using TLS1.2, which is incompatible with the OpenSSL version OSX 10.8 ships with.
So I tried to build Git from sources.
I downloaded the archive, unpack it and created config.mak file where I put following:
NO_GETTEXT=Yes
NO_OPENSSL=Yes
The build finished successfully, but when I tried to run it I still received:
MyMac:dbhandler igorkorot$ /Users/igorkorot/git-2.17.0/git pull
fatal: unable to access 'https://github.com/oneeyeman1/dbhandler.git/ ': error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version
Is there an easy way to check what version of OpenSSL will be linked if I remove the line
NO_OPENSSL=YES
from the config.mak file? I will try to remove that line and do make clean && make
after that. I did update whatever the notification was suggesting, but don't know if OpenSSL was part of the update.
I just need the latest version of the library. Hopefully there is still one available for OSX 10.8.
The machine is old and I don't want to install anything extra (homebrew or such) unless absolutely necessary.
TIA!
Igor
(1377 rep)
Apr 23, 2018, 08:21 PM
• Last activity: Jan 10, 2019, 07:01 AM
0
votes
1
answers
935
views
Update from Mac OS Sierra to High Sierra causes App to crash
I have a file sharing application which works like DropBox and Google Drive. The application works fine in Mac OS Sierra 10.3.2 and older. However when we update the OS to High Sierra (10.3.3) the app crashes. Apple did move from Openssl to Libressl in the update. **Scenario**. I have a synch folder...
I have a file sharing application which works like DropBox and Google Drive. The application works fine in Mac OS Sierra 10.3.2 and older. However when we update the OS to High Sierra (10.3.3) the app crashes.
Apple did move from Openssl to Libressl in the update.
**Scenario**.
I have a synch folder with 25,000 files. The desired behavior is for the application to push those files to the server.
**Behavior**.
After the 1000 file the app crashes. From the crash logs, it appears to be crashing on libcrypto.35.dylib
**Theories**.
I have a few theories as to what is happening here.
1. I have a race condition in the application that has been exposed in the OS update. This would explain why I do not see it in the previous Mac OS versions.
2. There is a bug in Apple's new version of Libressl. However I have not seen many complaints about this issue.
**Crashing Thread Report**
Process: fileSync
Path: /Applications/file Synce.app/Contents/MacOS/File Sync
Identifier: com.hds.osx.fss.File-Sync
Version: 9.0.0
Code Type: X86-64 (Native)
Parent Process: ???
Responsible: File Sync
User ID: 503
Date/Time: 2018-03-22 16:28:17.837 -0400
OS Version: Mac OS X 10.13.3 (17D47)
Report Version: 12
Anonymous UUID: FBE3606C-ABD0-D8A2-E971-ADD1A3955EFC
Sleep/Wake UUID: 45EAC198-3478-40FC-B89A-613ECA3EB94A
Time Awake Since Boot: 150000 seconds
Time Since Wake: 6000 seconds
System Integrity Protection: enabled
Crashed Thread: 12
Exception Type: EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: EXC_I386_GPFLT
Exception Note: EXC_CORPSE_NOTIFY
Termination Signal: Segmentation fault: 11
Termination Reason: Namespace SIGNAL, Code 0xb
Terminating Process: exc handler
Thread 12 Crashed:
0 libcrypto.35.dylib 0x00007fff51d47ffa ERR_STATE_free + 58
1 libcrypto.35.dylib 0x00007fff51d48fac int_thread_del_item + 252
2 libcrypto.35.dylib 0x00007fff51d47f78 ERR_remove_thread_state + 104
3 libcurl.4.dylib 0x00007fff5205a25b Curl_close + 186
4 libcurl.4.dylib 0x00007fff52075c08 curl_multi_cleanup + 227
5 com.hds.osx.fss.File-Sync 0x000000010cc3e317 CurlHttpClient::~CurlHttpClient() + 263
6 com.hds.osx.fss.File-Sync 0x000000010cd430ab AwRestClient::QueryFileSystemChanges(unsigned long long, std::__1::basic_string, std::__1::allocator > const&, AwFileSystemChangeList&, AwRestResponse&) + 539
7 com.hds.osx.fss.File-Sync 0x000000010ccd9fb7 AwFssMgr::PullRemoteChangesPrivate(unsigned long long, std::__1::basic_string, std::__1::allocator > const&, std::__1::basic_string, std::__1::allocator >&, unsigned long long&, unsigned int&) + 471
8 com.hds.osx.fss.File-Sync 0x000000010ccd9c36 AwFssMgr::PullRemoteChanges(unsigned long long, std::__1::basic_string, std::__1::allocator >&, bool, unsigned int&) + 214
9 com.hds.osx.fss.File-Sync 0x000000010cc72c46 AwController::RemoteNotificationListeningThread() + 2950
10 com.hds.osx.fss.File-Sync 0x000000010cc720ad AwController::RemoteNotificationListeningThread(void*) + 29
11 libsystem_pthread.dylib 0x00007fff539e66c1 _pthread_body + 340
12 libsystem_pthread.dylib 0x00007fff539e656d _pthread_start + 377
13 libsystem_pthread.dylib 0x00007fff539e5c5d thread_start + 13
**Question**
1. Is there a bug in High Sierra that explains this behavior/crash report
2. If not what are the possible causes for this crash ?
Rstack
(1 rep)
Mar 23, 2018, 04:02 PM
• Last activity: Dec 19, 2018, 11:02 AM
Showing page 1 of 20 total questions