Sample Header Ad - 728x90

Ask Different (Apple)

Q&A for power users of Apple hardware and software

Latest Questions

1 votes
1 answers
73 views
High Sierra (10.13.6) npm OSSL PEM routine error
Recently acquired an old MacBook Pro, new to MacOS. I have downloaded & installed node 16.20.1 https://nodejs.org/en/download/releases npm install fails. npm doctor returns: ``` Check Value Recommendation/Notes npm ping not ok error:0909006C:PEM routines:get_name:no start line npm -v not ok Error: e...
Recently acquired an old MacBook Pro, new to MacOS. I have downloaded & installed node 16.20.1 https://nodejs.org/en/download/releases npm install fails. npm doctor returns:
Check                               Value   Recommendation/Notes
npm ping                            not ok  error:0909006C:PEM routines:get_name:no start line
npm -v                              not ok  Error: error:0909006C:PEM routines:get_name:no start line
node -v                             not ok  Error: error:0909006C:PEM routines:get_name:no start line
npm config get registry             ok      using default registry (https://registry.npmjs.org/) 
which git                           ok      /usr/local/bin/git
Perms check on cached files         ok
Perms check on local node_modules   ok
Perms check on global node_modules  ok
Perms check on local bin folder     ok
Perms check on global bin folder    ok
Verify cache contents               ok      verified 0 tarballs
npm ERR! Some problems found. See above for recommendations.

npm ERR! A complete log of this run can be found in:
npm ERR!     /Users/travis/.npm/_logs/2023-06-26T21_56_49_431Z-debug-0.log


logfile contents:


0 verbose cli /usr/local/bin/node /usr/local/bin/npm
1 info using npm@8.19.4
2 info using node@v16.20.0
3 timing npm:load:whichnode Completed in 1ms
4 timing config:load:defaults Completed in 2ms
5 timing config:load:file:/usr/local/lib/node_modules/npm/npmrc Completed in 1ms
6 timing config:load:builtin Completed in 1ms
7 timing config:load:cli Completed in 2ms
8 timing config:load:env Completed in 0ms
9 timing config:load:project Completed in 12ms
10 timing config:load:file:/Users/travis/.npmrc Completed in 3ms
11 timing config:load:user Completed in 3ms
12 timing config:load:file:/usr/local/etc/npmrc Completed in 0ms
13 timing config:load:global Completed in 0ms
14 timing config:load:validate Completed in 3ms
15 timing config:load:credentials Completed in 1ms
16 timing config:load:setEnvs Completed in 2ms
17 timing config:load Completed in 26ms
18 timing npm:load:configload Completed in 26ms
19 timing npm:load:mkdirpcache Completed in 2ms
20 timing npm:load:mkdirplogs Completed in 1ms
21 verbose title npm doctor
22 verbose argv "doctor"
23 timing npm:load:setTitle Completed in 28ms
24 timing config:load:flatten Completed in 4ms
25 timing npm:load:display Completed in 6ms
26 verbose logfile logs-max:10 dir:/Users/travis/.npm/_logs
27 verbose logfile /Users/travis/.npm/_logs/2023-06-26T21_56_49_431Z-debug-0.log
28 timing npm:load:logFile Completed in 7ms
29 timing npm:load:timers Completed in 0ms
30 timing npm:load:configScope Completed in 0ms
31 timing npm:load Completed in 72ms
32 info Running checkup
33 silly logfile start cleaning logs, removing 1 files
34 silly logfile done cleaning log files
35 timing command:doctor Completed in 140501ms
36 verbose stack Error: Some problems found. See above for recommendations.
36 verbose stack     at Doctor.exec (/usr/local/lib/node_modules/npm/lib/commands/doctor.js:126:13)
36 verbose stack     at async module.exports (/usr/local/lib/node_modules/npm/lib/cli.js:78:5)
37 verbose cwd /Users/travis
38 verbose Darwin 17.7.0
39 verbose node v16.20.0
40 verbose npm  v8.19.4
41 error Some problems found. See above for recommendations.
42 verbose exit 1
43 timing npm Completed in 140587ms
44 verbose code 1
45 error A complete log of this run can be found in:
45 error     /Users/travis/.npm/_logs/2023-06-26T21_56_49_431Z-debug-0.log
- I have tried manually installing & uninstalling node & npm - I have tried installing node via nvm - I am not able to install node via homebrew due to gcc dependency (willing to try if someone can walk me through installing a package outside homebrew then linking to homebrew) - I have tried setting http://registry.nmpjs.org/ . and back Is there an SSL certificate I need to add or modify somewhere? What else can I look at to troubleshoot this?
Travis (11 rep)
Jun 26, 2023, 10:15 PM • Last activity: Apr 18, 2025, 07:07 AM
5 votes
1 answers
1981 views
Catalina and pyenv install python versions fine, but anything needing ssl fails
I seek to use pyenv instead of manually installing an official python release. My goal is to run the included script titled “Install Certificates.command”. My assessment of the situation is pyenv is supposed to handle the same tasks that script performs during the automated install of a python versi...
I seek to use pyenv instead of manually installing an official python release. My goal is to run the included script titled “Install Certificates.command”. My assessment of the situation is pyenv is supposed to handle the same tasks that script performs during the automated install of a python version. Every python install via pyenv allows setting my global or local version just fine. after it’s installed without error. I assume pyenv could not miss reporting install errors for any of the 6-8 official versions of python install, uninstall, and reinstall several times now. To narrow things, the following 3 versions of python matter:
3.10.0
3.9.8
3.8.12
system
I seek to migrate a few packages to 3.10.0 and updating some of the ones I'm personally working on to make sure my required site-packages are all there for these versions. - I've had no trouble accomplishing this task under Ubuntu 20.04, but under MacOS Catalina 10.15.7 I am unable to make this happen with working results. - I used brew to install both pyenv and pyenv virtualenv. Both install with zero errors. - I have followed the most current MacOS specific installation instructions on the respective github repository page for each item ([pyenv](https://github.com/pyenv/pyenv) and [pyenv-virtualenv](https://github.com/pyenv/pyenv-virtualenv)) . - I have read through the Troubleshooting/FAQ and README's for each project. - I've also reviewed the fairly conclusive install guide posted here: https://wilsonmar.github.io/pyenv/ Finally, I have removed all versions of python I successfully installed with pyenv (pyenv uninstall) and then uninstalled pyenv/pyenv-virtual with brew. Reinstalled both openssl@1.1 and openssl@3 (The only two required casks for pyenv and pyenv-virtual, depending on the python version, as of this writing according to brew) Even after reinstalling everything and looking over my .bashrc/.zshrc/.bash_profile, no matter what I do, I am unable to do even the most basic things that utilize ssl/certs. If I use the system version of python (2.7.16), the same things that fail on my pyenv versions work fine. Here is an example of the failure I get on any of the installed python versions I have except for
catalina10_15_7:~ user$ pyenv --version
pyenv 2.2.0
catalina10_15_7:~ user$ pyenv virtualenv --version
pyenv-virtualenv 1.1.5 (virtualenv unknown)
catalina10_15_7:~ user$ pyenv versions
* system (set by /Users/user/.pyenv/version)
catalina10_15_7:~ user$ pyenv install 3.10.0
python-build: use openssl@1.1 from homebrew
python-build: use readline from homebrew
Downloading Python-3.10.0.tar.xz...
-> https://www.python.org/ftp/python/3.10.0/Python-3.10.0.tar.xz 
Installing Python-3.10.0...
patching file aclocal.m4
patching file configure
Hunk #5 succeeded at 10537 (offset -15 lines).
python-build: use readline from homebrew
python-build: use zlib from xcode sdk
Installed Python-3.10.0 to /Users/user/.pyenv/versions/3.10.0

catalina10_15_7:~ user$ pyenv rehash
catalina10_15_7:~ user$ pyenv versions
* system (set by /Users/user/.pyenv/version)
  3.10.0
catalina10_15_7:~ user$ pyenv global 3.10.0
catalina10_15_7:~ user$ python --version
Python 3.10.0
catalina10_15_7:~ user$ cd dev/somegit
catalina10_15_7:somegit user$ ./download.py
Traceback (most recent call last):
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 1348, in do_open
    h.request(req.get_method(), req.selector, req.data, headers,
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 1276, in request
    self._send_request(method, url, body, headers, encode_chunked)
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 1322, in _send_request
    self.endheaders(body, encode_chunked=encode_chunked)
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 1271, in endheaders
    self._send_output(message_body, encode_chunked=encode_chunked)
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 1031, in _send_output
    self.send(msg)
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 969, in send
    self.connect()
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/http/client.py", line 1448, in connect
    self.sock = self._context.wrap_socket(self.sock,
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/ssl.py", line 512, in wrap_socket
    return self.sslsocket_class._create(
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/ssl.py", line 1070, in _create
    self.do_handshake()
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/ssl.py", line 1341, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/Users/user/dev/somegit/./download.py", line 56, in 
    r = urlopen(manifest)
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 216, in urlopen
    return opener.open(url, data, timeout)
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 519, in open
    response = self._open(req, data)
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 536, in _open
    result = self._call_chain(self.handle_open, protocol, protocol +
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 496, in _call_chain
    result = func(*args)
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 1391, in https_open
    return self.do_open(http.client.HTTPSConnection, req,
  File "/Users/user/.pyenv/versions/3.10.0/lib/python3.10/urllib/request.py", line 1351, in do_open
    raise URLError(err)
urllib.error.URLError: 
catalina10_15_7:somegit user$

catalina10_15_7:somegit user$

catalina10_15_7:somegit user$
catalina10_15_7:somegit user$ cat ~/.bashrc
# .bashrc

# PATH
export PATH="$(brew --prefix sqlite)/bin:\
$(brew --prefix openssl@1.1)/bin:\
$(brew --prefix openssl@3)/bin:\
$(brew --prefix bison)/bin:\
$HOME/Library/Android/sdk/platform-tools:\
$HOME/.pyenv/bin:\
$PATH"

# Exports
export PATH="$HOME/Library/Android/sdk/platform-tools:$PATH"
export LDFLAGS="-L/usr/local/opt/openssl@1.1/lib"
export CPPFLAGS="-I/usr/local/opt/openssl@1.1/include"
export PKG_CONFIG_PATH="/usr/local/opt/openssl@1.1/lib/pkgconfig"
export LDFLAGS="-L/usr/local/opt/openssl@3/lib"
export CPPFLAGS="-I/usr/local/opt/openssl@3/include"
export LDFLAGS="-L/usr/local/opt/readline/lib"
export CPPFLAGS="-I/usr/local/opt/readline/include"
export LDFLAGS="-L/usr/local/opt/sqlite/lib"
export CPPFLAGS="-I/usr/local/opt/sqlite/include"
export LDFLAGS="-L/usr/local/opt/zlib/lib"
export CPPFLAGS="-I/usr/local/opt/zlib/include"
export LDFLAGS="-L/usr/local/opt/bison/lib"

# pyenv
eval "$(pyenv virtualenv-init -)"
export PYENV_ROOT="$HOME/.pyenv"

# gpip
gpip() {
    PIP_REQUIRE_VIRTUALENV=false pip "$@"
}

# Aliases
alias ls='ls -G'
alias ll='ls -laG'

catalina10_15_7:somegit user$
catalina10_15_7:somegit user$ brew list
==> Formulae
autoconf        dmg2img         libidn2         m4          pcre2           readline        xz
autossh         gettext         libunistring        ntfs-3g-mac     pkg-config      sqlite          zlib
bash            git         libusb          openjdk         pv          squashfs        zstd
bison           gzip            lz4         openssl@1.1     pyenv           tree
ca-certificates     javacc          lzo         openssl@3       pyenv-virtualenv    wget

==> Casks
font-hack-nerd-font
catalina10_15_7:somegit user$
Might there be a guide on resolving OpenSSL errors in this case?
element6 (51 rep)
Nov 20, 2021, 09:09 PM • Last activity: Sep 30, 2023, 08:33 PM
5 votes
3 answers
13450 views
How to install stunnel on OS X Mountain Lion?
I currently bought a Mac and I'm a noob :). I used to connect to my server using [stunnel][1] on Windows and Ubuntu. I'm also a noob in networking. I check website download section, and there's no Mac version, but in users-community mailing list I see some posts about running it under macOS. But the...
I currently bought a Mac and I'm a noob :). I used to connect to my server using stunnel on Windows and Ubuntu. I'm also a noob in networking. I check website download section, and there's no Mac version, but in users-community mailing list I see some posts about running it under macOS. But they didn't help to figure out what should I do. So anyone can help me install stunnel on OS X Mountain Lion (10.8.2), or tell me is there any alternative app?
Behzadsh (161 rep)
Jan 18, 2013, 11:33 PM • Last activity: Feb 9, 2023, 11:08 AM
1 votes
0 answers
1298 views
I have openssl on my macOS, but when I compile PHP, I get error
I use this command compile the php on my macOS: ``` ./configure \ --prefix=/opt/php-7.4.30 \ --with-config-file-path=/opt/php-7.4.30/etc \ --with-pdo-mysql=mysqlnd \ --with-mysqli=mysqlnd \ --with-libxml-dir \ --with-gd \ --with-jpeg-dir \ --with-png-dir \ --with-freetype-dir \ --with-iconv=/opt/hom...
I use this command compile the php on my macOS:
./configure \
  --prefix=/opt/php-7.4.30 \
  --with-config-file-path=/opt/php-7.4.30/etc \
  --with-pdo-mysql=mysqlnd \
  --with-mysqli=mysqlnd \
  --with-libxml-dir \
  --with-gd \
  --with-jpeg-dir \
  --with-png-dir \
  --with-freetype-dir \
  --with-iconv=/opt/homebrew/Cellar/libiconv/1.17 \
  --with-zlib-dir=/opt/homebrew/Cellar/zlib/1.2.12_1 \
  --with-bz2=/opt/homebrew/Cellar/bzip2/1.0.8 \
  --with-openssl=/opt/homebrew/Cellar/openssl@3/3.0.5/\
  --with-curl=/opt/homebrew/Cellar/curl/7.85.0 \
  --enable-soap \
  --enable-mbstring \
  --enable-sockets \
  --enable-exif \
  --with-readline=/opt/homebrew/Cellar/readline/8.1.2 \
  --disable-ipv6
and in my macOS, I do have /opt/homebrew/Cellar/openssl@1.1/1.1.1q
% ls /opt/homebrew/Cellar/openssl@1.1/1.1.1q 
AUTHORS			INSTALL_RECEIPT.json	NEWS			bin			lib
CHANGES			LICENSE			README			include			share
I get below error:
Configuring extensions
checking io.h usability... no
checking io.h presence... no
checking for io.h... no
checking for strtoll... yes
checking for atoll... yes
checking whether to build with LIBXML support... yes
checking for libxml-2.0 >= 2.7.6... yes
checking for OpenSSL support... yes
checking for Kerberos support... no
checking whether to use system default cipher list instead of hardcoded value... no
checking for openssl >= 1.0.1... no
configure: error: Package requirements (openssl >= 1.0.1) were not met:

No package 'openssl' found

Consider adjusting the PKG_CONFIG_PATH environment variable if you
installed software in a non-standard prefix.

Alternatively, you may set the environment variables OPENSSL_CFLAGS
and OPENSSL_LIBS to avoid the need to call pkg-config.
See the pkg-config man page for more details.
--- **Edit-01** Before ask this question, I have tried:
export OPENSSL_CFLAGS="/opt/homebrew/Cellar/openssl@3/3.0.5/include" 
export OPENSSL_LIBS="/opt/homebrew/Cellar/openssl@3/3.0.5/lib"

export PKG_CONFIG_PATH=/opt/homebrew/Cellar/openssl@3/3.0.5/lib/pkgconfig:$PKG_CONFIG_PATH
lustre (81 rep)
Nov 3, 2022, 12:13 PM • Last activity: Dec 7, 2022, 11:03 AM
1 votes
0 answers
2123 views
fatal error: openssl/conf.h: No such file or directory | Home-brew OpenSSL on MacOS
Question = It seems like **gcc can't read the headers in the include folder** of OpeenSSL. Shouldn't the flags I added in the `~/.zprofile` help with finding that, though? What am I missing? --- Original Task - Compile [this C program][1]. It will use OpenSSL to encrypt/decrypt using AES-256-GCB. Is...
Question = It seems like **gcc can't read the headers in the include folder** of OpeenSSL. Shouldn't the flags I added in the ~/.zprofile help with finding that, though? What am I missing? --- Original Task - Compile this C program . It will use OpenSSL to encrypt/decrypt using AES-256-GCB. Issue - When I try to run gcc Evp-gcm-encrypt.c -o Evp-gcm-encrypt I get Evp-gcm-encrypt.c:1:10: fatal error: openssl/conf.h: No such file or directory 1 | #include | ^~~~~~~~~~~~~~~~ compilation terminated. What I tried - 1. I **installed OpenSSL** through Home-brew. brew update brew install openssl@1.1 2. Added such lines both in my **~/.zprofile** and **~/.zshrc** export PATH="/usr/local/opt/openssl@1.1/bin:$PATH" export LDFLAGS="-L/usr/local/opt/openssl@1.1/lib" export CPPFLAGS="-I/usr/local/opt/openssl@1.1/include" 3. Removed and re-installed the **Xcode command-line-tools** sudo rm -rf /Library/Developer/CommandLineTools xcode-select --install 4. Deactivated **Anaconda's OpenSSL** (it was being executed before the home-brew version) conda deactivate 5. **Linking** OpenSSL brew link --force openssl but I get Error: No such keg: /usr/local/Cellar/openssl 6. **Linking** OpenSSL@1.1 brew link --force openssl@1.1 but I get Warning: Refusing to link macOS provided/shadowed software: openssl@1.1 If you need to have openssl@1.1 first in your PATH, run: echo 'export PATH="/usr/local/opt/openssl@1.1/bin:$PATH"' >> ~/.zshrc For compilers to find openssl@1.1 you may need to set: export LDFLAGS="-L/usr/local/opt/openssl@1.1/lib" export CPPFLAGS="-I/usr/local/opt/openssl@1.1/include" For pkg-config to find openssl@1.1 you may need to set: export PKG_CONFIG_PATH="/usr/local/opt/openssl@1.1/lib/pkgconfig" System info - 1. MacOS 12.5.1 (Monterey) 2. MacBook Air (Retina, 13-inch, 2018) 3. SIP disabled 4. Security set to none
FET (844 rep)
Oct 25, 2022, 12:43 PM
1 votes
3 answers
8061 views
Ruby 2.0.0 fails to install because of openssl
I can't install ruby from source, on configuration (*./configure*) it states Ignore OpenSSL broken by Apple. Please use another openssl. (e.g. using `configure --with-openssl-dir=/path/to/openssl') Failed to configure openssl. It will not be installed. Even if I use the told parameter. *--with-opt-d...
I can't install ruby from source, on configuration (*./configure*) it states Ignore OpenSSL broken by Apple. Please use another openssl. (e.g. using `configure --with-openssl-dir=/path/to/openssl') Failed to configure openssl. It will not be installed. Even if I use the told parameter. *--with-opt-dir=/usr/local* doesn't help either. Notice, I installed the latest openssl (1.0.1e) from source too (it's located at /usr/local/ssh). So later I can't use *gem install*, it just states: ERROR: Loading command: install (LoadError) cannot load such file -- openssl ERROR: While executing gem ... (NoMethodError) undefined method `invoke_with_build_args' for nil:NilClass How can I tell the ruby installation to take my installed openssl?
Appleshell (292 rep)
Feb 27, 2013, 10:12 PM • Last activity: Jun 24, 2022, 10:02 AM
1 votes
2 answers
1758 views
Openssl on mac -In is not working
I am follow a tutorial guide from this link http://osxdaily.com/2012/01/30/encrypt-and-decrypt-files-with-openssl/ to try to produce -sha256 hash from an input file but when i type `openssl dgst -sha256 -in filename.txt ` the command will return unknown option '-in'. Can anyone please point out what...
I am follow a tutorial guide from this link http://osxdaily.com/2012/01/30/encrypt-and-decrypt-files-with-openssl/ to try to produce -sha256 hash from an input file but when i type openssl dgst -sha256 -in filename.txt the command will return unknown option '-in'. Can anyone please point out what have i gone wrong ? OS Version: 10.11 OpenSSL Version: 1.0.2.d
Who (13 rep)
Oct 10, 2015, 11:56 PM • Last activity: May 28, 2022, 06:29 AM
1 votes
2 answers
1242 views
Will installation of macports automatically install or update OpenSSL?
I am a mac user and want to stay with the system-provided version of OpenSSL, which is OpenSSL 0.9.8y. I am wondering if installation of macports will automatically update my OpenSSL or install another version? Also, how can I check the version of the OpenSSL library on my mac instead of the version...
I am a mac user and want to stay with the system-provided version of OpenSSL, which is OpenSSL 0.9.8y. I am wondering if installation of macports will automatically update my OpenSSL or install another version? Also, how can I check the version of the OpenSSL library on my mac instead of the version of the OpenSSL command? Do they always have the same version? Thanks!
kevinmonkey (11 rep)
Jun 17, 2014, 03:19 AM • Last activity: Nov 25, 2021, 05:41 PM
0 votes
0 answers
136 views
misaligned openSSL in OSX?
Errors are being generated on OSX 10.13.6 when using curl with protocol https, but not with browsers. curl https://letsencrypt.org/ curl: (60) SSL certificate problem: certificate has expired Thus the browsers seem to have their own TLS libraries with a different result from the system. When queryin...
Errors are being generated on OSX 10.13.6 when using curl with protocol https, but not with browsers. curl https://letsencrypt.org/ curl: (60) SSL certificate problem: certificate has expired Thus the browsers seem to have their own TLS libraries with a different result from the system. When querying: > openssl version LibreSSL 2.2.7 Yet there is a directory /usr/local/Cellar/openssl@1.1/ I believe these errors would be removed if the system were relying on openSSL 1.1. How can that be set?
Jerome (151 rep)
Oct 28, 2021, 11:37 AM • Last activity: Oct 28, 2021, 01:42 PM
1 votes
0 answers
448 views
Mac M1 SQL Server SQLSrv OpenSSL library could not be loaded, make sure OpenSSL 1.0 or 1.1 is installed
I just bought a M1 Mac mini running Big Sur 11.6, I've installed PHP 7.3, msodbcsql17, mssql-tools, sqlsrv and pdo_sqlsrv. But when I try to connect using sqlsrv, the following error happens [Microsoft][ODBC Driver 17 for SQL Server]SSL Provider: [OpenSSL library could not be loaded, make sure OpenS...
I just bought a M1 Mac mini running Big Sur 11.6, I've installed PHP 7.3, msodbcsql17, mssql-tools, sqlsrv and pdo_sqlsrv. But when I try to connect using sqlsrv, the following error happens [Microsoft][ODBC Driver 17 for SQL Server]SSL Provider: [OpenSSL library could not be loaded, make sure OpenSSL 1.0 or 1.1 is installed] I've installed openssl@1.1 via brew and my profile contains export PATH="/opt/homebrew/opt/openssl@1.1/bin:$PATH" It seems like PHP is using the correct version, when printing echo OPENSSL_VERSION_TEXT, it says OpenSSL 1.1.1l 24 Aug 2021 I'm not sure what else to try, to make it work?
Jamie B (11 rep)
Sep 29, 2021, 04:41 PM
1 votes
1 answers
1377 views
Updating path openssl keeps using wrong path
I had to downgrade openssl version for mysql. But when I ran `openssl version` I still got the wrong version. So I checked `which openssl` and I saw that it's using from anaconda: ``` (base) ➜ ~ which openssl /opt/anaconda3/bin/openssl ``` But it needs to use: ``` (base) ➜ ~ ls /usr/local/Cellar/ope...
I had to downgrade openssl version for mysql. But when I ran openssl version I still got the wrong version. So I checked which openssl and I saw that it's using from anaconda:
(base) ➜  ~ which openssl
/opt/anaconda3/bin/openssl
But it needs to use:
(base) ➜  ~ ls /usr/local/Cellar/openssl
1.0.2t
So **what I tried**:
(base) ➜  ~ export PATH="/usr/local/Cellar/openssl/bin:$PATH"
(base) ➜  ~ source ~/.bash_profile
(base) ➜  ~ echo $PATH | tr ':' '\n'
/Library/Frameworks/Python.framework/Versions/3.8/bin
/Library/Frameworks/Python.framework/Versions/3.7/bin
/usr/local/Cellar/openssl/bin
/opt/anaconda3/bin
/opt/anaconda3/condabin
/Library/Frameworks/Python.framework/Versions/3.8/bin
/Library/Frameworks/Python.framework/Versions/3.7/bin
/usr/local/bin
/usr/bin
/bin
/usr/sbin
/sbin
So as you can see, my path is updated correctly. But when I run again which openssl it still gives me openssl from anaconda, what am I doing wrong here?
Zal (113 rep)
Jun 10, 2020, 03:16 PM • Last activity: Jun 10, 2020, 07:47 PM
2 votes
0 answers
789 views
Using LibreSSL 3.1.1 without messing with the system
I did a brew install of OpenSSL/LibreSSL (3.1.1)... it's located in `/usr/local/opt/libressl/bin/openssl` I also have the usual macOS `Catalina` OpenSSL/LibreSSL bin at: `/usr/bin/openssl` I don't wanna mess with the system. I know brew says it's `keg-only` and not symlinked into `/usr/local`. This...
I did a brew install of OpenSSL/LibreSSL (3.1.1)... it's located in /usr/local/opt/libressl/bin/openssl I also have the usual macOS Catalina OpenSSL/LibreSSL bin at: /usr/bin/openssl I don't wanna mess with the system. I know brew says it's keg-only and not symlinked into /usr/local. This makes sense to not mess with system openssl calls. Can I do my own alias to the /usr/local/opt/libressl/bin/openssl latest version with something like: alias libressl="/usr/local/opt/libressl/bin/openssl" in my .zshrc so that I can use libressl 3.1.1 for one off command line things without messing with my macOS system stability?
Woodstock (1376 rep)
May 27, 2020, 05:51 PM
1 votes
2 answers
4752 views
OpenSSL 0.9.8zg used by PHP does not support TLSv1.2 or TLSv1.1
As part of the installation a PHP 5.4 cartridge from openshift.com on my Mac with OS X 10.10.5 in the Terminal I noticed a message about it loading OpenSSL 0.9.8 for compatibilty with PHP. Later, trying to install getcomposer.org it is giving me a warning: > Some settings on your machine may cause s...
As part of the installation a PHP 5.4 cartridge from openshift.com on my Mac with OS X 10.10.5 in the Terminal I noticed a message about it loading OpenSSL 0.9.8 for compatibilty with PHP. Later, trying to install getcomposer.org it is giving me a warning: > Some settings on your machine may cause stability issues with Composer. If you encounter issues, try to change the following: > The OpenSSL library (0.9.8zc) used by PHP does not support TLSv1.2 or TLSv1.1. If possible you should upgrade OpenSSL to version 1.0.1 or above. openssl version command in terminal reported OpenSSL 0.9.8zg 14 July 2015 Should I update to OpenSSL version 1.0.1?
EmilyJ (523 rep)
Feb 6, 2016, 03:05 PM • Last activity: Apr 28, 2020, 02:31 PM
1 votes
1 answers
1366 views
openssl claims to use /private/etc/ssl, but appears not to, What The Heck?
In the course of trying to help a friend with a problem with pip and ssl sites ([GitHub issue here][1]), I've become confused about how the High Sierra /usr/bin/openssl finds its certificates. My "keg-only" openssl does not have any trouble with the site. Here's the test case that I've been playing...
In the course of trying to help a friend with a problem with pip and ssl sites (GitHub issue here ), I've become confused about how the High Sierra /usr/bin/openssl finds its certificates. My "keg-only" openssl does not have any trouble with the site. Here's the test case that I've been playing with:
(alice)[14:22:06]~>>/usr/bin/openssl s_client -connect files.pythonhosted.org:443 | head 2>&1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign CloudSSL CA - SHA256 - G3
verify error:num=20:unable to get local issuer certificate
verify return:0
CONNECTED(00000005)
---
Certificate chain
 0 s:/C=US/ST=California/L=San Francisco/O=Fastly, Inc/CN=r.ssl.fastly.net
   i:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign CloudSSL CA - SHA256 - G3
 1 s:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign CloudSSL CA - SHA256 - G3
   i:/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----
^C
I've been scratching my head because an appropriate key resides in the Keychain utility (Determined by downloading the Mozilla cert bundle from the Curl site, finding the one cert that rescues the test case when provided via -CAfile, and comparing its fingerprint to certs in the Keychain app. See the pip issue for gory details). The value of OPENSSLDIR in the openssl version -a output suggests that /usr/bin/openssl should be using /private/etc/ssl:
(alice)[14:05:27]~>>/usr/bin/openssl version -a
LibreSSL 2.2.7
built on: date not available
platform: information not available
options:  bn(64,64) rc4(ptr,int) des(idx,cisc,16,int) blowfish(idx)
compiler: information not available
OPENSSLDIR: "/private/etc/ssl"
And, in fact, pointing at that directory with the -CApath command line option rescues the test case:
(alice)[14:26:32]~>>/usr/bin/openssl s_client -connect files.pythonhosted.org:443 -CApath /private/etc/ssl | head 2>&1 >
What's going on? Do the CApath/CAfile commands enable behavior that doesn't otherwise occur? I'd love to understand what's going on.
hartzell (11 rep)
Jan 28, 2020, 10:24 PM • Last activity: Apr 13, 2020, 04:01 PM
3 votes
2 answers
6507 views
Using Automator or AppleScript to encrypt/decrypt with OpenSSL
I would like to know how to use Automator or AppleScript to create a droplet that would compress/uncompress (tar.gz) and encrypt/decrypt with OpenSSL files and/or directories dropped in it. The workflow on what the droplet will do to encrypt would be something like this: - Files/directory is dropped...
I would like to know how to use Automator or AppleScript to create a droplet that would compress/uncompress (tar.gz) and encrypt/decrypt with OpenSSL files and/or directories dropped in it. The workflow on what the droplet will do to encrypt would be something like this: - Files/directory is dropped on droplet - Files/directory is compressed - A password prompt is presented - OpenSSL is used to encrypt file, file is renamed to *.encrypted To decrypt: - File is dropped on droplet - If file is named *.encrypted, a password prompt is presented. If not, do encrypt workflow - File is decrypted, and renamed - Files is uncompressed Anyone?
user268
May 4, 2012, 10:17 AM • Last activity: Apr 10, 2020, 03:15 PM
1 votes
1 answers
4529 views
OpenSSL installation in macOS Mojave 10.14.6?
I am getting odd errors that OpenSSL package has some problems. Earlier I insntalled PyCharm IDE that is built on pyenv environment, it may have somehow broken my OpenSSL. I have tried to install OpenSSL again with `brew install openssl` but errors such as the below persist. **How to install OpenSSL...
I am getting odd errors that OpenSSL package has some problems. Earlier I insntalled PyCharm IDE that is built on pyenv environment, it may have somehow broken my OpenSSL. I have tried to install OpenSSL again with brew install openssl but errors such as the below persist. **How to install OpenSSL in Mac OSX Mojave 10.14.6?** pip3 install numpy pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available. Requirement already satisfied: numpy in /usr/local/lib/python3.7/site-packages (1.16.2) pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available. Could not fetch URL https://pypi.org/simple/pip/ : There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/pip/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping
hhh (3944 rep)
Mar 1, 2020, 01:54 PM • Last activity: Mar 2, 2020, 11:18 AM
1 votes
1 answers
2717 views
Not able to generate private.key file
I am developing MDM solution for that I need to create several certificates. For that I have following this [document][1]. [1]: https://github.com/project-imas/mdm-server When I'm firing this command, I am getting this error. openssl rsa -in key.pem -out private.key Error: >unable to load Private Ke...
I am developing MDM solution for that I need to create several certificates. For that I have following this document . When I'm firing this command, I am getting this error. openssl rsa -in key.pem -out private.key Error: >unable to load Private Key 4713004652:error:09FFF06C:PEM routines:CRYPTO_internal:no start line:/BuildRoot/Library/Caches/com.apple.xbs/Sources/libressl/libressl-47.11.1/libressl-2.8/crypto/pem/pem_lib.c:684:Expecting: ANY PRIVATE KEY could any one guide me, how to resolve this issue?
Mahendra (119 rep)
Jan 28, 2020, 12:01 PM • Last activity: Jan 28, 2020, 09:20 PM
10 votes
3 answers
13340 views
How "official" is libressl support in High Sierra?
I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date and secure without any extra work for me or the user of my application. I though LibreSSL was offic...
I am trying to port an OpenSSL-based C program from Linux to macOS, and I would like to use a library for TLS which is officially supported by the OS, because then the OS keeps that library up-to-date and secure without any extra work for me or the user of my application. I though LibreSSL was officially supported in macOS and I have already ported my program have a LibreSSL backend, but I'm unsure of the state of LibreSSL within macOS. Is there any official documentation that addresses whether developers should treat the LibreSSL library as depricated or not? PS: I've searched on Apple's developer site, but the [official Apple documentation](https://developer.apple.com/library/content/documentation/Security/Conceptual/cryptoservices/SecureNetworkCommunicationAPIs/SecureNetworkCommunicationAPIs.html) about encrypting network communication makes ABSOLUTELY NO mention of LibreSSL (which is not the same as OpenSSL).
rexroni (203 rep)
May 2, 2018, 06:33 PM • Last activity: Jun 3, 2019, 09:09 AM
1 votes
1 answers
691 views
Install Git on OSX 10.8
ALL, My project is located on GitHub which recently switched to using TLS1.2, which is incompatible with the OpenSSL version OSX 10.8 ships with. So I tried to build Git from sources. I downloaded the archive, unpack it and created config.mak file where I put following: NO_GETTEXT=Yes NO_OPENSSL=Yes...
ALL, My project is located on GitHub which recently switched to using TLS1.2, which is incompatible with the OpenSSL version OSX 10.8 ships with. So I tried to build Git from sources. I downloaded the archive, unpack it and created config.mak file where I put following: NO_GETTEXT=Yes NO_OPENSSL=Yes The build finished successfully, but when I tried to run it I still received: MyMac:dbhandler igorkorot$ /Users/igorkorot/git-2.17.0/git pull fatal: unable to access 'https://github.com/oneeyeman1/dbhandler.git/ ': error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version Is there an easy way to check what version of OpenSSL will be linked if I remove the line NO_OPENSSL=YES from the config.mak file? I will try to remove that line and do make clean && make after that. I did update whatever the notification was suggesting, but don't know if OpenSSL was part of the update. I just need the latest version of the library. Hopefully there is still one available for OSX 10.8. The machine is old and I don't want to install anything extra (homebrew or such) unless absolutely necessary. TIA!
Igor (1377 rep)
Apr 23, 2018, 08:21 PM • Last activity: Jan 10, 2019, 07:01 AM
0 votes
1 answers
935 views
Update from Mac OS Sierra to High Sierra causes App to crash
I have a file sharing application which works like DropBox and Google Drive. The application works fine in Mac OS Sierra 10.3.2 and older. However when we update the OS to High Sierra (10.3.3) the app crashes. Apple did move from Openssl to Libressl in the update. **Scenario**. I have a synch folder...
I have a file sharing application which works like DropBox and Google Drive. The application works fine in Mac OS Sierra 10.3.2 and older. However when we update the OS to High Sierra (10.3.3) the app crashes. Apple did move from Openssl to Libressl in the update. **Scenario**. I have a synch folder with 25,000 files. The desired behavior is for the application to push those files to the server. **Behavior**. After the 1000 file the app crashes. From the crash logs, it appears to be crashing on libcrypto.35.dylib **Theories**. I have a few theories as to what is happening here. 1. I have a race condition in the application that has been exposed in the OS update. This would explain why I do not see it in the previous Mac OS versions. 2. There is a bug in Apple's new version of Libressl. However I have not seen many complaints about this issue. **Crashing Thread Report** Process: fileSync Path: /Applications/file Synce.app/Contents/MacOS/File Sync Identifier: com.hds.osx.fss.File-Sync Version: 9.0.0 Code Type: X86-64 (Native) Parent Process: ??? Responsible: File Sync User ID: 503 Date/Time: 2018-03-22 16:28:17.837 -0400 OS Version: Mac OS X 10.13.3 (17D47) Report Version: 12 Anonymous UUID: FBE3606C-ABD0-D8A2-E971-ADD1A3955EFC Sleep/Wake UUID: 45EAC198-3478-40FC-B89A-613ECA3EB94A Time Awake Since Boot: 150000 seconds Time Since Wake: 6000 seconds System Integrity Protection: enabled Crashed Thread: 12 Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: EXC_I386_GPFLT Exception Note: EXC_CORPSE_NOTIFY Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler Thread 12 Crashed: 0 libcrypto.35.dylib 0x00007fff51d47ffa ERR_STATE_free + 58 1 libcrypto.35.dylib 0x00007fff51d48fac int_thread_del_item + 252 2 libcrypto.35.dylib 0x00007fff51d47f78 ERR_remove_thread_state + 104 3 libcurl.4.dylib 0x00007fff5205a25b Curl_close + 186 4 libcurl.4.dylib 0x00007fff52075c08 curl_multi_cleanup + 227 5 com.hds.osx.fss.File-Sync 0x000000010cc3e317 CurlHttpClient::~CurlHttpClient() + 263 6 com.hds.osx.fss.File-Sync 0x000000010cd430ab AwRestClient::QueryFileSystemChanges(unsigned long long, std::__1::basic_string, std::__1::allocator > const&, AwFileSystemChangeList&, AwRestResponse&) + 539 7 com.hds.osx.fss.File-Sync 0x000000010ccd9fb7 AwFssMgr::PullRemoteChangesPrivate(unsigned long long, std::__1::basic_string, std::__1::allocator > const&, std::__1::basic_string, std::__1::allocator >&, unsigned long long&, unsigned int&) + 471 8 com.hds.osx.fss.File-Sync 0x000000010ccd9c36 AwFssMgr::PullRemoteChanges(unsigned long long, std::__1::basic_string, std::__1::allocator >&, bool, unsigned int&) + 214 9 com.hds.osx.fss.File-Sync 0x000000010cc72c46 AwController::RemoteNotificationListeningThread() + 2950 10 com.hds.osx.fss.File-Sync 0x000000010cc720ad AwController::RemoteNotificationListeningThread(void*) + 29 11 libsystem_pthread.dylib 0x00007fff539e66c1 _pthread_body + 340 12 libsystem_pthread.dylib 0x00007fff539e656d _pthread_start + 377 13 libsystem_pthread.dylib 0x00007fff539e5c5d thread_start + 13 **Question** 1. Is there a bug in High Sierra that explains this behavior/crash report 2. If not what are the possible causes for this crash ?
Rstack (1 rep)
Mar 23, 2018, 04:02 PM • Last activity: Dec 19, 2018, 11:02 AM
Showing page 1 of 20 total questions