driesvints
commented
3 weeks ago Not super sure but @adrum could this be related to your PR? https://github.com/laravel/valet/pull/1463
Closed rabol closed 2 weeks ago
driesvints
commented
3 weeks ago Not super sure but @adrum could this be related to your PR? https://github.com/laravel/valet/pull/1463
adrum
commented
3 weeks ago Not super sure but @adrum could this be related to your PR? #1463
I'll try to reproduce this.
@rabol What browser are you seeing this error in? Can you confirm if the Laravel CA is trusted in Keychain? It should happen whenever you call valet secure.
rabol
commented
3 weeks ago It happens in Safari and Chrome As far as I can see the CA is trusted, but I still get the error :(
adrum
commented
3 weeks ago @rabol Can you run the following commands and let me know the output?
security verify-cert -c ~/.config/valet/CA/LaravelValetCASelfSigned.pem
security verify-cert -c ~/.config/valet/Certificates/app.test.crt
openssl verify -CAfile ~/.config/valet/CA/LaravelValetCASelfSigned.pem ~/.config/valet/Certificates/app.test.crt
cat ~/.config/valet/Nginx/app.test
curl --insecure -vvI https://app.test 2>&1 | awk 'BEGIN { cert=0 } /^\* SSL connection/ { cert=1 } /^\*/ { if (cert) print }'
Be sure to replace app.test.crt in 2 & 3, and app.test in 4 & 5 with the domain you are experiencing the issue with. Feel free to redact any info in step 4.
balu-lt
commented
3 weeks ago Hey! I’m running into issue as well.
Error: NET::ERR_CERT_DATE_INVALID
Cert Verify Result: CSSMERR_TP_CERT_EXPIREDCert Verify Result: CSSMERR_TP_CERT_EXPIREDO=Laravel Valet CA Self Signed Organization, CN=Laravel Valet CA Self Signed CN, OU=Developers, emailAddress=rootcertificate@laravel.valet
error 10 at 1 depth lookup: certificate has expired
error /Users/balu/.config/valet/Certificates/app.test.crt: verification failed
server {
listen 127.0.0.1:80;
#listen 127.0.0.1:80; # valet loopback
server_name app.test www.app.test *.app.test;
return 301 https://$host$request_uri;
}server { listen 127.0.0.1:443 ssl;
server_name app.test www.app.test *.app.test;
root /;
charset utf-8;
client_max_body_size 512M;
http2 on;
location /41c270e4-5535-4daa-b23e-c269744c2f45/ {
internal;
alias /;
try_files $uri $uri/;
}
ssl_certificate "/Users/balu/.config/valet/Certificates/app.test.crt";
ssl_certificate_key "/Users/balu/.config/valet/Certificates/app.test.key";
location / {
rewrite ^ "/Users/balu/.composer/vendor/laravel/valet/server.php" last;
}
location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt { access_log off; log_not_found off; }
access_log off;
error_log "/Users/balu/.config/valet/Log/nginx-error.log";
error_page 404 "/Users/balu/.composer/vendor/laravel/valet/server.php";
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass "unix:/Users/balu/.config/valet/valet.sock";
fastcgi_index "/Users/balu/.composer/vendor/laravel/valet/server.php";
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME "/Users/balu/.composer/vendor/laravel/valet/server.php";
fastcgi_param PATH_INFO $fastcgi_path_info;
}
location ~ /\.ht {
deny all;
}}
server { listen 127.0.0.1:60;
server_name app.test www.app.test *.app.test;
root /;
charset utf-8;
client_max_body_size 128M;
add_header X-Robots-Tag 'noindex, nofollow, nosnippet, noarchive';
location /41c270e4-5535-4daa-b23e-c269744c2f45/ {
internal;
alias /;
try_files $uri $uri/;
}
location / {
rewrite ^ "/Users/balu/.composer/vendor/laravel/valet/server.php" last;
}
location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt { access_log off; log_not_found off; }
access_log off;
error_log "/Users/balu/.config/valet/Log/nginx-error.log";
error_page 404 "/Users/balu/.composer/vendor/laravel/valet/server.php";
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass "unix:/Users/balu/.config/valet/valet.sock";
fastcgi_index "/Users/balu/.composer/vendor/laravel/valet/server.php";
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME "/Users/balu/.composer/vendor/laravel/valet/server.php";
fastcgi_param PATH_INFO $fastcgi_path_info;
}
location ~ /\.ht {
deny all;
}}
5.Fix will be included in tomorrow's release. Thanks everyone!
rabol
commented
2 weeks ago Sorry, the new version did not solve the issue for me Note: I have used the
valet trustCommand so I do not get prompted for passwords. I tried to turn it off, then I get prompted for passwrd, but the result is the same.
here is the output of the 5 command that @adrum asked for
➜ ~ security verify-cert -c ~/.config/valet/CA/LaravelValetCASelfSigned.pem
...certificate verification successful.
➜ ~ security verify-cert -c ~/.config/valet/CA/LaravelValetCASelfSigned.pem
...certificate verification successful.
➜ ~ security verify-cert -c ~/.config/valet/Certificates/sign.test.crt
Cert Verify Result: CSSMERR_TP_NOT_TRUSTED
➜ ~ openssl verify -CAfile ~/.config/valet/CA/LaravelValetCASelfSigned.pem ~/.config/valet/Certificates/app.test.crt
Could not open file or uri for loading certificate file from /Users/rabol/.config/valet/Certificates/app.test.crt: No such file or directory
➜ ~ openssl verify -CAfile ~/.config/valet/CA/LaravelValetCASelfSigned.pem ~/.config/valet/Certificates/sign.test.crt
/Users/rabol/.config/valet/Certificates/sign.test.crt: OK
➜ ~ cat ~/.config/valet/Nginx/sign.test
server {
listen 127.0.0.1:80;
#listen 127.0.0.1:80; # valet loopback
server_name sign.test www.sign.test *.sign.test;
return 301 https://$host$request_uri;
}
server {
listen 127.0.0.1:443 ssl;
#listen VALET_LOOPBACK:443 ssl; # valet loopback
server_name sign.test www.sign.test *.sign.test;
root /;
charset utf-8;
client_max_body_size 512M;
http2 on;
location /41c270e4-5535-4daa-b23e-c269744c2f45/ {
internal;
alias /;
try_files $uri $uri/;
}
ssl_certificate "/Users/rabol/.config/valet/Certificates/sign.test.crt";
ssl_certificate_key "/Users/rabol/.config/valet/Certificates/sign.test.key";
location / {
rewrite ^ "/Users/rabol/.composer/vendor/laravel/valet/server.php" last;
}
location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt { access_log off; log_not_found off; }
access_log off;
error_log "/Users/rabol/.config/valet/Log/nginx-error.log";
error_page 404 "/Users/rabol/.composer/vendor/laravel/valet/server.php";
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass "unix:/Users/rabol/.config/valet/valet.sock";
fastcgi_index "/Users/rabol/.composer/vendor/laravel/valet/server.php";
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME "/Users/rabol/.composer/vendor/laravel/valet/server.php";
fastcgi_param PATH_INFO $fastcgi_path_info;
}
location ~ /\.ht {
deny all;
}
}
server {
listen 127.0.0.1:60;
#listen 127.0.0.1:60; # valet loopback
server_name sign.test www.sign.test *.sign.test;
root /;
charset utf-8;
client_max_body_size 128M;
add_header X-Robots-Tag 'noindex, nofollow, nosnippet, noarchive';
location /41c270e4-5535-4daa-b23e-c269744c2f45/ {
internal;
alias /;
try_files $uri $uri/;
}
location / {
rewrite ^ "/Users/rabol/.composer/vendor/laravel/valet/server.php" last;
}
location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt { access_log off; log_not_found off; }
access_log off;
error_log "/Users/rabol/.config/valet/Log/nginx-error.log";
error_page 404 "/Users/rabol/.composer/vendor/laravel/valet/server.php";
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass "unix:/Users/rabol/.config/valet/valet.sock";
fastcgi_index "/Users/rabol/.composer/vendor/laravel/valet/server.php";
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME "/Users/rabol/.composer/vendor/laravel/valet/server.php";
fastcgi_param PATH_INFO $fastcgi_path_info;
}
location ~ /\.ht {
deny all;
}
}
➜ ~
➜ ~
➜ ~ curl --insecure -vvI https://sign.test 2>&1 | awk 'BEGIN { cert=0 } /^\* SSL connection/ { cert=1 } /^\*/ { if (cert) print }'
* SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 / [blank] / UNDEF
* ALPN: server accepted h2
* Server certificate:
* subject: CN=sign.test; emailAddress=sign.test@laravel.valet
* start date: Jun 26 06:35:50 2024 GMT
* expire date: Jun 29 06:35:50 2025 GMT
* issuer: O=Laravel Valet CA Self Signed Organization; CN=Laravel Valet CA Self Signed CN; OU=Developers; emailAddress=rootcertificate@laravel.valet
* SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://sign.test/
* [HTTP/2] [1] [:method: HEAD]
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: sign.test]
* [HTTP/2] [1] [:path: /]
* [HTTP/2] [1] [user-agent: curl/8.6.0]
* [HTTP/2] [1] [accept: */*]
* Connection #0 to host sign.test left intact@adrum ^
adrum
commented
2 weeks ago Hey! I’m running into issue as well.
Error:
NET::ERR_CERT_DATE_INVALID
Running commands:
Cert Verify Result: CSSMERR_TP_CERT_EXPIREDCert Verify Result: CSSMERR_TP_CERT_EXPIREDO=Laravel Valet CA Self Signed Organization, CN=Laravel Valet CA Self Signed CN, OU=Developers, emailAddress=rootcertificate@laravel.valet error 10 at 1 depth lookup: certificate has expired error /Users/balu/.config/valet/Certificates/app.test.crt: verification failedserver { listen 127.0.0.1:80; #listen 127.0.0.1:80; # valet loopback server_name app.test www.app.test *.app.test; return 301 https://$host$request_uri; } server { listen 127.0.0.1:443 ssl; #listen VALET_LOOPBACK:443 ssl; # valet loopback server_name app.test www.app.test *.app.test; root /; charset utf-8; client_max_body_size 512M; http2 on; location /41c270e4-5535-4daa-b23e-c269744c2f45/ { internal; alias /; try_files $uri $uri/; } ssl_certificate "/Users/balu/.config/valet/Certificates/app.test.crt"; ssl_certificate_key "/Users/balu/.config/valet/Certificates/app.test.key"; location / { rewrite ^ "/Users/balu/.composer/vendor/laravel/valet/server.php" last; } location = /favicon.ico { access_log off; log_not_found off; } location = /robots.txt { access_log off; log_not_found off; } access_log off; error_log "/Users/balu/.config/valet/Log/nginx-error.log"; error_page 404 "/Users/balu/.composer/vendor/laravel/valet/server.php"; location ~ [^/]\.php(/|$) { fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass "unix:/Users/balu/.config/valet/valet.sock"; fastcgi_index "/Users/balu/.composer/vendor/laravel/valet/server.php"; include fastcgi_params; fastcgi_param SCRIPT_FILENAME "/Users/balu/.composer/vendor/laravel/valet/server.php"; fastcgi_param PATH_INFO $fastcgi_path_info; } location ~ /\.ht { deny all; } } server { listen 127.0.0.1:60; #listen 127.0.0.1:60; # valet loopback server_name app.test www.app.test *.app.test; root /; charset utf-8; client_max_body_size 128M; add_header X-Robots-Tag 'noindex, nofollow, nosnippet, noarchive'; location /41c270e4-5535-4daa-b23e-c269744c2f45/ { internal; alias /; try_files $uri $uri/; } location / { rewrite ^ "/Users/balu/.composer/vendor/laravel/valet/server.php" last; } location = /favicon.ico { access_log off; log_not_found off; } location = /robots.txt { access_log off; log_not_found off; } access_log off; error_log "/Users/balu/.config/valet/Log/nginx-error.log"; error_page 404 "/Users/balu/.composer/vendor/laravel/valet/server.php"; location ~ [^/]\.php(/|$) { fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass "unix:/Users/balu/.config/valet/valet.sock"; fastcgi_index "/Users/balu/.composer/vendor/laravel/valet/server.php"; include fastcgi_params; fastcgi_param SCRIPT_FILENAME "/Users/balu/.composer/vendor/laravel/valet/server.php"; fastcgi_param PATH_INFO $fastcgi_path_info; } location ~ /\.ht { deny all; } }* SSL connection using TLSv1.3 / AEAD-AES256-GCM-SHA384 * ALPN: server accepted h2 * Server certificate: * subject: CN=app.test; emailAddress=app.test@laravel.valet * start date: Jun 24 13:45:30 2024 GMT * expire date: Jun 27 13:45:30 2025 GMT * issuer: O=Laravel Valet CA Self Signed Organization; CN=Laravel Valet CA Self Signed CN; OU=Developers; emailAddress=rootcertificate@laravel.valet * SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway. * using HTTP/2 * [HTTP/2] [1] OPENED stream for https://app.test/ * [HTTP/2] [1] [:method: HEAD] * [HTTP/2] [1] [:scheme: https] * [HTTP/2] [1] [:authority: app.test] * [HTTP/2] [1] [:path: /] * [HTTP/2] [1] [user-agent: curl/8.4.0] * [HTTP/2] [1] [accept: */*] * Connection #0 to host app.test left intact
Hey @balu-lt -- Your issue is a separate issue, which means your cert expired. You should be able run valet renew to get back into a working state. Additionally, you can run valet secured to see a list of all secured sites and their expiration dates. If prompted for typing in your password for the Keychain Access prompt, be sure to approve it so it can trust the CA. This is only required once after upgrading to Valet 4.7.0 or later. Before 4.7.0, you would have needed to type in your password for every new cert.
Note: I also found out the hard way Valet certs expire and wanted to add visibility to this via https://github.com/laravel/valet/pull/1461, which introduces the valet secured command.
adrum
commented
2 weeks ago Hey @rabol After upgrading to Valet 4.7.1, did you try running valet renew, valet secure, or valet install? This is required, as it will add the CA to your macOS Keychain Access store if needed.
The valet trust command does not impact removing the password requirement when interacting with the keychain. That's only there for sudo related tasks like restarting services on privileged ports like NGINX and dnsmasq. You should see the GUI prompt as shown in my previous message.
Just for good measure, can you run the following commands?
valet -Vvalet unsecurevalet secure security verify-cert -c ~/.config/valet/CA/LaravelValetCASelfSigned.pemopenssl verify -CAfile ~/.config/valet/CA/LaravelValetCASelfSigned.pem ~/.config/valet/Certificates/app.test.crtcurl --insecure -vvI https://app.test 2>&1 | awk 'BEGIN { cert=0 } /^\* SSL connection/ { cert=1 } /^\*/ { if (cert) print }'Additionally, you should see this in the Keychain Access app.
Please post the output after running these commands.
You should see something like the following:
austin@austins-Virtual-Machine ~ % valet -V
Password:
Laravel Valet 4.7.1
austin@austins-Virtual-Machine app % valet unsecure
Restarting nginx...
The [app.test] site will now serve traffic over HTTP.
austin@austins-Virtual-Machine app % valet secure
Restarting nginx...
The [app.test] site has been secured with a fresh TLS certificate.
austin@austins-Virtual-Machine app % security verify-cert -c ~/.config/valet/CA/LaravelValetCASelfSigned.pem
...certificate verification successful.
austin@austins-Virtual-Machine app % security verify-cert -c ~/.config/valet/Certificates/app.test.crt
...certificate verification successful.
austin@austins-Virtual-Machine app % openssl verify -CAfile ~/.config/valet/CA/LaravelValetCASelfSigned.pem ~/.config/valet/Certificates/app.test.crt
/Users/austin/.config/valet/Certificates/app.test.crt: OK
austin@austins-Virtual-Machine app % curl --insecure -vvI https://app.test 2>&1 | awk 'BEGIN { cert=0 } /^\* SSL connection/ { cert=1 } /^\*/ { if (cert) print }'
* SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 / [blank] / UNDEF
* ALPN: server accepted h2
* Server certificate:
* subject: CN=app.test; emailAddress=app.test@laravel.valet
* start date: Jun 27 23:17:09 2024 GMT
* expire date: Jun 30 23:17:09 2025 GMT
* issuer: O=Laravel Valet CA Self Signed Organization; CN=Laravel Valet CA Self Signed CN; OU=Developers; emailAddress=rootcertificate@laravel.valet
* SSL certificate verify ok.
* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://app.test/
* [HTTP/2] [1] [:method: HEAD]
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: app.test]
* [HTTP/2] [1] [:path: /]
* [HTTP/2] [1] [user-agent: curl/8.6.0]
* [HTTP/2] [1] [accept: */*]
* Connection #0 to host app.test left intactIf it still isn't working, I suggest rebooting your machine to ensure a rouge NGINX process isn't around with old certs being served.
rabol
commented
2 weeks ago @adrum I think I have done all combinations of secure/unsecure, renew :)
and I would like to point out - one more time - that I am not prompted for password, after running the valet trust command.
Right now i have done:
valet unsecure --all
valet uninstallreboot machine
then:
valet install
go to my app folder
valet securesame error
reboot machine same error
if I open the site in firefox I get another error
Error code: SEC_ERROR_BAD_SIGNATUREoutput of commands:
app valet -V
Laravel Valet 4.7.1app valet unsecure
Restarting nginx...
The [app.test] site will now serve traffic over HTTP.alet secure
Restarting nginx...
The [app.test] site has been secured with a fresh TLS certificate.security verify-cert -c ~/.config/valet/CA/LaravelValetCASelfSigned.pem
...certificate verification successful.app openssl verify -CAfile ~/.config/valet/CA/LaravelValetCASelfSigned.pem ~/.config/valet/Certificates/app.test.crt
/Users/rabol/.config/valet/Certificates/app.test.crt: OKapp openssl verify -CAfile ~/.config/valet/CA/LaravelValetCASelfSigned.pem ~/.config/valet/Certificates/app.test.crt
/Users/rabol/.config/valet/Certificates/app.test.crt: OK
➜ app curl --insecure -vvI https://app.test 2>&1 | awk 'BEGIN { cert=0 } /^\* SSL connection/ { cert=1 } /^\*/ { if (cert) print }'
* SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 / [blank] / UNDEF
* ALPN: server accepted h2
* Server certificate:
* subject: CN=app.test; emailAddress=app.test@laravel.valet
* start date: Jun 28 03:57:35 2024 GMT
* expire date: Jul 1 03:57:35 2025 GMT
* issuer: O=Laravel Valet CA Self Signed Organization; CN=Laravel Valet CA Self Signed CN; OU=Developers; emailAddress=rootcertificate@laravel.valet
* SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://app.test/
* [HTTP/2] [1] [:method: HEAD]
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: app.test]
* [HTTP/2] [1] [:path: /]
* [HTTP/2] [1] [user-agent: curl/8.6.0]
* [HTTP/2] [1] [accept: */*]
* Connection #0 to host app.test left intactWhat I have noticed that in your screenshot of the keychain, the certificate is in the 'login' section, mine is in the system section
I have not tried to do valet uninstall and the remove the certificate files and remove the certificate from keychain
adrum
commented
2 weeks ago Hey @rabol, Thank you for sending that back. My certificate is actually in the System, too. It's indicated in the last column in the table. It appears searching the Login keychain will also pull in matching System items.
Can you try this next?
sudo security delete-certificate -c "Laravel Valet CA Self Signed CN" /Library/Keychains/System.keychain -- This will remove the cert from your System Keychain.sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/.config/valet/CA/LaravelValetCASelfSigned.pem -- This will add it backvalet unsecurevalet secureYou should be prompted in the GUI on step 3.
rabol
commented
2 weeks ago Eureka!!
Now it works - thanks a lot.
driesvints
commented
2 weeks ago Glad this was solved, thanks all 👍
Description
I have just installed the latest version of Valet
I then did a
Valet installand now I get this error on all .test sitesNET::ERR_CERT_AUTHORITY_INVALID
Steps To Reproduce
install v 4.7.0 do a valet install
It will then renew all certificates
Diagnosis
sw_vers
valet --version
cat ~/.config/valet/config.json
{ "tld": "test", "loopback": "127.0.0.1", "paths": [ "/Users/rabol/code/web" ], "share-tool": "expose" }cat ~/.composer/composer.json
{ "require": { "laravel/valet": "^4.0", "laravel/installer": "^5.0" } }composer global diagnose
composer global outdated
ls -al /etc/sudoers.d/
brew config
brew services list
brew list --formula --versions | grep -E "(php|nginx|dnsmasq|mariadb|mysql|mailhog|openssl)(@\d\..*)?\s"
brew outdated
brew tap
php -v
PHP 8.3.8 (cli) (built: Jun 4 2024 14:53:17) (NTS) Copyright (c) The PHP Group Zend Engine v4.3.8, Copyright (c) Zend Technologies with Zend OPcache v8.3.8, Copyright (c), by Zend Technologies with Xdebug v3.3.1, Copyright (c) 2002-2023, by Derick Rethanswhich -a php
php --ini
nginx -v
curl --version
php --ri curl
/opt/homebrew/bin/ngrok version
ls -al ~/.ngrok2
brew info nginx
==> nginx: stable 1.27.0 (bottled), HEAD HTTP(S) server and reverse proxy, and IMAP/POP3 proxy server https://nginx.org/ Installed /opt/homebrew/Cellar/nginx/1.27.0 (27 files, 2.5MB) * Poured from bottle using the formulae.brew.sh API on 2024-06-01 at 07:43:10 From: https://github.com/Homebrew/homebrew-core/blob/HEAD/Formula/n/nginx.rb License: BSD-2-Clause ==> Dependencies Required: openssl@3, pcre2 ==> Options --HEAD Install HEAD version ==> Caveats Docroot is: /opt/homebrew/var/www The default port has been set in /opt/homebrew/etc/nginx/nginx.conf to 8080 so that nginx can run without sudo. nginx will load all files in /opt/homebrew/etc/nginx/servers/. To restart nginx after an upgrade: brew services restart nginx Or, if you don't want/need a background service you can just run: /opt/homebrew/opt/nginx/bin/nginx -g daemon\ off\; ==> Analytics install: 17,094 (30 days), 45,275 (90 days), 167,484 (365 days) install-on-request: 17,011 (30 days), 45,095 (90 days), 167,006 (365 days) build-error: 4 (30 days)brew info php
==> php: stable 8.3.8 (bottled), HEAD General-purpose scripting language https://www.php.net/ Installed /opt/homebrew/Cellar/php/8.3.8 (524 files, 88.8MB) * Poured from bottle using the formulae.brew.sh API on 2024-06-16 at 11:39:52 From: https://github.com/Homebrew/homebrew-core/blob/HEAD/Formula/p/php.rb License: PHP-3.01 ==> Dependencies Build: httpd, pkg-config Required: apr, apr-util, argon2, aspell, autoconf, curl, freetds, gd, gettext, gmp, icu4c, krb5, libpq, libsodium, libzip, oniguruma, openldap, openssl@3, pcre2, sqlite, tidy-html5, unixodbc ==> Options --HEAD Install HEAD version ==> Caveats To enable PHP in Apache add the following to httpd.conf and restart Apache: LoadModule php_module /opt/homebrew/opt/php/lib/httpd/modules/libphp.so
SetHandler application/x-httpd-php
Finally, check DirectoryIndex includes index.php
DirectoryIndex index.php index.html
The php.ini and php-fpm.ini file can be found in:
/opt/homebrew/etc/php/8.3/
To restart php after an upgrade:
brew services restart php
Or, if you don't want/need a background service you can just run:
/opt/homebrew/opt/php/sbin/php-fpm --nodaemonize
==> Analytics
install: 51,671 (30 days), 157,282 (90 days), 684,816 (365 days)
install-on-request: 47,690 (30 days), 146,377 (90 days), 639,316 (365 days)
build-error: 38 (30 days)brew info openssl
openssl version -a
openssl ciphers
sudo nginx -t
which -a php-fpm
/opt/homebrew/opt/php/sbin/php-fpm -v
PHP 8.3.8 (fpm-fcgi) (built: Jun 4 2024 14:53:17) Copyright (c) The PHP Group Zend Engine v4.3.8, Copyright (c) Zend Technologies with Zend OPcache v8.3.8, Copyright (c), by Zend Technologies with Xdebug v3.3.1, Copyright (c) 2002-2023, by Derick Rethanssudo /opt/homebrew/opt/php/sbin/php-fpm -y /opt/homebrew/etc/php/8.3/php-fpm.conf --test
ls -al ~/Library/LaunchAgents | grep homebrew
ls -al /Library/LaunchAgents | grep homebrew
ls -al /Library/LaunchDaemons | grep homebrew
ls -al /Library/LaunchDaemons | grep "com.laravel.valet."
ls -aln /etc/resolv.conf
cat /etc/resolv.conf
ifconfig lo0
sh -c 'echo "------\n/opt/homebrew/etc/nginx/valet/valet.conf\n---\n"; cat /opt/homebrew/etc/nginx/valet/valet.conf | grep -n "# valet loopback"; echo "\n------\n"'
sh -c 'for file in ~/.config/valet/dnsmasq.d/*; do echo "------\n~/.config/valet/dnsmasq.d/$(basename $file)\n---\n"; cat $file; echo "\n------\n"; done'
sh -c 'for file in ~/.config/valet/nginx/*; do echo "------\n~/.config/valet/nginx/$(basename $file)\n---\n"; cat $file | grep -n "# valet loopback"; echo "\n------\n"; done'