Brian2099 commented 1 week ago

I've been running Strawberry Perl in a windows environment since 2015. Twice a year, I upgrade the CPAN modules and if necessary, Strawberry Perl.

I'm developing on a Windows 10 laptop. Strawberry Perl. As of 1/1/2024, ver 5.38.0.1. As of 6/27/2024 I have ver 5.38.2.2

Yesterday, June 27, 2024, I tried installing LWP::Protocol::https via the cpanm tool, but it failed several tests. The version it tried to load was 6.14.

I then did a force install. I tried running my perl script, but it abended with http error 500. Can't connect to aaa.bbb.com:443 (certificate verify failed)

Per google search results, I changed the parameter on my HTTP call to ssl_opts => { verify_hostname => 0 }, but that didn't work.

I also tried this line of code, but the results were the same: $ENV{'PERL_LWP_SSL_VERIFY_HOSTNAME'} = 0;

I verified that the cert for aaa.bbb.com is valid. I also ran a windows version of the Perl script and it ran fine.

I realized that my Strawberry Perl was a bit out of date, so installed the most recent version.

Then I uninstalled LWP::Protocol::https

Next, I tried installing LWP::Protocol::https again via the cpanm tool, but it failed the same tests as before.

Went to GitHub and downloaded LWP-Protocol-https-6.12.tar.gz, which is two releases back. Tried to do an install and got the same certificate error.

Any advice would be appreciated!

+++++++++++++++++++++++++++++++++++++++++++++++++ ++ Here is the screen comments from the install:

C:\myStuff\Perl>cpanm LWP::Protocol::https --> Working on LWP::Protocol::https Fetching http://www.cpan.org/authors/id/O/OA/OALDERS/LWP-Protocol-https-6.14.tar.gz ... OK Configuring LWP-Protocol-https-6.14 ... OK Building and testing LWP-Protocol-https-6.14 ... FAIL ! Installing LWP::Protocol::https failed. See C:\Users\BRIAN@@@.cpanm\work\1719595378.23088\build.log for details. Retry with --force to force install it.

C:\myStuff\Perl>

+++++++++++++++++++++++++++++++++++++++++++++++++ ++ Here is the build.log:

cpanm (App::cpanminus) 1.7047 on perl 5.038002 built for MSWin32-x64-multi-thread Work directory is C:\Users\BRIAN@@@/.cpanm/work/1719595378.23088 You have make C:\Strawberry\c\bin\gmake.exe You have LWP 6.72 Falling back to Archive::Tar 3.02 Searching LWP::Protocol::https () on cpanmetadb ... --> Working on LWP::Protocol::https Fetching http://www.cpan.org/authors/id/O/OA/OALDERS/LWP-Protocol-https-6.14.tar.gz -> OK Unpacking LWP-Protocol-https-6.14.tar.gz Entering LWP-Protocol-https-6.14 Checking configure dependencies from META.json Checking if you have ExtUtils::MakeMaker 6.58 ... Yes (7.70) Configuring LWP-Protocol-https-6.14 Running Makefile.PL Checking if your kit is complete... Looks good Generating a gmake-style Makefile Writing Makefile for LWP::Protocol::https Writing MYMETA.yml and MYMETA.json -> OK Checking dependencies from MYMETA.json ... Checking if you have File::Spec 0 ... Yes (3.88) Checking if you have Test::Needs 0.002010 ... Yes (0.002010) Checking if you have warnings 0 ... Yes (1.65) Checking if you have Test::More 0.96 ... Yes (1.302198) Checking if you have LWP::UserAgent 6.06 ... Yes (6.72) Checking if you have ExtUtils::MakeMaker 0 ... Yes (7.70) Checking if you have Test::RequiresInternet 0 ... Yes (0.05) Checking if you have Socket 0 ... Yes (2.037) Checking if you have LWP::Protocol::http 0 ... Yes (6.72) Checking if you have IO::Socket::SSL 1.970 ... Yes (2.085) Checking if you have base 0 ... Yes (2.27) Checking if you have Net::HTTPS 6 ... Yes (6.23) Checking if you have IO::Select 0 ... Yes (1.52) Checking if you have File::Temp 0 ... Yes (0.2311) Checking if you have IO::Socket::SSL::Utils 0 ... Yes (2.015) Checking if you have strict 0 ... Yes (1.12) Checking if you have IO::Socket::INET 0 ... Yes (1.52) Building and testing LWP-Protocol-https-6.14 cp lib/LWP/Protocol/https.pm blib\lib\LWP\Protocol\https.pm "C:\Strawberry\perl\bin\perl.exe" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef Test::Harness::Switches; test_harness(0, 'blib\lib', 'blib\arch')" t/.t

Versions for all modules listed in MYMETA.json (including optional ones):

=== Configure Requires ===

Module Want Have

------------------- -------- --------

ExtUtils::MakeMaker any 7.70

perl 5.008001 5.038002

=== Configure Suggests ===

Module Want Have

-------- ------- ----

JSON::PP 2.27300 4.16

=== Build Requires ===

Module Want Have

------------------- ---- ----

ExtUtils::MakeMaker any 7.70

=== Test Requires ===

Module Want Have

---------------------- -------- --------

ExtUtils::MakeMaker any 7.70

File::Spec any 3.88

File::Temp any 0.2311

IO::Select any 1.52

IO::Socket::INET any 1.52

IO::Socket::SSL 1.970 2.085

IO::Socket::SSL::Utils any 2.015

LWP::UserAgent 6.06 6.72

Socket any 2.037

Test::More 0.96 1.302198

Test::Needs 0.002010 0.002010

Test::RequiresInternet any 0.05

perl 5.008001 5.038002

warnings any 1.65

=== Test Recommends ===

Module Want Have

---------- -------- --------

CPAN::Meta 2.120900 2.150010

=== Runtime Requires ===

Module Want Have

------------------- -------- --------

IO::Socket::SSL 1.970 2.085

LWP::Protocol::http any 6.72

LWP::UserAgent 6.06 6.72

Net::HTTPS 6 6.23

base any 2.27

perl 5.008001 5.038002

strict any 1.12

=== Other Modules ===

Module Have

----------- ----

Net::SSLeay 1.94

t/00-report-prereqs.t .. ok

path to openssl: C:\Strawberry\c\bin\openssl.EXE

# stdout: OpenSSL 1.1.1q  5 Jul 2022
# Net::SSLeay::OPENSSL_VERSION_NUMBER() 0x1010111f
# IO::Select 1.52
# IO::Socket::INET 1.52
# IO::Socket::SSL 2.085
# IO::Socket::SSL::Utils 2.015
# Socket 2.037

t/diag.t ............... ok

#   Failed test 'success status'
#   at t/example.t line 19.

#   Failed test 'have header Client-SSL-Socket-Class'
#   at t/example.t line 29.

#   Failed test 'have header Client-SSL-Cipher'
#   at t/example.t line 44.

#   Failed test 'found expected document content'
#   at t/example.t line 46.
#                   'Can't connect to www.example.com:443 (certificate verify failed)
# 
# SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed at C:/Strawberry/perl/vendor/lib/LWP/Protocol/http.pm line 50.
# '
#     doesn't match '(?^:Example Domain)'
# Looks like you failed 4 tests of 6.

Failed test 'Request GET https://www.example.com'

at t/example.t line 47.

#   Failed test 'success status'
#   at t/example.t line 54.
# Looks like you failed 1 test of 2.

Failed test 'Check for warnings from GET https://www.example.com (RT #81948)'

at t/example.t line 57.

Looks like you failed 2 tests of 2.

t/example.t ............ Dubious, test returned 2 (wstat 512, 0x200) Failed 2/2 subtests t/https_proxy.t ........ ok

Test Summary Report

t/example.t (Wstat: 512 (exited 2) Tests: 2 Failed: 2) Failed tests: 1-2 Non-zero exit status: 2 Files=4, Tests=62, 3 wallclock secs ( 0.01 usr + 0.05 sys = 0.06 CPU) Result: FAIL Failed 1/4 test programs. 2/62 subtests failed. gmake: *** [makefile:889: test_dynamic] Error 255 -> FAIL Installing LWP::Protocol::https failed. See C:\Users\BRIAN@@@.cpanm\work\1719595378.23088\build.log for details. Retry with --force to force install it.

oalders commented 1 week ago

There was a change in v6.11 https://metacpan.org/release/OALDERS/LWP-Protocol-https-6.14/source/Changes#L18

Are you able to install 6.10?

Brian2099 commented 1 week ago

Thank you for the very quick response. I was able to find version 6.10, download and then install it. My Perl script is working now! Thank you very much!!! I hope someone provides a fix for the certificate issue before this module becomes too far out of date.

oalders commented 1 week ago

Are you able to install the latest version if you upgrade your Mozilla::CA?

Brian2099 commented 1 week ago

I checked and see that I am using the latest version of Firefox – #127

From: Olaf Alders @.> Sent: Friday, June 28, 2024 5:40 PM To: libwww-perl/LWP-Protocol-https @.> Cc: Brian Ulmer @.>; Author @.> Subject: [EXTERNAL]: Re: [libwww-perl/LWP-Protocol-https] Install fails with certificate verify failed (Issue #80)

CAUTION: This email originated from outside of the Federal Communications Commission. Do not click on links or open attachments unless you recognize the sender and trust the content to be safe. If you suspect this is a phishing attempt, please use the 'Report Message' feature in Microsoft Outlook or forward the email to the NSOC.

Are you able to install the latest version if you upgrade your Mozilla::CA?

— Reply to this email directly, view it on GitHubhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_libwww-2Dperl_LWP-2DProtocol-2Dhttps_issues_80-23issuecomment-2D2197694220&d=DwMFaQ&c=y0h0omCe0jAUGr4gAQ02Fw&r=mE7ADx4GP-4OaK3o1VILOkiqEl8-npXWakx9Szdzzv4&m=EhzFT1Z0eP3EoTJbIHjHs2Zt0WlCTqC0PHqCpg5leW_DZuzaQ_e-8ycAs1hqyKJV&s=xULj1psFJQgv5-oycXKX3JDaQ5veGCcDKD9bcldp_9U&e=, or unsubscribehttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_AANGSHF4WUTU5MYFF6TWGL3ZJXJZTAVCNFSM6AAAAABKCMH4E6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCOJXGY4TIMRSGA&d=DwMFaQ&c=y0h0omCe0jAUGr4gAQ02Fw&r=mE7ADx4GP-4OaK3o1VILOkiqEl8-npXWakx9Szdzzv4&m=EhzFT1Z0eP3EoTJbIHjHs2Zt0WlCTqC0PHqCpg5leW_DZuzaQ_e-8ycAs1hqyKJV&s=kwXWj8-Jpx77-tYUW1yyn0eYgWMkEju_NuXZDQEk5lE&e=. You are receiving this because you authored the thread.Message ID: @.**@.>>

karenetheridge commented 1 week ago

I checked and see that I am using the latest version of Firefox – #127

He meant the cpan module -- https://metacpan.org/pod/Mozilla::CA

Brian2099 commented 1 week ago

Karen,

Thank you for the clarification. Mozilla::CA was out of date, so I did that install and followed up with another install of LWP::Protocol::https. Here are the results. The subsequent install of LWP::Protocol::https fails with slightly different errors. Any information on how to proceed would be appreciated.

Thank you, Brian

C:\myStuff\Perl>cpanm Mozilla::CA --> Working on Mozilla::CA Fetching http://www.cpan.org/authors/id/L/LW/LWP/Mozilla-CA-20240313.tar.gz ... OK Configuring Mozilla-CA-20240313 ... OK Building and testing Mozilla-CA-20240313 ... OK Successfully installed Mozilla-CA-20240313 (upgraded from 20230821) 1 distribution installed

C:\myStuff\Perl>cpanm LWP::Protocol::https --> Working on LWP::Protocol::https Fetching http://www.cpan.org/authors/id/O/OA/OALDERS/LWP-Protocol-https-6.14.tar.gz ... OK Configuring LWP-Protocol-https-6.14 ... OK Building and testing LWP-Protocol-https-6.14 ... FAIL ! Installing LWP::Protocol::https failed. See C:\Users\BRIAN~1.cpanm\work\1719848586.30096\build.log for details. Retry with --force to force install it.

C:\myStuff\Zendesk\Perl>

Here is some information from the build.log file pertaining to the errors:

#   Failed test 'success status'
#   at t/example.t line 19.

#   Failed test 'have header Client-SSL-Socket-Class'
#   at t/example.t line 29.

#   Failed test 'have header Client-SSL-Cipher'
#   at t/example.t line 44.

#   Failed test 'found expected document content'
#   at t/example.t line 46.
#                   'Can't connect to www.example.com:443<http://www.example.com:443> (certificate verify failed)
#
# SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed at C:/Strawberry/perl/vendor/lib/LWP/Protocol/http.pm line 50.
# '
#     doesn't match '(?^:Example Domain)'
# Looks like you failed 4 tests of 6.

From: Karen Etheridge @.> Sent: Monday, July 1, 2024 11:37 AM To: libwww-perl/LWP-Protocol-https @.> Cc: Brian Ulmer @.>; Author @.> Subject: [EXTERNAL]: Re: [libwww-perl/LWP-Protocol-https] Install fails with certificate verify failed (Issue #80)

CAUTION: This email originated from outside of the Federal Communications Commission. Do not click on links or open attachments unless you recognize the sender and trust the content to be safe. If you suspect this is a phishing attempt, please use the 'Report Message' feature in Microsoft Outlook or forward the email to the NSOC.

I checked and see that I am using the latest version of Firefox – #127

He meant the cpan module -- https://metacpan.org/pod/Mozilla::CA https://urldefense.proofpoint.com/v2/url?u=https-3A__metacpan.org_pod_Mozilla-3A-3ACA&d=DwMFaQ&c=y0h0omCe0jAUGr4gAQ02Fw&r=mE7ADx4GP-4OaK3o1VILOkiqEl8-npXWakx9Szdzzv4&m=wTEnN-d5QJdEET0w5BRPr5wPyhQgNIt1ForQPpwJSmW2s5hIEGTQFyyocYmk0yHt&s=X-tsuTbLJGQuNyrQAbAVQ9-DwLqM855Q6-qq4xIBDJQ&e=

— Reply to this email directly, view it on GitHubhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_libwww-2Dperl_LWP-2DProtocol-2Dhttps_issues_80-23issuecomment-2D2200478137&d=DwMFaQ&c=y0h0omCe0jAUGr4gAQ02Fw&r=mE7ADx4GP-4OaK3o1VILOkiqEl8-npXWakx9Szdzzv4&m=wTEnN-d5QJdEET0w5BRPr5wPyhQgNIt1ForQPpwJSmW2s5hIEGTQFyyocYmk0yHt&s=yPphj2v8tNzyR1k--aokep1EIKktiBB2kvvpIiiHTwc&e=, or unsubscribehttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_AANGSHEX2Z3TBUUBAIKW4U3ZKFZQFAVCNFSM6AAAAABKCMH4E6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMBQGQ3TQMJTG4&d=DwMFaQ&c=y0h0omCe0jAUGr4gAQ02Fw&r=mE7ADx4GP-4OaK3o1VILOkiqEl8-npXWakx9Szdzzv4&m=wTEnN-d5QJdEET0w5BRPr5wPyhQgNIt1ForQPpwJSmW2s5hIEGTQFyyocYmk0yHt&s=zNLr5BB5ojgm0mMlu3C9McMlctwwFIMxRqDRCS131KM&e=. You are receiving this because you authored the thread.Message ID: @.**@.>>

Brian2099 commented 1 week ago

FYI, I also checked and see that I have the most current versions of IO::Socket::SSL and Crypt::SSLeay

oalders commented 1 week ago

@noxxi, any idea what might be going on here?

libwww-perl / LWP-Protocol-https

Install fails with certificate verify failed #80

Versions for all modules listed in MYMETA.json (including optional ones):

=== Configure Requires ===

Module Want Have

------------------- -------- --------

ExtUtils::MakeMaker any 7.70

perl 5.008001 5.038002

=== Configure Suggests ===

Module Want Have

-------- ------- ----

JSON::PP 2.27300 4.16

=== Build Requires ===

Module Want Have

------------------- ---- ----

ExtUtils::MakeMaker any 7.70

=== Test Requires ===

Module Want Have

---------------------- -------- --------

ExtUtils::MakeMaker any 7.70

File::Spec any 3.88

File::Temp any 0.2311

IO::Select any 1.52

IO::Socket::INET any 1.52

IO::Socket::SSL 1.970 2.085

IO::Socket::SSL::Utils any 2.015

LWP::UserAgent 6.06 6.72

Socket any 2.037

Test::More 0.96 1.302198

Test::Needs 0.002010 0.002010

Test::RequiresInternet any 0.05

perl 5.008001 5.038002

warnings any 1.65

=== Test Recommends ===

Module Want Have

---------- -------- --------

CPAN::Meta 2.120900 2.150010

=== Runtime Requires ===

Module Want Have

------------------- -------- --------

IO::Socket::SSL 1.970 2.085

LWP::Protocol::http any 6.72

LWP::UserAgent 6.06 6.72

Net::HTTPS 6 6.23

base any 2.27

perl 5.008001 5.038002

strict any 1.12

=== Other Modules ===

Module Have

----------- ----

Net::SSLeay 1.94

path to openssl: C:\Strawberry\c\bin\openssl.EXE

Failed test 'Request GET https://www.example.com'

at t/example.t line 47.

Failed test 'Check for warnings from GET https://www.example.com (RT #81948)'

at t/example.t line 57.

Looks like you failed 2 tests of 2.

Test Summary Report