Certificate error on Mac ARM (M1 chip)

jhime · April 22, 2021, 2:43pm

What is the problem you are having with rclone?

Error getting certificate file in a new M1 Mac. It works fine in my old Intel Mac.
The procedure in "FAQ" does not work for the M1 Mac scenario.

What is your rclone version (output from `rclone version`)

rclone v1.55.0
- os/type: darwin
- os/arch: arm64
- go/version: go1.16.2
- go/linking: dynamic
- go/tags: cmount

Which OS you are using and how many bits (eg Windows 7, 64 bit)

MacOS 11.2.3, M1 chip

Which cloud storage system are you using? (eg Google Drive)

Hubic

The command you were trying to run (eg `rclone copy /tmp remote:tmp`)

rclone -vv sync /Users/myuser/Documents/biz hubiC:default/Macbook/Documents/biz

The rclone config contents with secrets removed.

[hubiC]
type = hubic
client_id =
client_secret =
token = {"access_token”:”<“secret>,”token_type":"Bearer","refresh_token”:”<“secret>,”expiry":"2021-04-22T15:46:38.347148-03:00"}

A log from the command with the `-vv` flag

2021/04/22 11:31:41 DEBUG : Using config file from "/Users/myuser/.rclone.conf"
2021/04/22 11:31:41 DEBUG : rclone: Version "v1.55.0" starting with parameters ["/Users/myuser/bin/rclone-v1.55.0-osx-arm64/rclone" "-vv" "sync" "/Users/myuser/Documents/biz" "hubiC:default/Macbook/Documents/biz"]
2021/04/22 11:31:41 DEBUG : Creating backend with remote "/Users/myuser/Documents/biz"
2021/04/22 11:31:41 DEBUG : Creating backend with remote "hubiC:default/Macbook/Documents/biz"
2021/04/22 11:31:42 DEBUG : Hubic: retrying auth request 1/10: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 11:31:43 DEBUG : Hubic: retrying auth request 2/10: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 11:31:43 DEBUG : Hubic: retrying auth request 3/10: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 11:31:44 DEBUG : Hubic: retrying auth request 4/10: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 11:31:45 DEBUG : Hubic: retrying auth request 5/10: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 11:31:45 DEBUG : Hubic: retrying auth request 6/10: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 11:31:46 DEBUG : Hubic: retrying auth request 7/10: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 11:31:46 DEBUG : Hubic: retrying auth request 8/10: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 11:31:47 DEBUG : Hubic: retrying auth request 9/10: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 11:31:48 DEBUG : Hubic: retrying auth request 10/10: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 11:31:48 Failed to create file system for "hubiC:default/Macbook/Documents/biz": error authenticating swift connection: Get "https://api.hubic.com/1.0/account/credentials": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295

ncw · April 22, 2021, 4:21pm

Are you running some kind of scanning firewall antivirus thing?

I haven't seen any other reports of this from M1 mac users.

I wonder if it is something about the https://api.hubic.com/1.0/account/credentials certificate - it looks like a pretty normal lets encrypt certificate.

What happens if you do

rclone lsf -vv :'http,url="https://downloads.rclone.org":'

Does that give you a directory listing or the same error?

jhime · April 23, 2021, 3:35am

Dear mr. Nick, thank you very much for your quick response.

After making many tests, I found that the problem I am facing is not chipset-related, but it seems to be a version break.

I am able to run the amd64 versions in my M1 Mac... I do not know how, but I am! Maybe Rosetta 2 is doing its job, but the fact is I am able to run all rclone versions in the M1 Mac.

I was able, also, to run the tests in both Macs: in the old Intel and in the new M1. The results in both were identical for each rclone version.

First, I tested the same version I was running successfully in my old MacBook - v1.52.3. In this version, the lsf command worked fine in both Macs.

Then, I tested the next version - v1.53.0. In this version, the x509 error raised, also in both MacBooks.

Finally, I tested the last version - v1.55.0. In this version, the x509 error also raised in all tests:

amd64 version, in both MacBooks;
arm64 version, only in the M1 MacBook.

Since the log generated by the M1 Mac in one version is identical to the log generated by the Intel Mac in the same version, I believe the problem is not related to the OS chipset.

Last, I was not able to use the command you suggested. It failed in all versions. So, I used another command, that retrieves the directory listing, anyway:
./rclone lsf -vv --http-url https://downloads.rclone.org :http:

I am sending the logs from both commands (yours and mine) in all tested versions.

If you need any further information, I can resume the tests for you.

Sincerely yours

============= Commands issued =============

Command 1: ./rclone lsf -vv --http-url https://downloads.rclone.org :http:
Command 2: ./rclone lsf -vv :'http,url="https://downloads.rclone.org":'

============= rclone-v1.52.3-osx-amd64.zip =============

Command 1:
% ./rclone lsf -vv --http-url https://downloads.rclone.org :http:
2021/04/22 23:04:42 DEBUG : rclone: Version "v1.52.3" starting with parameters ["./rclone" "lsf" "-vv" "--http-url" "https://downloads.rclone.org" ":http:"]
2021/04/22 23:04:42 NOTICE: Config file "/Users/myuser/.config/rclone/rclone.conf" not found - using defaults
...
<correct directory listing>
...
2021/04/22 23:04:45 DEBUG : 5 go routines active

Command 2:
% ./rclone lsf -vv :'http,url="https://downloads.rclone.org":'
2021/04/22 23:07:01 DEBUG : rclone: Version "v1.52.3" starting with parameters ["./rclone" "lsf" "-vv" ":http,url=\"https://downloads.rclone.org\":"]
2021/04/22 23:07:01 Failed to create file system for ":http,url=\"https://downloads.rclone.org\":": config name contains invalid characters - may only contain 0-9, A-Z ,a-z ,_ , - and space

============= rclone-v1.53.0-osx-amd64.zip =============

Command 1:
% ./rclone lsf -vv --http-url https://downloads.rclone.org :http:
2021/04/22 23:08:30 DEBUG : rclone: Version "v1.53.0" starting with parameters ["./rclone" "lsf" "-vv" "--http-url" "https://downloads.rclone.org" ":http:"]
2021/04/22 23:08:30 DEBUG : Creating backend with remote ":http:"
2021/04/22 23:08:30 NOTICE: Config file "/Users/myuser/.config/rclone/rclone.conf" not found - using defaults
2021/04/22 23:08:31 ERROR : : error listing: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 23:08:31 DEBUG : 4 go routines active
2021/04/22 23:08:31 Failed to lsf with 2 errors: last error was: error in ListJSON: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295

Command 2:
% ./rclone lsf -vv :'http,url="https://downloads.rclone.org":'
2021/04/22 23:09:23 DEBUG : rclone: Version "v1.53.0" starting with parameters ["./rclone" "lsf" "-vv" ":http,url=\"https://downloads.rclone.org\":"]
2021/04/22 23:09:23 Failed to create file system for ":http,url=\"https://downloads.rclone.org\":": config name contains invalid characters - may only contain 0-9, A-Z ,a-z ,_ , - and space

============= rclone-v1.55.0-osx-amd64.zip =============

Command 1:
% ./rclone lsf -vv --http-url https://downloads.rclone.org :http:
2021/04/22 23:12:33 NOTICE: Config file "/Users/myuser/.config/rclone/rclone.conf" not found - using defaults
2021/04/22 23:12:33 DEBUG : rclone: Version "v1.55.0" starting with parameters ["./rclone" "lsf" "-vv" "--http-url" "https://downloads.rclone.org" ":http:"]
2021/04/22 23:12:33 DEBUG : Creating backend with remote ":http:"
2021/04/22 23:12:33 DEBUG : :http: detected overridden config - adding "{Zhl7M}" suffix to name
2021/04/22 23:12:33 DEBUG : fs cache: renaming cache item ":http:" to be canonical ":http{Zhl7M}:"
2021/04/22 23:12:34 ERROR : : error listing: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 23:12:34 DEBUG : 4 go routines active
2021/04/22 23:12:34 Failed to lsf with 2 errors: last error was: error in ListJSON: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295

Command 2:
% ./rclone lsf -vv :'http,url="https://downloads.rclone.org":'
2021/04/22 23:13:35 NOTICE: Config file "/Users/myuser/.config/rclone/rclone.conf" not found - using defaults
2021/04/22 23:13:35 DEBUG : rclone: Version "v1.55.0" starting with parameters ["./rclone" "lsf" "-vv" ":http,url=\"https://downloads.rclone.org\":"]
2021/04/22 23:13:35 DEBUG : Creating backend with remote ":http,url=\"https://downloads.rclone.org\":"
2021/04/22 23:13:35 DEBUG : :http: detected overridden config - adding "{Zhl7M}" suffix to name
2021/04/22 23:13:35 DEBUG : fs cache: renaming cache item ":http,url=\"https://downloads.rclone.org\":" to be canonical ":http{Zhl7M}:"
2021/04/22 23:13:36 ERROR : : error listing: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 23:13:36 DEBUG : 4 go routines active
2021/04/22 23:13:36 Failed to lsf with 2 errors: last error was: error in ListJSON: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295

============= rclone-v1.55.0-osx-arm64.zip =============

Command 1:
% ./rclone lsf -vv --http-url https://downloads.rclone.org :http:
2021/04/22 23:16:47 NOTICE: Config file "/Users/myuser/.config/rclone/rclone.conf" not found - using defaults
2021/04/22 23:16:47 DEBUG : rclone: Version "v1.55.0" starting with parameters ["./rclone" "lsf" "-vv" "--http-url" "https://downloads.rclone.org" ":http:"]
2021/04/22 23:16:47 DEBUG : Creating backend with remote ":http:"
2021/04/22 23:16:47 DEBUG : :http: detected overridden config - adding "{Zhl7M}" suffix to name
2021/04/22 23:16:47 DEBUG : fs cache: renaming cache item ":http:" to be canonical ":http{Zhl7M}:"
2021/04/22 23:16:48 ERROR : : error listing: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 23:16:48 DEBUG : 4 go routines active
2021/04/22 23:16:48 Failed to lsf with 2 errors: last error was: error in ListJSON: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295

Command 2:
% ./rclone lsf -vv :'http,url="https://downloads.rclone.org":'
2021/04/22 23:17:23 NOTICE: Config file "/Users/myuser/.config/rclone/rclone.conf" not found - using defaults
2021/04/22 23:17:23 DEBUG : rclone: Version "v1.55.0" starting with parameters ["./rclone" "lsf" "-vv" ":http,url=\"https://downloads.rclone.org\":"]
2021/04/22 23:17:23 DEBUG : Creating backend with remote ":http,url=\"https://downloads.rclone.org\":"
2021/04/22 23:17:23 DEBUG : :http: detected overridden config - adding "{Zhl7M}" suffix to name
2021/04/22 23:17:23 DEBUG : fs cache: renaming cache item ":http,url=\"https://downloads.rclone.org\":" to be canonical ":http{Zhl7M}:"
2021/04/22 23:17:23 ERROR : : error listing: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/22 23:17:23 DEBUG : 4 go routines active
2021/04/22 23:17:23 Failed to lsf with 2 errors: last error was: error in ListJSON: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295

ncw · April 23, 2021, 7:22am

Great testing thank you. So it looks like there is a problem with Let's Encrypt certificates for certain with your computer.

Can you try the latest beta and the latest stable beta just to see if updates to the go runtime have fixed this.

Does going to https://downloads.rclone.org work in your browser?

jhime · April 29, 2021, 2:56pm

Hello again, sorry for the delay posting this reply. The output from the both versions are below:

rclone-v1.55.1-beta.5376.96cdbc5ea.v1.55-stable-osx-arm64:

% ./rclone lsf -vv --http-url https://downloads.rclone.org :http:
2021/04/29 11:51:41 DEBUG : Using config file from "/Users/josehime/.rclone.conf"
2021/04/29 11:51:41 DEBUG : rclone: Version "v1.55.1-beta.5376.96cdbc5ea.v1.55-stable" starting with parameters ["./rclone" "lsf" "-vv" "--http-url" "https://downloads.rclone.org" ":http:"]
2021/04/29 11:51:41 DEBUG : Creating backend with remote ":http:"
2021/04/29 11:51:41 DEBUG : :http: detected overridden config - adding "{Zhl7M}" suffix to name
2021/04/29 11:51:41 DEBUG : fs cache: renaming cache item ":http:" to be canonical ":http{Zhl7M}:"
2021/04/29 11:51:42 ERROR : : error listing: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/29 11:51:42 DEBUG : 4 go routines active
2021/04/29 11:51:42 Failed to lsf with 2 errors: last error was: error in ListJSON: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295

rclone-v1.56.0-beta.5469.9e8cd6bff-osx-arm64

% ./rclone lsf -vv --http-url https://downloads.rclone.org :http:
2021/04/29 11:52:37 DEBUG : rclone: Version "v1.56.0-beta.5469.9e8cd6bff" starting with parameters ["./rclone" "lsf" "-vv" "--http-url" "https://downloads.rclone.org" ":http:"]
2021/04/29 11:52:37 DEBUG : Creating backend with remote ":http:"
2021/04/29 11:52:37 DEBUG : :http: detected overridden config - adding "{Zhl7M}" suffix to name
2021/04/29 11:52:37 DEBUG : Using config file from "/Users/josehime/.rclone.conf"
2021/04/29 11:52:37 DEBUG : fs cache: renaming cache item ":http:" to be canonical ":http{Zhl7M}:"
2021/04/29 11:52:37 ERROR : : error listing: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/04/29 11:52:37 DEBUG : 4 go routines active
2021/04/29 11:52:37 Failed to lsf with 2 errors: last error was: error in ListJSON: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295

jhime · April 29, 2021, 2:56pm

Yes, it does. Perfectly.

Regards!

ncw · April 29, 2021, 5:31pm

This looks like the same issue

github.com/golang/go

x509 SecTrustSettingsCopyCertificates error: -25300 [GO 1.16.2]

opened 07:59AM - 01 Apr 21 UTC

closed 09:44AM - 01 Apr 21 UTC

allbuleyu

### What version of Go are you using (`go version`)? go version go1.16.2 darwin…/arm64 ### Does this issue reproduce with the latest release? I don't know. ### What operating system and processor architecture are you using (`go env`)? <details><summary><code>go env</code> Output</summary><br><pre> $ go env GO111MODULE="auto" GOARCH="arm64" GOBIN="" GOCACHE="/Users/yu/Library/Caches/go-build" GOENV="/Users/yu/Library/Application Support/go/env" GOEXE="" GOFLAGS="" GOHOSTARCH="arm64" GOHOSTOS="darwin" GOINSECURE="" GOMODCACHE="/Users/yu/Desktop/go/pkg/mod" GONOPROXY="" GONOSUMDB="" GOOS="darwin" GOPATH="/Users/yu/Desktop/go" GOPRIVATE="" GOPROXY="https://proxy.golang.org,direct" GOROOT="/usr/local/go" GOSUMDB="sum.golang.org" GOTMPDIR="" GOTOOLDIR="/usr/local/go/pkg/tool/darwin_arm64" GOVCS="" GOVERSION="go1.16.2" GCCGO="gccgo" AR="ar" CC="clang" CXX="clang++" CGO_ENABLED="1" GOMOD="" CGO_CFLAGS="-g -O2" CGO_CPPFLAGS="" CGO_CXXFLAGS="-g -O2" CGO_FFLAGS="-g -O2" CGO_LDFLAGS="-g -O2" PKG_CONFIG="pkg-config" GOGCCFLAGS="-fPIC -arch arm64 -pthread -fno-caret-diagnostics -Qunused-arguments -fmessage-length=0 -fdebug-prefix-map=/var/folders/9x/3dp4l3lx2b53gg02ch87_gd40000gn/T/go-build3449405619=/tmp/go-build -gno-record-gcc-switches -fno-common" </pre></details> ### What did you do? go get -u gorm.io/gorm package gorm.io/gorm: unrecognized import path "gorm.io/gorm": https fetch: Get "https://gorm.io/gorm?go-get=1": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25300  please help me.

Can you try the solution there?

jhime · May 11, 2021, 11:48am

Same error...

% ./rclone lsf -vv --http-url https://downloads.rclone.org :http:
2021/05/11 08:44:06 DEBUG : Using config file from "/Users/josehime/.rclone.conf"
2021/05/11 08:44:06 DEBUG : rclone: Version "v1.55.1-beta.5376.96cdbc5ea.v1.55-stable" starting with parameters ["./rclone" "lsf" "-vv" "--http-url" "https://downloads.rclone.org" ":http:"]
2021/05/11 08:44:06 DEBUG : Creating backend with remote ":http:"
2021/05/11 08:44:06 DEBUG : :http: detected overridden config - adding "{Zhl7M}" suffix to name
2021/05/11 08:44:06 DEBUG : fs cache: renaming cache item ":http:" to be canonical ":http{Zhl7M}:"
2021/05/11 08:44:11 ERROR : : error listing: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295
2021/05/11 08:44:11 DEBUG : 4 go routines active
2021/05/11 08:44:11 Failed to lsf with 2 errors: last error was: error in ListJSON: error listing "": failed to readDir: Get "https://downloads.rclone.org/": x509: failed to load system roots and no roots provided; SecTrustSettingsCopyCertificates error: -25295

About the certificate:

Regards,

Animosity022 · May 11, 2021, 11:57am

I recently got a M1 Mac and that command works without issue for me.

etexter@seraphite ~ % rclone version
2021/05/11 07:56:46 NOTICE: Config file "/Users/etexter/.config/rclone/rclone.conf" not found - using defaults
rclone v1.55.1
- os/type: darwin
- os/arch: arm64
- go/version: go1.16.3
- go/linking: dynamic
- go/tags: cmount
etexter@seraphite ~ %
etexter@seraphite ~ %
etexter@seraphite ~ %
etexter@seraphite ~ % rclone lsf -vv --http-url https://downloads.rclone.org :http:
2021/05/11 07:56:57 NOTICE: Config file "/Users/etexter/.config/rclone/rclone.conf" not found - using defaults
2021/05/11 07:56:57 DEBUG : rclone: Version "v1.55.1" starting with parameters ["rclone" "lsf" "-vv" "--http-url" "https://downloads.rclone.org" ":http:"]
2021/05/11 07:56:57 DEBUG : Creating backend with remote ":http:"
2021/05/11 07:56:57 DEBUG : :http: detected overridden config - adding "{Zhl7M}" suffix to name
2021/05/11 07:56:57 DEBUG : fs cache: renaming cache item ":http:" to be canonical ":http{Zhl7M}:"
rclone-current-freebsd-386.zip
rclone-current-freebsd-amd64.zip
rclone-current-freebsd-arm-v7.zip
rclone-current-freebsd-arm.zip
rclone-current-linux-386.deb
rclone-current-linux-386.rpm
rclone-current-linux-386.zip
rclone-current-linux-amd64.deb
rclone-current-linux-amd64.rpm
rclone-current-linux-amd64.zip
rclone-current-linux-arm-v7.deb
rclone-current-linux-arm-v7.rpm
rclone-current-linux-arm-v7.zip
rclone-current-linux-arm.deb
rclone-current-linux-arm.rpm
rclone-current-linux-arm.zip
rclone-current-linux-arm64.deb
rclone-current-linux-arm64.rpm
rclone-current-linux-arm64.zip
rclone-current-linux-mips.deb
rclone-current-linux-mips.rpm
rclone-current-linux-mips.zip
rclone-current-linux-mipsle.deb
rclone-current-linux-mipsle.rpm
rclone-current-linux-mipsle.zip
rclone-current-netbsd-386.zip
rclone-current-netbsd-amd64.zip
rclone-current-netbsd-arm-v7.zip
rclone-current-netbsd-arm.zip
rclone-current-openbsd-386.zip
rclone-current-openbsd-amd64.zip
rclone-current-osx-386.zip
rclone-current-osx-amd64.zip
rclone-current-osx-arm64.zip
rclone-current-plan9-386.zip
rclone-current-plan9-amd64.zip
rclone-current-solaris-amd64.zip
rclone-current-windows-386.zip
rclone-current-windows-amd64.zip
v0.96/
v0.97/
v0.98/
v0.99/
v1.00/
v1.01/
v1.02/
v1.03/
v1.04/
v1.05/
v1.06/
v1.07/
v1.08/
v1.09/
v1.10/
v1.11/
v1.12/
v1.13/
v1.14/
v1.15/
v1.16/
v1.17/
v1.18/
v1.19/
v1.20/
v1.21/
v1.22/
v1.23/
v1.24/
v1.25/
v1.26/
v1.27/
v1.28/
v1.29/
v1.30/
v1.31/
v1.32/
v1.33/
v1.34/
v1.35/
v1.36/
v1.37/
v1.38/
v1.39/
v1.40/
v1.41/
v1.42/
v1.43/
v1.43.1/
v1.44/
v1.45/
v1.46/
v1.47.0/
v1.48.0/
v1.49.0/
v1.49.1/
v1.49.2/
v1.49.3/
v1.49.4/
v1.49.5/
v1.50.0/
v1.50.1/
v1.50.2/
v1.51.0/
v1.52.0/
v1.52.1/
v1.52.2/
v1.52.3/
v1.53.0/
v1.53.1/
v1.53.2/
v1.53.3/
v1.53.4/
v1.54.0/
v1.54.1/
v1.55.0/
v1.55.1/
version.txt
2021/05/11 07:56:58 DEBUG : 5 go routines active

jhime · May 13, 2021, 11:17am

Thank you for your reply! So, it looks I have an environment problem here...

@ Animosity022, Could you please inform:

Have you migrated your user from a Time Machine, or are you using your Mac "out of the box"?;
Can you post the output of the following commands, so I can check my system?

ls -R /etc/ssl
cat cat /etc/ssl/x509v3.cnf

Regards,

Animosity022 · May 13, 2021, 12:55pm

Setup fresh.

etexter@seraphite ssl % ls -R
cert.pem	certs		openssl.cnf	x509v3.cnf

./certs:
etexter@seraphite ssl % cat x509v3.cnf
# default settings
CERTPATHLEN		= 1
CERTUSAGE		= digitalSignature,keyCertSign,cRLSign
EXTCERTUSAGE		= serverAuth,clientAuth
CERTIP			= 0.0.0.0
CERTFQDN		= nohost.nodomain

# This section should be referenced when building an x509v3 CA
# Certificate.
# The default path length and the key usage can be overridden
# modified by setting the CERTPATHLEN and CERTUSAGE environment
# variables.
[x509v3_CA]
basicConstraints=critical,CA:true,pathlen:$ENV::CERTPATHLEN
keyUsage=$ENV::CERTUSAGE

# This section should be referenced to add an IP Address
# as an alternate subject name, needed by isakmpd
# The address must be provided in the CERTIP environment variable
[x509v3_IPAddr]
subjectAltName=IP:$ENV::CERTIP
extendedKeyUsage=$ENV::EXTCERTUSAGE

# This section should be referenced to add a FQDN hostname
# as an alternate subject name, needed by isakmpd
# The address must be provided in the CERTFQDN environment variable
[x509v3_FQDN]
subjectAltName=DNS:$ENV::CERTFQDN
extendedKeyUsage=$ENV::EXTCERTUSAGE
etexter@seraphite ssl %

jhime · May 14, 2021, 12:05pm

Thank you for your reply!

Unfortunately, my environment is the same as yours and no post above solved my issue, so I do not know what to do to fix my problem...

Thank you all.

jhime · May 25, 2021, 12:52pm

I was unable to find the root cause of the problem, I just realized it was a Keychain-related problem. I reset my local Keychain (using native Keychain Access app) and everything started to work. Issue solved.

system · May 28, 2021, 12:52pm

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.