What about the system certificate trust policy? I don’t know what the default 
setting is.


Mark Brethen
mark.bret...@gmail.com



> On Jul 15, 2022, at 9:30 AM, Mark Brethen <mark.bret...@gmail.com> wrote:
> 
> I was trying to say that I skipped versions and upgraded from high sierra to 
> big sur. As to the version, is it 10.16 or 11? System profiler says this:
> 
> System Software Overview:
> 
>   System Version:     macOS 11.6.7 (20G630)
>   Kernel Version:     Darwin 20.6.0
>   Boot Volume:        Macintosh HD
>   Boot Mode:  Normal
>   Computer Name:      brethen-air
>   User Name:  Mark Brethen (marbre)
>   Secure Virtual Memory:      Enabled
>   System Integrity Protection:        Enabled
>   Time since boot:    10 days 18:45
> 
> Mark Brethen
> mark.bret...@gmail.com <mailto:mark.bret...@gmail.com>
> 
> 
> 
>> On Jul 15, 2022, at 9:23 AM, Chris Jones <jon...@hep.phy.cam.ac.uk 
>> <mailto:jon...@hep.phy.cam.ac.uk>> wrote:
>> 
>> 
>> 
>> On 15/07/2022 3:20 pm, Mark Brethen wrote:
>>> I have big sur installed (In the ‘About This Mac’ it lists ‘Version11.6.7')
>> 
>> Sorry but you are being damn confusing. Why did you then mention 'High 
>> Sierra' as your OS below ????
>> 
>> If you truly do have macOS11 installed, fully up to date, then I am very 
>> surprised you are seeing SSL issues.... can anyone else on this OS confirm 
>> if they see the same issue...
>> 
>>> Mark Brethen
>>> mark.bret...@gmail.com <mailto:mark.bret...@gmail.com>
>>>> On Jul 15, 2022, at 9:14 AM, Chris Jones <jon...@hep.phy.cam.ac.uk> wrote:
>>>> 
>>>> 
>>>> 
>>>> On 15/07/2022 3:08 pm, Mark Brethen wrote:
>>>>> ~ $ /usr/bin/curl -L -v -o tetgen1.5.1.tar.gz 
>>>>> https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz 
>>>>> <https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz>
>>>>>   % Total    % Received % Xferd  Average Speed   Time    Time     Time  
>>>>> Current
>>>>>                                  Dload  Upload   Total   Spent    Left  
>>>>> Speed
>>>>>   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--  
>>>>>    0*   Trying 62.141.177.111...
>>>>> * TCP_NODELAY set
>>>>> * Connected to wias-berlin.de <http://wias-berlin.de> (62.141.177.111) 
>>>>> port 443 (#0)
>>>>> * ALPN, offering h2
>>>>> * ALPN, offering http/1.1
>>>>> * successfully set certificate verify locations:
>>>>> *   CAfile: /etc/ssl/cert.pem
>>>>>   CApath: none
>>>>> * TLSv1.2 (OUT), TLS handshake, Client hello (1):
>>>>> } [228 bytes data]
>>>>> * TLSv1.2 (IN), TLS handshake, Server hello (2):
>>>>> { [59 bytes data]
>>>>> * TLSv1.2 (IN), TLS handshake, Certificate (11):
>>>>> { [6122 bytes data]
>>>>> * TLSv1.2 (IN), TLS alert, handshake failure (552):
>>>>> { [2 bytes data]
>>>>> * error:14008410:SSL routines:CONNECT_CR_KEY_EXCH:sslv3 alert handshake 
>>>>> failure
>>>>>   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--  
>>>>>    0
>>>>> * Closing connection 0
>>>>> curl: (35) error:14008410:SSL routines:CONNECT_CR_KEY_EXCH:sslv3 alert 
>>>>> handshake failure
>>>>> Other than updating the system from High Sierra, nothing else. It sounds 
>>>>> like I may need to update my certificates?
>>>> 
>>>> Oh.... You said you where on macOS 11... I guess that was incorrect and 
>>>> you really mean OSX 10.11 or.... what ? High Sierra is OSX 10.13 ... 
>>>> Please try and be precise in your OS version as in this case it really 
>>>> makes a difference...
>>>> 
>>>> So, assuming you are on 10.11, or 10.13... That OS is indeed old and known 
>>>> to have SSL issues. The best solution is indeed to upgrade to a newer OS 
>>>> (for many many reasons...)
>>>> 
> 

Reply via email to