rpki-client / rpki-client-portable

Portability shim for OpenBSD's rpki-client

Home Page:https://rpki-client.org

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

MacOS 11.2.3 run-time error

okoeroo opened this issue · comments

I'm trying to build and run on Big Sur and get the following error:

$ /usr/local/sbin/rpki-client
rpki-client: tls_load_file: No such file or directory
rpki-client: poll[2]: hangup

To reproduce:

brew install libressl
export LDFLAGS="-L/usr/local/opt/libressl/lib"
export CPPFLAGS="-I/usr/local/opt/libressl/include"
./autogen.sh
./configure
make
make install
/usr/local/sbin/rpki-client
rpki-client: tls_load_file: No such file or directory
rpki-client: poll[2]: hangup

Most probably this is failing to load the default cert.pem file. Not sure how this is configured on MacOS X.
Could be /etc/ssl/cert.pem or /usr/local/etc/ssl/cert.pem.

This works for me but I'm stuck on 10.13.6.
I installed libressl via brew.

I committed a better error reporting upstream so you should now see which file it fails to load.

Could you please test with the latest version?
It seems that it works for other people and I can also not reproduce your issue.

Any news? Does it work now?

sorry for the delay. Yes! it compiles fully on 11.3.1, but I'm not sure why the output fails. I have this error for example:

rpki-client: ta/ripe: pulling from https://rpki.ripe.net/ta/ripe-ncc-ta.cer
rpki-client: https://rpki.ripe.net/ta/ripe-ncc-ta.cer: TLS connect: ssl verify memory setup failure

Output looks good! Not sure why some resources have errors, which using curl don't. But most output seems to be there. I call this done.

System used MacOS 11.3.1, using LibreSSL 3.3.3 via Brew.