Install fails with certificate verify failed #80
Description
I've been running Strawberry Perl in a windows environment since 2015. Twice a year, I upgrade the CPAN modules and if necessary, Strawberry Perl.
I'm developing on a Windows 10 laptop.
Strawberry Perl. As of 1/1/2024, ver 5.38.0.1. As of 6/27/2024 I have ver 5.38.2.2
Yesterday, June 27, 2024, I tried installing LWP::Protocol::https via the cpanm tool, but it failed several tests. The version it tried to load was 6.14.
I then did a force install. I tried running my perl script, but it abended with http error 500. Can't connect to aaa.bbb.com:443 (certificate verify failed)
Per google search results, I changed the parameter on my HTTP call to ssl_opts => { verify_hostname => 0 }, but that didn't work.
I also tried this line of code, but the results were the same: $ENV{'PERL_LWP_SSL_VERIFY_HOSTNAME'} = 0;
I verified that the cert for aaa.bbb.com is valid. I also ran a windows version of the Perl script and it ran fine.
I realized that my Strawberry Perl was a bit out of date, so installed the most recent version.
Then I uninstalled LWP::Protocol::https
Next, I tried installing LWP::Protocol::https again via the cpanm tool, but it failed the same tests as before.
Went to GitHub and downloaded LWP-Protocol-https-6.12.tar.gz, which is two releases back. Tried to do an install and got the same certificate error.
Any advice would be appreciated!
+++++++++++++++++++++++++++++++++++++++++++++++++
++
Here is the screen comments from the install:
C:\myStuff\Perl>cpanm LWP::Protocol::https
--> Working on LWP::Protocol::https
Fetching http://www.cpan.org/authors/id/O/OA/OALDERS/LWP-Protocol-https-6.14.tar.gz ... OK
Configuring LWP-Protocol-https-6.14 ... OK
Building and testing LWP-Protocol-https-6.14 ... FAIL
! Installing LWP::Protocol::https failed. See C:\Users\BRIAN@@@.cpanm\work\1719595378.23088\build.log for details. Retry with --force to force install it.
C:\myStuff\Perl>
+++++++++++++++++++++++++++++++++++++++++++++++++
++
Here is the build.log:
cpanm (App::cpanminus) 1.7047 on perl 5.038002 built for MSWin32-x64-multi-thread
Work directory is C:\Users\BRIAN@@@/.cpanm/work/1719595378.23088
You have make C:\Strawberry\c\bin\gmake.exe
You have LWP 6.72
Falling back to Archive::Tar 3.02
Searching LWP::Protocol::https () on cpanmetadb ...
--> Working on LWP::Protocol::https
Fetching http://www.cpan.org/authors/id/O/OA/OALDERS/LWP-Protocol-https-6.14.tar.gz
-> OK
Unpacking LWP-Protocol-https-6.14.tar.gz
Entering LWP-Protocol-https-6.14
Checking configure dependencies from META.json
Checking if you have ExtUtils::MakeMaker 6.58 ... Yes (7.70)
Configuring LWP-Protocol-https-6.14
Running Makefile.PL
Checking if your kit is complete...
Looks good
Generating a gmake-style Makefile
Writing Makefile for LWP::Protocol::https
Writing MYMETA.yml and MYMETA.json
-> OK
Checking dependencies from MYMETA.json ...
Checking if you have File::Spec 0 ... Yes (3.88)
Checking if you have Test::Needs 0.002010 ... Yes (0.002010)
Checking if you have warnings 0 ... Yes (1.65)
Checking if you have Test::More 0.96 ... Yes (1.302198)
Checking if you have LWP::UserAgent 6.06 ... Yes (6.72)
Checking if you have ExtUtils::MakeMaker 0 ... Yes (7.70)
Checking if you have Test::RequiresInternet 0 ... Yes (0.05)
Checking if you have Socket 0 ... Yes (2.037)
Checking if you have LWP::Protocol::http 0 ... Yes (6.72)
Checking if you have IO::Socket::SSL 1.970 ... Yes (2.085)
Checking if you have base 0 ... Yes (2.27)
Checking if you have Net::HTTPS 6 ... Yes (6.23)
Checking if you have IO::Select 0 ... Yes (1.52)
Checking if you have File::Temp 0 ... Yes (0.2311)
Checking if you have IO::Socket::SSL::Utils 0 ... Yes (2.015)
Checking if you have strict 0 ... Yes (1.12)
Checking if you have IO::Socket::INET 0 ... Yes (1.52)
Building and testing LWP-Protocol-https-6.14
cp lib/LWP/Protocol/https.pm blib\lib\LWP\Protocol\https.pm
"C:\Strawberry\perl\bin\perl.exe" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef Test::Harness::Switches; test_harness(0, 'blib\lib', 'blib\arch')" t/.t
Versions for all modules listed in MYMETA.json (including optional ones):
=== Configure Requires ===
Module Want Have
------------------- -------- --------
ExtUtils::MakeMaker any 7.70
perl 5.008001 5.038002
=== Configure Suggests ===
Module Want Have
-------- ------- ----
JSON::PP 2.27300 4.16
=== Build Requires ===
Module Want Have
------------------- ---- ----
ExtUtils::MakeMaker any 7.70
=== Test Requires ===
Module Want Have
---------------------- -------- --------
ExtUtils::MakeMaker any 7.70
File::Spec any 3.88
File::Temp any 0.2311
IO::Select any 1.52
IO::Socket::INET any 1.52
IO::Socket::SSL 1.970 2.085
IO::Socket::SSL::Utils any 2.015
LWP::UserAgent 6.06 6.72
Socket any 2.037
Test::More 0.96 1.302198
Test::Needs 0.002010 0.002010
Test::RequiresInternet any 0.05
perl 5.008001 5.038002
warnings any 1.65
=== Test Recommends ===
Module Want Have
---------- -------- --------
CPAN::Meta 2.120900 2.150010
=== Runtime Requires ===
Module Want Have
------------------- -------- --------
IO::Socket::SSL 1.970 2.085
LWP::Protocol::http any 6.72
LWP::UserAgent 6.06 6.72
Net::HTTPS 6 6.23
base any 2.27
perl 5.008001 5.038002
strict any 1.12
=== Other Modules ===
Module Have
----------- ----
Net::SSLeay 1.94
t/00-report-prereqs.t .. ok
# path to openssl: C:\Strawberry\c\bin\openssl.EXE
# stdout: OpenSSL 1.1.1q 5 Jul 2022
# Net::SSLeay::OPENSSL_VERSION_NUMBER() 0x1010111f
# IO::Select 1.52
# IO::Socket::INET 1.52
# IO::Socket::SSL 2.085
# IO::Socket::SSL::Utils 2.015
# Socket 2.037
t/diag.t ............... ok
# Failed test 'success status'
# at t/example.t line 19.
# Failed test 'have header Client-SSL-Socket-Class'
# at t/example.t line 29.
# Failed test 'have header Client-SSL-Cipher'
# at t/example.t line 44.
# Failed test 'found expected document content'
# at t/example.t line 46.
# 'Can't connect to www.example.com:443 (certificate verify failed)
#
# SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed at C:/Strawberry/perl/vendor/lib/LWP/Protocol/http.pm line 50.
# '
# doesn't match '(?^:Example Domain)'
# Looks like you failed 4 tests of 6.
Failed test 'Request GET https://www.example.com'
at t/example.t line 47.
# Failed test 'success status'
# at t/example.t line 54.
# Looks like you failed 1 test of 2.
Failed test 'Check for warnings from GET https://www.example.com (RT #81948)'
at t/example.t line 57.
Looks like you failed 2 tests of 2.
t/example.t ............
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/2 subtests
t/https_proxy.t ........ ok
Test Summary Report
t/example.t (Wstat: 512 (exited 2) Tests: 2 Failed: 2)
Failed tests: 1-2
Non-zero exit status: 2
Files=4, Tests=62, 3 wallclock secs ( 0.01 usr + 0.05 sys = 0.06 CPU)
Result: FAIL
Failed 1/4 test programs. 2/62 subtests failed.
gmake: *** [makefile:889: test_dynamic] Error 255
-> FAIL Installing LWP::Protocol::https failed. See C:\Users\BRIAN@@@.cpanm\work\1719595378.23088\build.log for details. Retry with --force to force install it.