[build2] error when trying to compile build2

Tue Feb 15 22:48:12 UTC 2022

Hi,

I include the results of running your first suggestion.

====
C:\compilers\build2_build\build2-toolchain-0.14>where curl
c:\compilers\build2\bin\curl.exe
C:\Windows\System32\curl.exe

C:\compilers\build2_build\build2-toolchain-0.14>curl --version
curl 7.71.0 (x86_64-w64-mingw32) libcurl/7.70.0 OpenSSL/1.1.1g (Schannel) zlib/1.2.11 libidn2/2.3.0 libssh2/1.9.0 nghttp2/1.41.0
Release-Date: 2020-06-24
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
Features: AsynchDNS HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz Metalink MultiSSL NTLM SPNEGO SSL SSPI TLS-SRP
WARNING: curl and libcurl versions do not match. Functionality may be affected.

C:\compilers\build2_build\build2-toolchain-0.14>\Windows\System32\curl --version
curl 7.55.1 (Windows) libcurl/7.55.1 WinSSL
Release-Date: 2017-11-14, security patched: 2019-11-05
Protocols: dict file ftp ftps http https imap imaps pop3 pop3s smtp smtps telnet tftp
Features: AsynchDNS IPv6 Largefile SSPI Kerberos SPNEGO NTLM SSL

C:\compilers\build2_build\build2-toolchain-0.14>
C:\compilers\build2_build\build2-toolchain-0.14>curl -Ov https://urldefense.com/v3/__https://pkg.cppget.org/1/alpha/repositories.manifest__;!!PwxmruxY!PvXRrUdq8Ofi_WqAoqZOteF2LUNwdrYXE5oXfQey_AeA13ZfhugSCIELQl_vA6a3UdBm1gI$
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0*   Trying 52.71.28.102:443...
* Connected to urldefense.com (52.71.28.102) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: C:/compilers/build2/bin/ssl/certs/ca-bundle.crt
  CApath: none
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [15 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [3546 bytes data]
* TLSv1.3 (OUT), TLS alert, unknown CA (560):
} [2 bytes data]
* SSL certificate problem: self signed certificate in certificate chain
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
* Closing connection 0
curl: (60) SSL certificate problem: self signed certificate in certificate chain
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

C:\compilers\build2_build\build2-toolchain-0.14>
====

Just a comment, the build2 curl and libcurl versions are off by one.  Version 7.71.0 vs 7.70.0

More importantly, it looks like my organisation's certificate is self signed.  And the final error message can be read as putting the blame on the build2 server, where as the blame should really be on my end (see the curl trace and the last communication was (OUT))

Phillip Shelton
Senior Transport Modeller
Cardno

Phone +61 7 3877 6991  
Address Level 11, 515 St Paul's Terrace, Fortitude Valley, 4006 Queensland Australia
Postal Locked Bag 4006, Fortitude Valley 4006
Email phillip.shelton at cardno.com.au  Web www.cardno.com

Cardno operates a quality management system that has been certified to ISO 9001.

This email and its attachments may contain confidential and/or privileged information for the sole use of the intended recipient(s). All electronically supplied data must be checked against an applicable hardcopy version which shall be the only document for which Cardno warrants accuracy. If you are not the intended recipient, any use, distribution or copying of the information contained in this email and its attachments is strictly prohibited. If you have received this email in error, please email the sender by replying to this message and immediately delete and destroy any copies of this email and any attachments. The views or opinions expressed are the author's own and may not reflect the views or opinions of Cardno.

-----Original Message-----
From: Boris Kolpackov <boris at codesynthesis.com> 
Sent: Wednesday, 16 February 2022 2:02 AM
To: Phillip Shelton via users <users at build2.org>
Cc: Phillip Shelton <phillip.shelton at cardno.com.au>
Subject: Re: [build2] error when trying to compile build2

Phillip Shelton via users <users at build2.org> writes:

> curl -f -L -A "bpkg/0.14.0 (MinGW; +https://urldefense.com/v3/__https://build2.org__;!!PwxmruxY!PvXRrUdq8Ofi_WqAoqZOteF2LUNwdrYXE5oXfQey_AeA13ZfhugSCIELQl_vA6a30o4LWXE$ ) libbpkg/0.14.0 libbutl/0.14.0 curl" https://urldefense.com/v3/__https://pkg.cppget.org/1/alpha/repositories.manifest__;!!PwxmruxY!PvXRrUdq8Ofi_WqAoqZOteF2LUNwdrYXE5oXfQey_AeA13ZfhugSCIELQl_vA6a3UdBm1gI$ 
>   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
>                                  Dload  Upload   Total   Spent    Left  Speed
>   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
> curl: (60) SSL certificate problem: self signed certificate in 
> certificate chain

Hm, strange. We have numerous Windows CI jobs doing exactly this without any issues. Must be something special about your setup or environment. Some possibilities that come to mind:

1. You are not using curl from the build2-baseutils package. You can
   try:

   > where curl
   > curl -Ov https://urldefense.com/v3/__https://pkg.cppget.org/1/alpha/repositories.manifest__;!!PwxmruxY!PvXRrUdq8Ofi_WqAoqZOteF2LUNwdrYXE5oXfQey_AeA13ZfhugSCIELQl_vA6a3UdBm1gI$ 

2. Something is man-in-the-middle'ing your connection and presenting
   a bogus certificate. Perhaps your organization requires you to
   connect via a proxy or some such?