openssl - https - mac

[upsidasi]

Hi, I'm testing HTTPS with fpc (http://wiki.freepascal.org/fphttpclient) on Mac:

Code: Pascal  [Select][+][-]

1.   url := 'https://jsonplaceholder.typicode.com/posts/42';
2.  
3.   urlrequest := TFPHTTPClient.Create(nil);
4.   res := urlrequest.Get(url);
5.   urlrequest.Free;
6.  

but I can't connect to the server (see error.jpg)

The server is reachable from the Mac (I can access it with Safari) and I tested the same code on Linux and Windows.

Here some extra info about my Mac and openssl:

$ uname -a
  Darwin Jacks-iMac.local 16.0.0 Darwin Kernel Version 16.0.0: Mon Aug 29 17:56:20 PDT 2016; root:xnu-3789.1.32~3/RELEASE_X86_64 x86_64

$ openssl version
  OpenSSL 0.9.8zh 14 Jan 2016

$ ll /usr/lib/libssl*
  -rwxr-xr-x  1 root  wheel   386K Sep 14  2016 libssl.0.9.7.dylib*
  -rwxr-xr-x  1 root  wheel   631K Sep 14  2016 libssl.0.9.8.dylib*
  -rw-r--r--  1 root  wheel   921K Sep 14  2016 libssl.35.dylib
  lrwxr-xr-x  1 root  wheel    18B Sep 21  2016 libssl.dylib@ -> libssl.0.9.8.dylib

$ ll /usr/lib/libcrypto*
  -rwxr-xr-x  1 root  wheel   1.9M Sep 14  2016 libcrypto.0.9.7.dylib*
  -rwxr-xr-x  1 root  wheel   2.6M Sep 14  2016 libcrypto.0.9.8.dylib*
  -rw-r--r--  1 root  wheel   4.0M Sep 14  2016 libcrypto.35.dylib
  lrwxr-xr-x  1 root  wheel    21B Sep 21  2016 libcrypto.dylib@ -> libcrypto.0.9.8.dylib

Any help?
Thanks!

[CCRDude]

Are you using sandboxing?

If so, OpenSSL will not work.

I've changed my code to use NSURLRequest when compiled for Mac and it seems to work just fine.

[upsidasi]

I'm not using sandboxing or at least I don't think I am.
Sandboxing requires some configuration and specific operations around your application, right? (https://macpgmr.github.io/ObjP/SandboxingAppsOnMac.html)
If that's so I'm not doing any.

I'll give NSURLRequest a look, thanks

[Thaddy]

Code: Pascal  [Select][+][-]

1. {$mode objfpc}{$H+}
2. uses fphttpclient, fpopenssl, openssl;
3. Var
4.   URLRequest : TFPHttpClient;
5.   URL,Res:string;
6. begin
7.   url := 'https://jsonplaceholder.typicode.com/posts/42';
8.   urlrequest := TFPHTTPClient.Create(nil);
9.   try
10.     res := urlrequest.Get(url);
11.     writeln(res);
12.   finally
13.     urlrequest.Free;
14.   end;
15. end.

Now..... this happens to work too...But not with sandboxing on Macs (yet).

[upsidasi]

Can you suggest me what should I do to turn off this "sandboxing"?

[CCRDude]

Sandboxing is only enabled if you codesign an executable while providing an entitlements file.
Or, alternatively, configure a sandbox for the app at system level.

[upsidasi]

thanks! therefore sandboxing is not the issue here.

[upsidasi]

I tried the same code on a MacOS High Sierra 10.13.6 which has a slightly different libssl/libcrypto situation:

Code: Pascal  [Select][+][-]

1.   $ ls -l /usr/lib/libssl*
2.  
3.     -rwxr-xr-x  1 root  wheel  392912 Dec  1  2017 /usr/lib/libssl.0.9.7.dylib
4.     -rwxr-xr-x  1 root  wheel  630144 Dec  1  2017 /usr/lib/libssl.0.9.8.dylib
5.     -rw-r--r--  1 root  wheel  947104 Mar 28  2018 /usr/lib/libssl.35.dylib
6.     -rw-r--r--  1 root  wheel  890800 Mar 28  2018 /usr/lib/libssl.43.dylib
7.     lrwxr-xr-x  1 root  wheel      15 Dec 31  2017 /usr/lib/libssl.dylib -> libssl.35.dylib
8.  
9.   $ ls -l /usr/lib/libcrypto*  
10.  
11.     -rwxr-xr-x  1 root  wheel  2023616 Mar 28  2018 /usr/lib/libcrypto.0.9.7.dylib
12.     -rwxr-xr-x  1 root  wheel  2599488 Dec  1  2017 /usr/lib/libcrypto.0.9.8.dylib
13.     -rw-r--r--  1 root  wheel  4232208 Mar 28  2018 /usr/lib/libcrypto.35.dylib
14.     -rw-r--r--  1 root  wheel  4274832 Mar 28  2018 /usr/lib/libcrypto.41.dylib
15.     lrwxr-xr-x  1 root  wheel       18 Dec 31  2017 /usr/lib/libcrypto.dylib -> libcrypto.35.dylib
16.  

and it works fine there.

Anyhow I switched to NSURLRequest to make my program work on both Macs. Thank you CCRDude for the suggestion!