DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 6849B3858414
Message-ID: <a56e15dd-1ecf-42f5-ac98-e027d358cf41@SystematicSW.ab.ca>
Date: Mon, 18 Mar 2024 16:19:00 -0600
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Getting error 60 of curl to cygwin setup
Content-Language: en-CA
To: cygwin@cygwin.com
References: <CAL8MddVRquNVBMfCtzrLGmrthHHGoyUw9Qfkqg_S6f0FOxJXUg@mail.gmail.com>
Organization: Systematic Software
In-Reply-To: <CAL8MddVRquNVBMfCtzrLGmrthHHGoyUw9Qfkqg_S6f0FOxJXUg@mail.gmail.com>
Precedence: list
From: Brian Inglis via Cygwin <cygwin@cygwin.com>
Reply-To: cygwin@cygwin.com
Cc: Brian Inglis <Brian.Inglis@SystematicSW.ab.ca>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: cygwin-bounces+archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>
Content-Transfer-Encoding: 8bit

On 2024-03-18 15:21, J M via Cygwin wrote:
> With a fresh install of Cygwin then I launch (with package curl installed):
> 
> curl -O https://www.cygwin.com/setup-x86_64.exe
> 
> Shows a curl 60 error ssl problem.
> Using -k or --insecure works, but is not recomended.
> Howto fix it?

WJFFM!

That error implies that the version of curl you are running or the certificate 
store you are using does not include the Let's Encrypt CA used by Cygwin.com.

 From what shell do you launch curl?

Please run:

which -a curl

and ensure that /usr/bin/curl precedes /cygdrive/c/WINDOWS/system32/curl then
run:

$ curl -V
curl 8.6.0 (x86_64-pc-cygwin) libcurl/8.6.0 OpenSSL/3.0.13 zlib/1.3.1 
brotli/1.1.0 zstd/1.5.5 libidn2/2.3.7 libpsl/0.21.5 libssh2/1.11.0 
nghttp2/1.60.0 libgsasl/2.2.1 OpenLDAP/2.6.7
Release-Date: 2024-01-31
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns 
ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: alt-svc AsynchDNS brotli gsasl GSS-API HSTS HTTP2 HTTPS-proxy IDN IPv6 
Kerberos Largefile libz NTLM PSL SPNEGO SSL threadsafe TLS-SRP UnixSockets zstd

and check you get the same output as above, then run:

cygcheck -c ca-certificates ca-certificates-letsencrypt curl cygwin \
libbrotlidec1 libcurl4 libgsasl18 libgssapi_krb5_2 libidn2_0 libnghttp2_14 \
libopenldap2 libpsl5 libssh2_1 libssl3 libzstd1 zlib0

and ensure all packages show Status OK.

If that is the case, please follow the problem reporting guidelines below, and 
attach the output from running

cygcheck -hrsv > cygcheck-hrsv.log

as a text attachment to your reply.

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer     but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple