Install fails with certificate verify failed

I've been running Strawberry Perl in a windows environment since 2015. Twice a year, I upgrade the CPAN modules and if necessary, Strawberry Perl.

I'm developing on a Windows 10 laptop.
Strawberry Perl. As of 1/1/2024, ver 5.38.0.1. As of 6/27/2024 I have ver 5.38.2.2

Yesterday, June 27, 2024, I tried installing LWP::Protocol::https via the cpanm tool, but it failed several tests. The version it tried to load was 6.14.

I then did a force install. I tried running my perl script, but it abended with http error 500. Can't connect to aaa.bbb.com:443 (certificate verify failed)

Per google search results, I changed the parameter on my HTTP call to ssl_opts => { verify_hostname => 0 }, but that didn't work.

I also tried this line of code, but the results were the same: $ENV{'PERL_LWP_SSL_VERIFY_HOSTNAME'} = 0;

I verified that the cert for aaa.bbb.com is valid. I also ran a windows version of the Perl script and it ran fine.

I realized that my Strawberry Perl was a bit out of date, so installed the most recent version.

Then I uninstalled LWP::Protocol::https

Next, I tried installing LWP::Protocol::https again via the cpanm tool, but it failed the same tests as before.

Went to GitHub and downloaded LWP-Protocol-https-6.12.tar.gz, which is two releases back. Tried to do an install and got the same certificate error.

Any advice would be appreciated!

+++++++++++++++++++++++++++++++++++++++++++++++++
++
Here is the screen comments from the install:

C:\myStuff\Perl>cpanm LWP::Protocol::https
--> Working on LWP::Protocol::https
Fetching http://www.cpan.org/authors/id/O/OA/OALDERS/LWP-Protocol-https-6.14.tar.gz ... OK
Configuring LWP-Protocol-https-6.14 ... OK
Building and testing LWP-Protocol-https-6.14 ... FAIL
! Installing LWP::Protocol::https failed. See C:\Users\BRIAN@@@.cpanm\work\1719595378.23088\build.log for details. Retry with --force to force install it.

C:\myStuff\Perl>

+++++++++++++++++++++++++++++++++++++++++++++++++
++
Here is the build.log:

cpanm (App::cpanminus) 1.7047 on perl 5.038002 built for MSWin32-x64-multi-thread
Work directory is C:\Users\BRIAN@@@/.cpanm/work/1719595378.23088
You have make C:\Strawberry\c\bin\gmake.exe
You have LWP 6.72
Falling back to Archive::Tar 3.02
Searching LWP::Protocol::https () on cpanmetadb ...
--> Working on LWP::Protocol::https
Fetching http://www.cpan.org/authors/id/O/OA/OALDERS/LWP-Protocol-https-6.14.tar.gz
-> OK
Unpacking LWP-Protocol-https-6.14.tar.gz
Entering LWP-Protocol-https-6.14
Checking configure dependencies from META.json
Checking if you have ExtUtils::MakeMaker 6.58 ... Yes (7.70)
Configuring LWP-Protocol-https-6.14
Running Makefile.PL
Checking if your kit is complete...
Looks good
Generating a gmake-style Makefile
Writing Makefile for LWP::Protocol::https
Writing MYMETA.yml and MYMETA.json
-> OK
Checking dependencies from MYMETA.json ...
Checking if you have File::Spec 0 ... Yes (3.88)
Checking if you have Test::Needs 0.002010 ... Yes (0.002010)
Checking if you have warnings 0 ... Yes (1.65)
Checking if you have Test::More 0.96 ... Yes (1.302198)
Checking if you have LWP::UserAgent 6.06 ... Yes (6.72)
Checking if you have ExtUtils::MakeMaker 0 ... Yes (7.70)
Checking if you have Test::RequiresInternet 0 ... Yes (0.05)
Checking if you have Socket 0 ... Yes (2.037)
Checking if you have LWP::Protocol::http 0 ... Yes (6.72)
Checking if you have IO::Socket::SSL 1.970 ... Yes (2.085)
Checking if you have base 0 ... Yes (2.27)
Checking if you have Net::HTTPS 6 ... Yes (6.23)
Checking if you have IO::Select 0 ... Yes (1.52)
Checking if you have File::Temp 0 ... Yes (0.2311)
Checking if you have IO::Socket::SSL::Utils 0 ... Yes (2.015)
Checking if you have strict 0 ... Yes (1.12)
Checking if you have IO::Socket::INET 0 ... Yes (1.52)
Building and testing LWP-Protocol-https-6.14
cp lib/LWP/Protocol/https.pm blib\lib\LWP\Protocol\https.pm
"C:\Strawberry\perl\bin\perl.exe" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef Test::Harness::Switches; test_harness(0, 'blib\lib', 'blib\arch')" t/.t

Versions for all modules listed in MYMETA.json (including optional ones):

=== Configure Requires ===

Module Want Have

------------------- -------- --------

ExtUtils::MakeMaker any 7.70

perl 5.008001 5.038002

=== Configure Suggests ===

Module Want Have

-------- ------- ----

JSON::PP 2.27300 4.16

=== Build Requires ===

Module Want Have

------------------- ---- ----

ExtUtils::MakeMaker any 7.70

=== Test Requires ===

Module Want Have

---------------------- -------- --------

ExtUtils::MakeMaker any 7.70

File::Spec any 3.88

File::Temp any 0.2311

IO::Select any 1.52

IO::Socket::INET any 1.52

IO::Socket::SSL 1.970 2.085

IO::Socket::SSL::Utils any 2.015

LWP::UserAgent 6.06 6.72

Socket any 2.037

Test::More 0.96 1.302198

Test::Needs 0.002010 0.002010

Test::RequiresInternet any 0.05

perl 5.008001 5.038002

warnings any 1.65

=== Test Recommends ===

Module Want Have

---------- -------- --------

CPAN::Meta 2.120900 2.150010

=== Runtime Requires ===

Module Want Have

------------------- -------- --------

IO::Socket::SSL 1.970 2.085

LWP::Protocol::http any 6.72

LWP::UserAgent 6.06 6.72

Net::HTTPS 6 6.23

base any 2.27

perl 5.008001 5.038002

strict any 1.12

=== Other Modules ===

Module Have

----------- ----

Net::SSLeay 1.94

t/00-report-prereqs.t .. ok
# path to openssl: C:\Strawberry\c\bin\openssl.EXE
# stdout: OpenSSL 1.1.1q 5 Jul 2022
# Net::SSLeay::OPENSSL_VERSION_NUMBER() 0x1010111f
# IO::Select 1.52
# IO::Socket::INET 1.52
# IO::Socket::SSL 2.085
# IO::Socket::SSL::Utils 2.015
# Socket 2.037
t/diag.t ............... ok

#   Failed test 'success status'
#   at t/example.t line 19.

#   Failed test 'have header Client-SSL-Socket-Class'
#   at t/example.t line 29.

#   Failed test 'have header Client-SSL-Cipher'
#   at t/example.t line 44.

#   Failed test 'found expected document content'
#   at t/example.t line 46.
#                   'Can't connect to www.example.com:443 (certificate verify failed)
# 
# SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed at C:/Strawberry/perl/vendor/lib/LWP/Protocol/http.pm line 50.
# '
#     doesn't match '(?^:Example Domain)'
# Looks like you failed 4 tests of 6.

Failed test 'Request GET https://www.example.com'

at t/example.t line 47.

#   Failed test 'success status'
#   at t/example.t line 54.
# Looks like you failed 1 test of 2.

Failed test 'Check for warnings from GET https://www.example.com (RT #81948)'

at t/example.t line 57.

Looks like you failed 2 tests of 2.

t/example.t ............
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/2 subtests
t/https_proxy.t ........ ok

Test Summary Report

t/example.t (Wstat: 512 (exited 2) Tests: 2 Failed: 2)
Failed tests: 1-2
Non-zero exit status: 2
Files=4, Tests=62, 3 wallclock secs ( 0.01 usr + 0.05 sys = 0.06 CPU)
Result: FAIL
Failed 1/4 test programs. 2/62 subtests failed.
gmake: *** [makefile:889: test_dynamic] Error 255
-> FAIL Installing LWP::Protocol::https failed. See C:\Users\BRIAN@@@.cpanm\work\1719595378.23088\build.log for details. Retry with --force to force install it.

Commencez par t/example.t et le build.log joint, en particulier par les échecs de vérification des certificats autour des requêtes vers www.example.com. Reproduisez l’exécution des tests sous Windows et examinez la configuration existante des tests HTTPS ainsi que les versions signalées de Perl, IO::Socket::SSL, Net::SSLeay et OpenSSL. Le travail est considéré comme terminé lorsque les tests HTTPS de l’exemple s’exécutent avec succès sans affaiblir la vérification des certificats.