git+https package installation on windows fails

[sebastian-goeldi]

I have ported the metaports-info package to use the new git infrastructure.

On linux (debian12, built against the 0.28.13 tag with a modified makedeb.sh file to support debian12) this works flawlessly, but a coworker just wrote me that he gets an error on Windows.

I can recreate the same error when running a fresh klayout installation on a windows (11) VM

I am not sure how to further debug though. I tried running klayout_app.exe from a power shell, but got no errors of info messages (maybe started it wrong though).

I'll happily assist if there is any way I can.

Sebastian

[klayoutmatthias]

Hi @sebastian-goeldi,

thanks for this ticket. I can reproduce the problem too. I'll try to debug the issue. Maybe it is related to a missing DLL or something like this.

Matthias

[klayoutmatthias]

I found some weird behavior: the problem is caused by "libcrypto-3-x64.dll". This library isn't missing, but it appears to be working only when installed in the original MSYS2 location.

I'll keep debugging ...

Matthias

[klayoutmatthias]

It's a certificate issue. I just need to figure out how to include them in the Windows distribution.

[klayoutmatthias]

Got it ... the trusted CA's are not read.

Here is a quick workaround: unzip the attached archive and copy the file cert.pem (taken from MSYS2) to some place and set the 'SSL_CERT_FILE' environment variable to contain the path to this file.

cert.zip

[mzdustpho]

Encountered this issue on Klayout 0.28.17 64bit on windows 11 Pro 23H2. Your suggested work around solved the issue.
Klayout is installed as Admin.
Thank You.

[joamatab]

Can we fix this? we've seen other gdsfactory uers installing packages

[klayoutmatthias]

cert.pem should be included now in the installation (since 0.28.14). I just confirm again, that you can install without admin privileges and installation of packages from http+git works.

So is that a glitch or a real issue?

Matthias

[sebastian-goeldi]

This seems to be a real issue. Joaquin and I saw it with a user. Klayout was on 0.28.17, but still got the ssl error about github. We didn't try to use the workaround though (we just resorted to manually install the package.

Could this be an issue with existing klayout and upgrade vs completely fresh install?

[klayoutmatthias]

I tried a wipe and re-install. I am not sure if the problem can be caused by other certificates present on the system. I understand that OpenSSL uses their own certificate management, but I think you can fool it if you system has SSL_CERT_FILE set to some other place.

I will try another machine without MSYS and no SSL_CERT_FILE environment variable set. But I do not have Windows 11, only 10.

Just to confirm: we're talking about 64bit Windows version, installer.exe taken from the KLayout download site. Right?