Can't install iTerm2 Shell Integration

[5ouma]

I use iTerm2 and its extra tool called Shell Integration.
I wrote this to download it via Sheldon.

# ~/.config/sheldon/plugins.toml
[plugins.iterm2-shell-integration]
  remote = "https://iterm2.com/shell_integration/zsh"

Some months ago, it worked with no errors. However, in recent days it outputs an error below.

error: failed to install source `https://iterm2.com/shell_integration/zsh`
  due to: failed to download `https://iterm2.com/shell_integration/zsh`
  due to: [60] SSL peer certificate or SSH remote key was not OK (SSL certificate problem: unable to get local issuer certificate)

I installed Sheldon via Homebrew and tried to reinstall it.

# sheldon -V
sheldon 0.7.3

[rossmacarthur]

Sheldon uses libcurl to download remote files. Can you confirm the following works totally fine on your machine?

curl https://iterm2.com/shell_integration/zsh

[5ouma]

Yes, it worked correctly with no errors.

[rossmacarthur]

I'm assuming you are on macOS because Homebrew. Can you run the following

Check that the sheldon you're executing is really the Homebrew one

which sheldon

Then check how libraries were linked

otool -L /opt/homebrew/bin/sheldon

Mine looks like this

/opt/homebrew/bin/sheldon:
        /opt/homebrew/opt/curl/lib/libcurl.4.dylib (compatibility version 13.0.0, current version 13.0.0)
        /opt/homebrew/opt/libgit2/lib/libgit2.1.6.dylib (compatibility version 1.6.0, current version 1.6.4)
        /opt/homebrew/opt/openssl@3/lib/libssl.3.dylib (compatibility version 3.0.0, current version 3.0.0)
        /opt/homebrew/opt/openssl@3/lib/libcrypto.3.dylib (compatibility version 3.0.0, current version 3.0.0)
        /usr/lib/libz.1.dylib (compatibility version 1.0.0, current version 1.2.11)
        /usr/lib/libiconv.2.dylib (compatibility version 7.0.0, current version 7.0.0)
        /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1319.100.3)

[5ouma]

I use Intel Mac, so the output differs slightly from yours.

# which sheldon, where sheldon
/usr/local/bin/sheldon

# otool -L "$(which sheldon)"

/usr/local/bin/sheldon:
	/usr/local/opt/curl/lib/libcurl.4.dylib (compatibility version 13.0.0, current version 13.0.0)
	/usr/local/opt/libgit2/lib/libgit2.1.6.dylib (compatibility version 1.6.0, current version 1.6.4)
	/usr/local/opt/openssl@3/lib/libssl.3.dylib (compatibility version 3.0.0, current version 3.0.0)
	/usr/local/opt/openssl@3/lib/libcrypto.3.dylib (compatibility version 3.0.0, current version 3.0.0)
	/usr/lib/libz.1.dylib (compatibility version 1.0.0, current version 1.2.11)
	/usr/lib/libiconv.2.dylib (compatibility version 7.0.0, current version 7.0.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1311.100.3)

[rossmacarthur]

Very strange. Do other remote files work? Or is it only this one that fails 🤔.

[5ouma]

Oh, others also failed with the same error!
(I tried with a raw file of a shell script plugin on GitHub.)

[5ouma]

After updating OpenSSL to 3.1.3, the error has been fixed!