`mingw-w64-x86_64-ca-certificates-20180409-3` update broke curl

[mati865]

cc @Alexpux
The error:

$ curl https://rust-lang-ci-mirrors.s3-us-west-1.amazonaws.com/rustc/2017-03-15-ninja-win.zip -o t.zip
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

[mati865]

Actually should've cc @lazka

[lazka]

hm :/ I've used meld to check that it didn't change anything, weird..

[lazka]

I get the same output for both locally, but the one in the repo has a different content order for some reason.

edit: I think it's just the filesystem listdir order, maybe?

[Alexpux]

I see this error about 2-3 months with Msys CURL, so I think something with internet provider chain or need update certificates itself

[Alexpux]

Error is passing on 2-3 try mostly.

[lazka]

I can reproduce though, if I rebuild it works, with the repo version it always fails.

[lazka]

I've pushed a potential fix to master

[mati865]

I see this error about 2-3 months with Msys CURL, so I think something with internet provider chain or need update certificates itself

It worked fine with mingw-w64-x86_64-ca-certificates-20180409-1 and started with revision 3.

[lazka]

sadly still the same with rev4, I've created a revert PR as I'm out of ideas: #5890

[mati865]

@lazka comparison of rev 1 and rev 4 packages: https://www.diffchecker.com/gPvU2g0K
Encoding actually has been fixed when compared to python2 build: Főtanúsítvány -> Főtanúsítvány but 3 public keys disappeared.

[lazka]

ok, found the likely problem. certdata2pem calls openssl without checking for errors and openssl can't handle unicode filenames.

[lazka]

I've pushed something to master