fix(setup): resolve openssl@3 prefix via brew so setup.sh works on Intel Macs

[mstru54]

Problem

setup.sh only sets OPENSSL_ROOT_DIR when /opt/homebrew/opt/openssl@3 exists:

if [ "$PLATFORM" = "macos" ] && [ -d "/opt/homebrew/opt/openssl@3" ]; then
    EXTRA_ARGS="-DOPENSSL_ROOT_DIR=/opt/homebrew/opt/openssl@3"
fi

/opt/homebrew is the Apple Silicon prefix. On Intel Macs Homebrew installs under /usr/local, so the test fails, EXTRA_ARGS stays empty, and CMake is configured with no OpenSSL root.

Impact on Intel Macs

1. Configure fails. fincept-qt/CMakeLists.txt calls find_package(OpenSSL REQUIRED). macOS ships no OpenSSL development headers, so with no root to search this is a hard stop — ./setup.sh cannot complete on an Intel Mac as written.

2. A quieter TLS problem. Even given a working OpenSSL, the guard below is skipped because it is conditioned on the same variable:

if(APPLE AND OPENSSL_ROOT_DIR)
    # symlink libssl/libcrypto into Qt's lib dir

The comment on that block explains the stakes: without the symlinks Qt's openssl TLS plugin fails to register and Qt falls back to the deprecated SecureTransport backend, "which double-frees in SSLWrite during QWebSocket close and crashes the crypto tab." So the hardcoded path also silently disarms the workaround for that crash.

Fix

Ask Homebrew for the prefix rather than hardcoding one:

OPENSSL_PREFIX="$(brew --prefix openssl@3 2>/dev/null || true)"

This is correct on both architectures and additionally honours a non-standard HOMEBREW_PREFIX. When openssl@3 is not installed, brew --prefix fails, EXTRA_ARGS stays empty, and behaviour is exactly as before — so this is a no-op wherever the current code already worked.

Verification

Built from a clean clone on:

• macOS 15.7.9, Intel x86_64
• Apple Clang 17.0.0
• Qt 6.8.3 (aqtinstall, clang_64), CMake 3.27.7, Ninja 1.11.1
• Homebrew openssl@3 3.6.3 at /usr/local/opt/openssl@3

Results:

• Configure succeeds — Found OpenSSL: /usr/local/opt/openssl@3/lib/libcrypto.dylib (found version "3.6.3")
• All four symlinks created in Qt's lib dir (libssl.dylib, libssl.3.dylib, libcrypto.dylib, libcrypto.3.dylib)
• Build completes: 758/758 targets, 0 errors
• App logs TLS backend: openssl (available: securetransport, openssl, cert-only) at startup, confirming the openssl plugin registered rather than falling back to SecureTransport

Without this change the same clone fails at the configure step.

[github-actions]

Hi @mstru54 — thanks for the PR!

Our automated scope gate flagged the following:

❌ No scope-approved linked issue. This PR must close an issue that carries one of: good-first-issue, help-wanted, scope:approved. Link it in the PR body with Closes #NNN or via GitHub's "Linked issues" sidebar.

Please read CONTRIBUTING.md. Once an issue with the appropriate label exists and is linked here, re-run this check by pushing an empty commit or editing the PR description. A maintainer can also bypass this gate by adding the scope:approved label to this PR.

PRs that remain unresolved for 7 days will be closed automatically.

[tilakpatel22]

@mstru54 Thanks for the PR