Re:_certificate_verification_failures_during_pkg_bo otstrapping_on_a_15-PRERELEASE_PKGBASE_installation

On August 22, 2025 3:33:16 PM GMT+03:00, Tomek CEDRO <tomek@cedro.info> wrote:
>On Fri, Aug 22, 2025 at 2:29 PM Dag-Erling Smørgrav <des@freebsd.org> wrote:
>> polyduekes@proton.me writes:
>> > i grabbed the latest iso image snapshots of both bootonly and disc1 of
>> > 15-PRELEASE [...]  ;) upon doing pkgbase installation using the
>> > "packages (experimental)" from the "select installation type" window,
>> > pkg bootstrapping and installation falls with [...]
>>
>> Certificate verification failed because your clock was not set
>> correctly.  See these reviews:
>>
>>     https://reviews.freebsd.org/D52057
>>     https://reviews.freebsd.org/D52058
>
>I also noticed that problem with rPI ARM64 images. A trivial fix seems
>to be setting "default system timestamp" to a release date? :-P
>

why not just run ntp? i mean ask for that, and a timezone, before running pkg? especially if installer has no dist in it. excluding truly offline installs, getting clock right is one of first things one needs to do anyway. and even then maybe ask manual input. i haven't installed lately but was the time setup really done later, even before pkgbase? seems wtf to me. i mean i do set clocks right before anything anywhere anyway. even systems without rtc can keep time. faking a clock should be last option ever. and is almost always wtf if one can fetch from *.freebsd.org. also, does pkg always live bootstrap, and why? hopefully not : p