[Bug 291483] RELEASE installation fails to fetch from non-resolving pkgbase.FreeBSD.org: No error

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 08 Dec 2025 14:31:12 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291483

--- Comment #6 from Vassili Tchersky <vt+freebsd@vbcy.org> ---
I made a hypothesis about the cause of the bug a little too quickly without
really looking for the cause. I didn't know that pkg performed an SRV query.
And indeed, looking at what's happening on the network from the installer, we
see successful SRV requests and a TLSv1.3 session with
SNI=cloudfront.aws.pkgbase.freebsd.org.

However, pkg from the FreeBSD installer seems to send a fatal Bad Certificate
alert to Cloudfront and close the connection.

In bsdinstaller 15.0-RELEASE /tmp/bsdinstall_log:

DEBUG: Running installation step: pkgbase
pkg: Failed to fetch
https://pkgbase.freebsd.org/FreeBSD:15:amd64/base_release_0/meta.conf: No error
pkg: Failed to fetch
https://pkgbase.freebsd.org/FreeBSD:15:amd64/base_release_0/meta.txz: No error
[...]
https://pkgbase.freebsd.org/FreeBSD:15:amd64/base_release_0/packagesite.tzst:
No error

And "Updating repositories failed, try again?" [Yes/No]

-- 
You are receiving this mail because:
You are the assignee for the bug.