From nobody Mon May 05 09:02:43 2025 X-Original-To: pkg@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4ZrbC73TWwz5vC04 for ; Mon, 05 May 2025 09:02:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4ZrbC72NgKz46g0 for ; Mon, 05 May 2025 09:02:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1746435763; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=3Kp5Xhg9mC6OP4lrtiR6scr7MpYGuA5YJpPpMrE0uG8=; b=LLzK4Aav+loGcSQESJyssFAc+UUTWwgCVz9qtnt3oKxH8P5fvGu+eDtHnOJB/gj19cf5+2 q7fuIPET6XHbfBtU3669Nuu10yMZMW1PF0g3rtdrxxL5KIEfi1m66wKodJItleQ3ovFc9L VMPeCCY9VVxegxWP1GcL9fegfh4sw+cRZiV65k5oDeWbiBTN2ENxOUuQ1irPztFK/Wp5Gp Ym2WIeWrZcTw36BsjulbGfpsmxe0JBYkdYSJb57suj/7X9MWzmZqPrvhAiXM3JMpEpJt73 RZWk9v/sCcZNBW/XUv0K0IKeu2C21GBhOI+yaQedRPSEsm3Z07b2cluCtiv86A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1746435763; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=3Kp5Xhg9mC6OP4lrtiR6scr7MpYGuA5YJpPpMrE0uG8=; b=NH8p78tUHZpsFyWuToAGilCRLTKIXN1Dmau5GjGHXC5hGp/kBkeeUWGChn/dYQ2yd8tvPT oOEMxu7VKCTjQJuGyPPFJTtV899LHu1ihPKpwgetri7IbpwuGVQAVgnlk39yG7KcCcyHSh MrkDZ3xYDLV4ji9kxvVpzBuzmGgp6IVUY2fI5i0aK1R4wpqviwZrbMMs+fkm7rUB3P9hxI LNouBzlhLSKFjU8tIc/U73USig5wJ9vD9H4YBs+IPwJF/ycgz0fRSZCY1UTtS7dVtYLu7O 03WYpCFbBdG0YH6lZfmKb9Fw2Z/mi0vn4CbLgDcFaz+c+em9lVw4Xuh+7ur6DA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1746435763; a=rsa-sha256; cv=none; b=wawNwsd2087+tv6jGiE+NfJqBMBv7+6K7zNoFw+mbl4/C/5PEFbmi16dg0A8FC45NHGD+7 LeHRQSduna8n68U8IxQYOHl2nP/Cn/lM0BsuqwcGFpw9WESUt1VCDdWxMwh5W12fOmX9eP 498m/0opAoRiIELpXJyJQLclBuRT9KuVE4QOLfGTWcIVSSqh4KSafPa6SGJQdsOo8dzgb4 ylNf9zgal+7ixaeWpmRryrGsS1+GDeq3VQ7yKqY+1jccmjRBdZg5S2dCT5V2ybBq98D+FY 151Bs6l3iWuF68H6YHyRq7PtuSuaLc54D7ggah0H0lRWk1R9toENrzt4VDR8iQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4ZrbC71jwcz16pm for ; Mon, 05 May 2025 09:02:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 54592huD089550 for ; Mon, 5 May 2025 09:02:43 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 54592hhA089549 for pkg@FreeBSD.org; Mon, 5 May 2025 09:02:43 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: pkg@FreeBSD.org Subject: [Bug 286532] pkg-static: An error occured while fetching package: No error Date: Mon, 05 May 2025 09:02:43 +0000 X-Bugzilla-Reason: AssignedTo CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: franco@opnsense.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: pkg@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Binary package management and package tools discussion List-Archive: https://lists.freebsd.org/archives/freebsd-pkg List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-pkg@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D286532 Franco Fichtner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |franco@opnsense.org --- Comment #1 from Franco Fichtner --- I've been digging into this the past week as well. There's certainly a fact= or here now that vuln.xml is fetched from HTTPS, but the problem appears to be with pkg-static libcurl fetching over TLS as this also pertains to pkg-stat= ice invokes of pkg-upgrade as further indicated here. I've dug a bit deeper and this error in libcurl ends up being unhandled by = pkg integration ("No error"): https://github.com/freebsd/pkg/blob/main/external/curl/lib/vtls/openssl.c#L= 4427-L4429 The actual error is: TLS connect error: error:06880006:asn1 encoding routines::EVP lib Which indicates a deeper issue in OpenSSL's SSL_connect() function returnin= g 1 instead of zero. Interestingly enough the non-static version of pkg doesn't appear to suffer from this and pkg-static only suffers from this in 50% of cases, but if it = does it does not allow to establish any SSL connection during its runtime (contr= ary to when it works which works for all fetches during its runtime). So this looks like an issue specifically tied to static linking into libcurl/OpenSSL although it seems unlikely libcurl is the immediate culprit= of this considering its wide usage elsewhere. Cheers, Franco --=20 You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug.=