Inconsistencies in openssl s_client

[Olivier]

Anton Yuzhaninov <citrin+bsd at citrin.ru> writes:

> On 06/29/17 22:35, Olivier wrote:
>>     Verify return code: 20 (unable to get local issuer certificate)
>> ---
>> 
>> I could see that ca_root_nss is newer on 3 and 4 (3.31, compared to 3.30
>> on 1 and 3.29 on 2).
>
> Probably ca_root_nss on hosts 3 and 4 was installed without option
> ETCSYMLINK (default). Try to turn this option on and reinstall the port.

Spot on.

Thank you.

Olivier
--