Verification error in daily run on fresh 11.2-RELEASE install

[Marko Turk]

Hi,

On Sat, Sep 08, 2018 at 10:08:45AM +0200, Milan Obuch wrote:
> Hi,
> 
> I did fresh install of FreeBSD 11.2-RELEASE on new amd64 system, and
> daily job run has following in mailed output:
> 
> Checking for rejected mail hosts:
> Certificate verification failed for /C=US/ST=Arizona/L=Scottsdale/O=Starfield Technologies, Inc./CN=Starfield Root Certificate Authority - G2
> 34374371912:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
> fetch: https://www.ietf.org/timezones/data/leap-seconds.list: Authentication error
> 
> This error occurs too when I try to fetch mentioned URL from shell. Can
> someone suggest what to do in order to get rid of this error? Do I
> understand it right the error means my system is unable to verify
> certificate validity for www.ietf.org site?

Do you have ca_root_nss port/package installed?

BR/Marko
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20180908/32c22eac/attachment.sig>