Certificate verification failures on 'make fetchindex' in /usr/ports

[Mike Jakubik]

Not sure, i havent had a need to manually fetch a ports index in years, portsnap auto does it all.


---- On Tue, 11 Feb 2020 12:19:01 -0500 Bob Willcox <bob at immure.com> wrote ----


Thanks alot Mike. That worked for me. 
 
Out of curriosity, is this a fairly recent change?  For some reason I've never experienced 
this issue before, though it's been a number of months that I last installed a new system. 
 
Bob 
 
On Tue, Feb 11, 2020 at 09:17:01AM -0500, Mike Jakubik wrote: 
> Hi Bob, 
> 
> 
> 
> You need to install the root certificate bundle. 
> 
> 
> 
> cd /usr/ports/security/ca_root_nss/ && make install clean 
> 
> 
> 
> Cheers. 
> 
> 
> ---- On Tue, 11 Feb 2020 09:07:12 -0500 Bob Willcox <mailto:bob at immure.com> wrote ---- 
> 
> 
> Hi All, 
> 
> I just installed a recent snapshot of 12.1 on a new system and when I run 'make fetchindex' 
> in the /usr/ports directory I get this: 
> 
> bob at han:0 /usr/ports> make fetchindex 
> /usr/bin/env  fetch -am -o /usr/ports/INDEX-12.bz2 https://www.FreeBSD.org/ports/INDEX-12.bz2 
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 
> 34370596864:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: 
> fetch: https://www.FreeBSD.org/ports/INDEX-12.bz2: Authentication error 
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 
> 34370596864:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: 
> fetch: https://www.FreeBSD.org/ports/INDEX-12.bz2: Authentication error 
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 
> 34370596864:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: 
> fetch: https://www.FreeBSD.org/ports/INDEX-12.bz2: Authentication error 
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 
> 34370596864:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: 
> fetch: https://www.FreeBSD.org/ports/INDEX-12.bz2: Authentication error 
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 
> 34370596864:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: 
> 
> Can anyone tell me how to fix this? Why would I be getting certificate verification 
> failures? What am I missing? This is a brand new install and I have installed very 
> little else (pdksh, ksh93, & bsdrcmds is all). 
> 
> Thanks, 
> Bob 
> 
> -- 
> Bob Willcox    | It's possible that the whole purpose of your life is to 
> mailto:mailto:bob at immure.com | serve as a warning to others. 
> Austin, TX     | 
> _______________________________________________ 
> mailto:mailto:freebsd-stable at freebsd.org mailing list 
> https://lists.freebsd.org/mailman/listinfo/freebsd-stable 
> To unsubscribe, send any mail to "mailto:mailto:freebsd-stable-unsubscribe at freebsd.org" 
> 
> 
> 
> 
> 
> Mike Jakubik 
> 
> https://www.swiftsmsgateway.com/ 
> 
> 
> 
> Disclaimer: This e-mail and any attachments are intended only for the use of the addressee(s) and may contain information that is privileged or confidential. If you are not the intended recipient, or responsible for delivering the information to the intended recipient, you are hereby notified that any dissemination, distribution, printing or copying of this e-mail and any attachments is strictly prohibited. If this e-mail and any attachments were received in error, please notify the sender by reply e-mail and delete the original message. 
 
-- 
Bob Willcox    | It's possible that the whole purpose of your life is to 
mailto:bob at immure.com | serve as a warning to others. 
Austin, TX     | 
 




Mike Jakubik

https://www.swiftsmsgateway.com/



Disclaimer: This e-mail and any attachments are intended only for the use of the addressee(s) and may contain information that is privileged or confidential. If you are not the intended recipient, or responsible for delivering the information to the intended recipient, you are hereby notified that any dissemination, distribution, printing or copying of this e-mail and any attachments is strictly prohibited. If this e-mail and any attachments were received in error, please notify the sender by reply e-mail and delete the original message.