[Bug 276919] dns/unbound fails to install required run dependency ca_root_nss

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 16 Feb 2024 09:08:58 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=276919

--- Comment #2 from void@f-m.fm ---
(In reply to Marek Zarychta from comment #1)

FreeBSD 15.0-CURRENT #0 main-n267804-3883c6fbf232-dirty
arm64 1500012 1500012

% doas pkg delete security/ca_root_nss
Checking integrity... done (0 conflicting)
Deinstallation has been requested for the following 1 packages (of 0 packages
in the universe):

Installed packages to be REMOVED:
        ca_root_nss: 3.93_2

Number of packages to be removed: 1

Proceed with deinstalling packages? [y/N]: y
[1/1] Deinstalling ca_root_nss-3.93_2...
[1/1] Deleting files for ca_root_nss-3.93_2: 100%

% doas certctl rehash

% doas service unbound start
Obtaining a trust anchor...
Starting unbound.
[1708073763] unbound[85544:0] error: error in SSL_CTX verify crypto
error:80000002:system library::No such file or directory
[1708073763] unbound[85544:0] error: and additionally crypto error:10000080:BIO
routines::no such file
[1708073763] unbound[85544:0] error: and additionally crypto
error:05880002:x509 certificate routines::system lib
[1708073763] unbound[85544:0] fatal error: could not set up connect SSL_CTX
/usr/local/etc/rc.d/unbound: WARNING: failed to start unbound

[...]

installing ca_root_nss fixes the problem:

% doas pkg install security/ca_root_nss
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
        ca_root_nss: 3.93_2

[...]

% doas service unbound start
Obtaining a trust anchor...
Starting unbound.

-- 
You are receiving this mail because:
You are the assignee for the bug.