Re: pkg_https:// failures related to, for example, "SSL certificate problem: certificate is not yet valid"

From: Jamie Landeg-Jones <jamie_at_catflap.org>
Date: Fri, 05 Jul 2024 17:04:47 UTC
Philip Paeps <philip@FreeBSD.org> wrote:

> > It does seem that /etc/pkg/FreeBSD.conf should avoid
> > the https notation so that it presents an appropriate
> > default.
>
> I agree.  Adding bapt@ to Cc:.  I think this needs to be reverted.  It 
> should probably also be an errata candidate so folks running releases 
> can update packages even when their clocks get out of sync.

I can confirm. A fresh standard install I did a few months ago (14.0-release
probably) failed to install packages due to https errors. I knew packages
were signed, so didn't investigate the cause of the failure, just changed
pkg+https to pkg+http and all worked ok.

pkg+https was definitely the installed default.

Cheers, Jamie