Certificate verification failures on 'make fetchindex' in /usr/ports

[Mike Jakubik]

Hi Bob,



You need to install the root certificate bundle.



cd /usr/ports/security/ca_root_nss/ && make install clean



Cheers.


---- On Tue, 11 Feb 2020 09:07:12 -0500 Bob Willcox <bob at immure.com> wrote ----


Hi All, 
 
I just installed a recent snapshot of 12.1 on a new system and when I run 'make fetchindex' 
in the /usr/ports directory I get this: 
 
bob at han:0 /usr/ports> make fetchindex 
/usr/bin/env  fetch -am -o /usr/ports/INDEX-12.bz2 https://www.FreeBSD.org/ports/INDEX-12.bz2 
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 
34370596864:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: 
fetch: https://www.FreeBSD.org/ports/INDEX-12.bz2: Authentication error 
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 
34370596864:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: 
fetch: https://www.FreeBSD.org/ports/INDEX-12.bz2: Authentication error 
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 
34370596864:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: 
fetch: https://www.FreeBSD.org/ports/INDEX-12.bz2: Authentication error 
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 
34370596864:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: 
fetch: https://www.FreeBSD.org/ports/INDEX-12.bz2: Authentication error 
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 
34370596864:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: 
 
Can anyone tell me how to fix this? Why would I be getting certificate verification 
failures? What am I missing? This is a brand new install and I have installed very 
little else (pdksh, ksh93, & bsdrcmds is all). 
 
Thanks, 
Bob 
 
-- 
Bob Willcox    | It's possible that the whole purpose of your life is to 
mailto:bob at immure.com | serve as a warning to others. 
Austin, TX     | 
_______________________________________________ 
mailto:freebsd-stable at freebsd.org mailing list 
https://lists.freebsd.org/mailman/listinfo/freebsd-stable 
To unsubscribe, send any mail to "mailto:freebsd-stable-unsubscribe at freebsd.org" 
 




Mike Jakubik

https://www.swiftsmsgateway.com/



Disclaimer: This e-mail and any attachments are intended only for the use of the addressee(s) and may contain information that is privileged or confidential. If you are not the intended recipient, or responsible for delivering the information to the intended recipient, you are hereby notified that any dissemination, distribution, printing or copying of this e-mail and any attachments is strictly prohibited. If this e-mail and any attachments were received in error, please notify the sender by reply e-mail and delete the original message.