Date: Thu, 3 Dec 2020 21:56:50 -0500 (EST) From: "Sean C. Farley" <scf@FreeBSD.org> To: Bob Willcox <bob@immure.com> Cc: stable list <freebsd-stable@freebsd.org> Subject: Re: authentication errors on 'make fetchindex' in /usr/ports Message-ID: <4c5940f3-5d11-d784-b887-455455bb434f@FreeBSD.org> In-Reply-To: <X8ltcRlRcc7BAyZP@rancor.immure.com> References: <X8ltcRlRcc7BAyZP@rancor.immure.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 3 Dec 2020, Bob Willcox wrote: > I am trying to upgrade a 12.1-stable system installed back in July to > 12.2-stable. I downloaded the new ports hierarchy and now when I > attempt to run 'make fetchindex' > I get these errors: > > /usr/bin/env fetch -am -o /usr/ports/INDEX-12.bz2 https://www.FreeBSD.org/ports/INDEX-12.bz2 > Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 > 546533376:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: > fetch: https://www.FreeBSD.org/ports/INDEX-12.bz2: Authentication error > Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 > 546533376:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915: > > Can someone help? > > Thanks, > Bob That looks like you need to run certctl(8): certctl rehash. This is the commit that brought it into 11-STABLE and 12-STABLE: https://svnweb.freebsd.org/base?view=revision&revision=357082 However, I recommend reading the man page for it first in case you have cert hashes already in a place like /etc/ssl/certs. It took me a bit by surprise because my hashes that were linked from a separate directory were removed. Sean -- scf@FreeBSD.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4c5940f3-5d11-d784-b887-455455bb434f>