From owner-freebsd-questions@freebsd.org Mon Oct 4 00:19:29 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 764E8671FB5 for ; Mon, 4 Oct 2021 00:19:29 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HN1YX3fh8z4q0T for ; Mon, 4 Oct 2021 00:19:28 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 0E3455C008D for ; Sun, 3 Oct 2021 20:19:21 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Sun, 03 Oct 2021 20:19:21 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm3; bh=GIGl9QUfx69SiGSDSjAu4BF5Y1e wEFwCi03fNmM3EsQ=; b=54Pw2YkUpXzEVcmWmkDiDJ5fL29pArY/p1ozR06x/wG R7aazHWAc17E5FUeyuzmJUCNRE7QEF2Z+d6coYwkfYUosROBgNNiXC5KlfhZtPKv r/R9GaFlm3zUDJKeiZOAUwPwnxsnWsg2z9gTWlt7EW5KBDALE4gLY+mNy4LrSM0v CSjIlyVaiEJ6jjElpf93ubr5QC+QKXMNjnuo37NR3zg4Yly4eZ4yI/sjjDyvQYAk oSO9c3KEVof2Zxks0UoqwNp0yaNU7EgqkhjuEs6d4mVpPzedXvHcfxap5TGsQAyN EEJJO3WLPZiQBrpRDyStsrvJ0aRDmbkzlYEUw+2uzcQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=GIGl9Q Ufx69SiGSDSjAu4BF5Y1ewEFwCi03fNmM3EsQ=; b=Qy6rBLAqiGZGeVxbBxDM2O hEK2pCRSBvncrQLQ9+CatJpDa5C9VHMXhLqemJ1WU/vxbVOfzfxA+jbeSwMLaFH8 WDln1sMcoS5qatUIQwCEJ8al4ew0O18rNJOSjLxICNx6gTEg53bZhTeQyZgG+mtV t17BkqeQnMH2tjzmclhng2BNGz/7AVaSaPN5Wbsre08n3b9iZhyl6eMKcW08dSdw NsP41BJZfam4dKXQXAHODwvqcIKK/1qT8YXRNnoyzL0Cv0te2ywn+WtXiwNLh7sb dfdR+l8Mn+eAH8o8vqPATdSkrOPvtc2vu8aYrVzT40TONGp/Ow3e1Fe2GPAdJtGA == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudeluddgfeduucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre ertddtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseii hiigshhtrdhnvghtqeenucggtffrrghtthgvrhhnpeevvdeljeehjefgteeutdeggeeile evgfekkeekfffhudelkeekudetjeejfeegieenucffohhmrghinhepfhhrvggvsghsugdr ohhrghdpmhgrrhgtrdhinhhfohenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmh epmhgrihhlfhhrohhmpehtvggthhdqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Sun, 3 Oct 2021 20:19:20 -0400 (EDT) Date: Mon, 4 Oct 2021 01:19:18 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: Re: SSL Error with "make fetchindex" Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org References: <20211003145811.000026a6@seibercom.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="dY4Xn/JB5Mpd7Nbo" Content-Disposition: inline In-Reply-To: <20211003145811.000026a6@seibercom.net> X-Rspamd-Queue-Id: 4HN1YX3fh8z4q0T X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b=54Pw2YkU; dkim=pass header.d=messagingengine.com header.s=fm1 header.b=Qy6rBLAq; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 66.111.4.27) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-6.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.0.0/20, country:US]; RCVD_IN_DNSWL_LOW(-0.10)[66.111.4.27:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm1]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; RWL_MAILSPIKE_POSSIBLE(0.00)[66.111.4.27:from]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Oct 2021 00:19:29 -0000 --dY4Xn/JB5Mpd7Nbo Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Oct 03, 2021 at 02:58:11PM -0400, Jerry Seibert wrote: >FreeBSD 11.4-RELEASE-p9 > >I have been using 'git' and 'make fetchindex' for several months >without any problems. Suddenly today, running 'make index' throws this >error message: > >/usr/bin/env fetch -am -o /usr/ports/INDEX-11.bz2 https://www.FreeBSD.org= /ports/INDEX-11.bz2 >Certificate verification failed for /O=3DDigital Signature Trust Co./CN=3D= DST Root CA X3 >34374359624:error:14090086:SSL routines:ssl3_get_server_certificate:certif= icate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269: >fetch: https://www.FreeBSD.org/ports/INDEX-11.bz2: Authentication error >Certificate verification failed for /O=3DDigital Signature Trust Co./CN=3D= DST Root CA X3 > >[truncated by me] > >Since I have not made any changes to my system, I can only assume it it >on FreeBSD's side. Please see this thread: https://marc.info/?l=3Dfreebsd-questions&m=3D163301678617012&w=3D2 and this one: https://marc.info/?l=3Dfreebsd-security&m=3D163312865532619&w=3D2 --=20 J. --dY4Xn/JB5Mpd7Nbo Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFaSH4ACgkQs8o7QhFz NAXDgw/+KWJoSUhnpT7JSN9/bT6FpfFIr9QEp/CiFY6ShOKczOaDbQZVmDfxr1oy 7Pl55BnpwizK36sAqkZZpCnexufQT/U98OJpJ+yuCay/EmsaB1wAmOf/C22PmSyy 2gGwJna+Nsx98W7ckc0iZHm3hyGVU1t+VrjIFfKOiBji4raTiblcKU4KXa7ssugL 40wki1vZuMbnmth8T3xbM5Q9nGOxKushQfRt9FAmrGQ+8StXk9vanqsg1Dn+Us40 7/LHxkiMmMkkpqWffVxdQg05gi9m9VlfTfbQHOpWnNM7kG/D0SNNnThT34DE8hR3 fpHB9eXP3ctokXeqt4CTPkAS+Rzlk1XX3g2xkmJzE3N2Xnqw2IWVsjpTBzcK/3Z/ 2F7OBIYJLFYH6qixJvgM4Hup5sC8qtxTOsqr+tGyxppinGkSawFL76tkTTiaoXrV zEk13VuhD14uiHCBsPVXMJvOcY1JNRH+Ywd4CRhrHOtawa3S7qkiCbO52CGnXX7z oEjoAiyNSH8dwrub5PHWf1Gn+h/vVwTszaqFUz/JxdEsBwwGcOkfKrjoOCpKDtER AK9At3asvCChRLK7ssEzRjO1xiQAZCYQpRyesS2rVMQ4T65JrdHK8yf6Aqv6jC2A MTn88aF7FoOc3TEaLPY5a5rVnH5S7qMzG2Tyc/2HGlif3LrUfps= =KZnj -----END PGP SIGNATURE----- --dY4Xn/JB5Mpd7Nbo--