From nobody Sat Aug 23 16:32:13 2025 X-Original-To: freebsd-pkgbase@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c8MzK4Plkz667Gt; Sat, 23 Aug 2025 16:32:29 +0000 (UTC) (envelope-from ctuffli@gmail.com) Received: from mail-pl1-x631.google.com (mail-pl1-x631.google.com [IPv6:2607:f8b0:4864:20::631]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c8MzJ3HPkz3RC2; Sat, 23 Aug 2025 16:32:28 +0000 (UTC) (envelope-from ctuffli@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20230601 header.b=EvpTGKkB; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of ctuffli@gmail.com designates 2607:f8b0:4864:20::631 as permitted sender) smtp.mailfrom=ctuffli@gmail.com Received: by mail-pl1-x631.google.com with SMTP id d9443c01a7336-24457f581aeso22923515ad.0; Sat, 23 Aug 2025 09:32:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1755966745; x=1756571545; darn=freebsd.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=1MpNsWKz0X4jOr7Xz1lSThLo5mTPKAOrq8DyodElaHk=; b=EvpTGKkBVLgbQ2Gy+DdGeDevphnJGuTTz+OWa0M7Sv8SX1VOVJby96OJnSH6IdRI06 LflS8GaQEPSNPmQWJFIDFBZm8LBXlLISoAHj4yACCcOkjHlRcz2+9MEBz3EgftG2ZVkG s7r/i2j+cHBmSB8PrTNK64j8Pz9nzRiQqNjGTLYfhweQFhcAPs5SXuMWQLXuyFTpZAHN Cx/SJ+CpkuXR4003GJUts0HjniEJu7mdLL6YSL/bYleUILtJow+5UhHX2VU87BzRnikx H54duaitHflkZptqPpSc75qxrBsTtpkYe4A+EoqnofHf4GQmh3fYbmLcjldvCSE4MZCD 1/LQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1755966745; x=1756571545; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=1MpNsWKz0X4jOr7Xz1lSThLo5mTPKAOrq8DyodElaHk=; b=CvuQjlLPlfvpOTpDeplOZr4iVaplZNW1fVaPRqCAlODFP+L1NXa5SferMYJwT7xJmg +ve4OL2+pEg5hPBGCqqP58ZHEANd9pNGxqruniLTldFPkrhaDCTSTi9hqpAF8yIbNxYJ +zZj0ss7Wf+LMK1PlYvQVewoJJxTrA55KscfK//jnZPkI0kUeToLZSKrPgrz+SLbql+i wtNia5q5f2PfwVykknqsloehDXkFaJS9idg+WDd/fkxS4CVyju71AKF5Ip+dFRbNSSq1 Ua+MRoUvyE+DlHuIrJ+68lAQjrVyrwIhBn6CMMEWhtQbGqPWJQMy7y6Axj9smUcpoDe+ 5ukw== X-Forwarded-Encrypted: i=1; AJvYcCV2OSjkIHnyUeiO7J7OmNWCAE5MOWs1TGy4/6E123JfRZo1KBjH7T8odcymMxCohQoke6GNDHybHh/K3klfIRg=@freebsd.org, AJvYcCXxLls6LbCwzM4bmjrzSJgaQYCMWBD/t/ySuArGWQfMNxxkqRY8IMsCL/21hWbEPxkfupECAsIrKY8SU8nzL9g9@freebsd.org X-Gm-Message-State: AOJu0YxPyyzZjj45asH8azkJ4Mql4QESUEpjUmUgUuUjBuQM2A4pkCpO 4to80+c0e15HZLo2Tvv7JGWcLpdiu4Nx1w9qex5occCtcJ8bzUNiMF3JQYEkf8eBYa6jzSSZKiF NbLnWT7PmVNvJr1pmyAaBkb2MtufsABg1Hw== X-Gm-Gg: ASbGncuD1WGH882S35jvKdnnP+pR8FtzVuX2UVnhbAT0CDD+1AkKdycLh1RB/ukxg/6 HoK/44BcRtunWQzrSTegCHSZzr7ES9mv7j5ReL/qAuQsNmX+eu89QI+RpUjVnsuDl9UB8/XVlGI xpiF8yvUyfhKJL7xT1rumQwxJe9H+APk761HELsG3dhCUGvYkVsT+JUoSjaVvfkRBPETSSdp/z9 q+w4dqa+G7Mjy4v X-Google-Smtp-Source: AGHT+IEqyJItNy79OMNtuAJk/FhoIQAu5YitioKrQEC7W5qz+eCAEJMtvkhRMtu+w3EyIPU/a6ov7mUAL9lBWGsWpls= X-Received: by 2002:a17:903:943:b0:246:15bb:590b with SMTP id d9443c01a7336-2462ee5df20mr87500565ad.17.1755966745087; Sat, 23 Aug 2025 09:32:25 -0700 (PDT) List-Id: Packaging the FreeBSD base system List-Archive: https://lists.freebsd.org/archives/freebsd-pkgbase List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-pkgbase@FreeBSD.org MIME-Version: 1.0 References: <86tt1zilpy.fsf@ltc.des.dev> <86plcnil2d.fsf@ltc.des.dev> In-Reply-To: <86plcnil2d.fsf@ltc.des.dev> From: Chuck Tuffli Date: Sat, 23 Aug 2025 09:32:13 -0700 X-Gm-Features: Ac12FXzNXWQJC5L63HnxdFCR2HSievKzd3nfqK_LVo2V0Uy8muOEJUNzmJNfe-Y Message-ID: Subject: Re: certificate verification failures during pkg bootstrapping on a 15-PRERELEASE PKGBASE installation To: =?UTF-8?Q?Dag=2DErling_Sm=C3=B8rgrav?= Cc: polyduekes@proton.me, "freebsd-current@freebsd.org" , "freebsd-pkgbase@freebsd.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: --- X-Spamd-Result: default: False [-4.00 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.996]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20230601]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; MIME_GOOD(-0.10)[text/plain]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; TO_DN_EQ_ADDR_SOME(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; ARC_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; TO_DN_SOME(0.00)[]; FROM_HAS_DN(0.00)[]; MISSING_XM_UA(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MLMMJ_DEST(0.00)[freebsd-current@freebsd.org,freebsd-pkgbase@freebsd.org]; RCVD_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::631:from]; FREEMAIL_ENVFROM(0.00)[gmail.com] X-Rspamd-Queue-Id: 4c8MzJ3HPkz3RC2 On Fri, Aug 22, 2025 at 5:43=E2=80=AFAM Dag-Erling Sm=C3=B8rgrav wrote: > > Dag-Erling Sm=C3=B8rgrav writes: > > polyduekes@proton.me writes: > > > i grabbed the latest iso image snapshots of both bootonly and disc1 o= f > > > 15-PRELEASE [...] ;) upon doing pkgbase installation using the > > > "packages (experimental)" from the "select installation type" window, > > > pkg bootstrapping and installation falls with [...] > > Certificate verification failed because your clock was not set > > My apologies, I assumed you were talking about the installer itself, but > I see what you mean now. It looks like either certctl rehash did not > run or, more likely, it ran but failed because the output directories > did not exist. I did not anticipate this as they're listed in the mtree > files, but those are not used when installing packages. I'll prepare a > patch to make certctl create the directories as needed. In the > meantime, you can run: > > mtree -deU -f /etc/mtree/BSD.root.dist -p / > certctl rehash This allowed me to run pkg after a fresh install with yesterday's snapshot ISO. Thanks! --chuck