From nobody Wed Jul 3 17:27:03 2024 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WDmtZ252Lz5PpNT for ; Wed, 03 Jul 2024 17:27:18 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic301-22.consmr.mail.gq1.yahoo.com (sonic301-22.consmr.mail.gq1.yahoo.com [98.137.64.148]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4WDmtX6C6lz4Ks9 for ; Wed, 3 Jul 2024 17:27:16 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=yahoo.com header.s=s2048 header.b=A18eFz2c; dmarc=pass (policy=reject) header.from=yahoo.com; spf=pass (mx1.freebsd.org: domain of marklmi@yahoo.com designates 98.137.64.148 as permitted sender) smtp.mailfrom=marklmi@yahoo.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1720027635; bh=PDI5rXVtiCdHCoJhssgfS58yOz/SrrJiH0rxHbsSn7Q=; h=From:Subject:Date:Cc:To:References:From:Subject:Reply-To; b=A18eFz2c2vpJka1CJZAvFWwNDHvxQ00XP0rJuotI9zDxaU+UqksXOygMtB2kw6xwanKdsetXYAvEMLIKzSO5oDHJl0w2Vd+nxRRfNh6Flq1FV9vs8q9CZSXgo5vavgN54VJUm1RjhzcucyCz+s8JHjxTy3mnomGPr2EG62uBzk9QclWLKRUs6ZmZkVjrjgDk0UKK8OB/IUjc9KRaZNBbijdkP6CgQxsmVJPYTKYd7YjDMSDHyNsQgvYfuscGZ3PlzsjHd0ZXJbR6msPAzIqNAcTyY13snHKbk7mUq6EI0fMjkASJ6bvMWZy7+BcFhUuOPv5jjs/j2eeNFdNtfe2Yzg== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1720027635; bh=7Qa9XOwMxWGhi1B5HzLo0ER3huRieUj1rv+LEjxuaa6=; h=X-Sonic-MF:From:Subject:Date:To:From:Subject; b=mLl9gSVaoi0mJgANGMNLyTn1Kv/62P1GrHVdcWWwEk0N2Jfa/Q0YRI0u79fvPSq2Tk9ez+Tweuk5ptvf9Va6tM/ONDP8VEk3UiDoCKAccPFmqIXFKLxsTAI2GLp285HYoRaHWOh/oobM6Zmjb9VE/5UwEFwJaWAPBJNSuhL7kwOJ+u8ZplnGK7fmKPbRAK/SdGNkOx3WH/H6kjvpVSbntRww9ZLANGvot+4Ie98ivjWo7pfwVAUInCSjzqhhpj8TSX8sWOwBYPdcYWM6D0MWvjuj84UVkDYzFiVQLJmW9Iyayx+JyDRBRzMKOa/xLXMCZUGlgX/fL677qjArH9P69A== X-YMail-OSG: ndTIhawVM1l_4d.73n8_a8bYdeze9mZ36cesmuPHWw1WtRfknhs1QycOPw4oyRn cbF0bJGSjSHkyy2h_pDZa34N10RUc5r.37tZISZV9Gnphppink7tvFBYvY3dkS22F.8hBAFXTVf7 uLgm2CI9S7B9_C.hlTnD9KMvS_XrDIcfW2jhEpIHhGeZUI5BvConZsm6mMvgDk0x8pLkUF_3eIMK UfSZxaoyluFtuwBF0FfDNjqfIVLYxHEcVfAArl0OUfrWl2PwpAqMU8zuN4NJ7uhKTKPIHoe8Gnpl MHsKv_PnBh7b4pJ42lUHXl3UP4ztdqekEd_8NXt0XsWyoBKblgoUklfctSKjZZuY7eiSD0xZaANg 0DO5vAja1iwuCqeyUldYSsDUyYp78FSYu_deNxK1vDUZXqQXDz_8KrUgCrWpyIswjiPMvzch_PHY 7n5J5NsMcZ95F4CaqbMUOKkhIAxTWR.SnclLKt1e2SDeSD6ZUOqMWZePOIYB8KSQJwHE62SjjTsJ krxkc4W7mHqKOs2DfDCVolpzyPVYi3OKyF9bBM5Q1TiT2Nkvnm8P9BZSzE6fF6HKNpjbJz3rlJyL POx30vf3Wbjnv.VlW_e.UYL.ylgVLa52phWRh0Dj1bpeb1OFe.fCKNcYTrF0DfmMfjXy7fF9KYCs Jc4glr7nASyM3C1ZVka.gwjlj7fDg7TJxBDg.0LTIRt5VVTynlkq8AtUnqbRbAXIMoq.1OngOw11 4GBGIMqayUrjL6g.troyN74cMBnZAEeR4iap8UZvykZG.PE6m1qhKCERtz200GAi8_E_It0JOiNh ZFDtTpHQ7ZlFkPQgzYltatzCOjKZdyeQk_922a3NKXLW2R6R305e8SB6z9MKHljRdq9WjkT1hULq xlH2gqE1.Du3Gq7hIxxn_Aer0KkJjkm2be71CG47xu67mWilMMPDUo.eJDwRe3_Ni1Hxoq71ZZ8v jzol83zP86rR5cMmtZ.Ee12TOWH7tewALrTa.9RUTB1kPJKSW7WaenwSNT9TbrDRNdayUmSmI4_b 4rhTu71NSUkX5jVPyA0vuWBfB4aTOQlmjeN_yOHMqBDNjC3on6ahzswMNRuvg39rtk6kHVd9OVUO 6lI2zhjYAQz1.E.mgcEi2zuqb_V1O5HRD811ABn5BCveR5SFKvbROVw0bGcVEhTkF.cP2q7jzFgt LaxhvpokNp5YKtKJDM9KX0.D145rS_Qn7xu2MDlISwvdTe07RbocBZWWmIKQitFbBIblnhtZ_CCe ZFTIqXLy8DbtCZjkJBx6AssMX07t7iowwhz4sBn.CmT_VHZ7mDvMoGWfOk.5I5dcRIwL8nsePZFg V9JGyuMj8f9kmZgLueUybU5NcYtUDzGKwR1OJ5.WXE0nXWMo16Df0DebQ1VzGG8jOj9w3nJ8C5Ha Gtkj.lZ6hZnV4nve4nPT7qflXHObhLflKfWJLq4I90M_HOElXArDjzAzGEyA1jikj2oVLm1kzj8R VMPpicdfWbhzZc5W2vgzYD09Kcq2G9Hv0rwwwhTnD0yRCws7APAvgbl_8Vpa9cclpMyRjjINRod4 kpejuK1CPqeu.rvYodovghBvY11LSLXiXLa0d4YmswI6cS3J5kSvxzaxWsbEYOAcVPIIfTIDFwnX xX2CdX2arxAG08jsh2UsooaxUK1ss1DSl.lYVZgtH9qhZXllQr91vdTvmrjYjeYBzRdVIfkre3kW n5y31mIWxpWrX7d8mdM5eR_vi0KVa0Ul_N0iKsy7vPz46Dq8vlZ5ctn4fSItpFs1VVfJUDTxuSAM CuqNgaU7t3r1B_PlUacwX7i0te7cz9Ge75uM8UW1TmsjW6md8FX6YC0v2NyXWrir_VgZiLnjeS3k 5RhwszS9LsdPFl3h8M_L20uSc5DGIVALjTU4s88HEowGFar5KKql8YPo8jOddQqZv2mXf2Z42bYT 0qIvdykBQpD3RMBbH_WTLGIiP0LJSW3WsB5CJlY.na7FpgnOEzWSp2dyyWSxGM6S3to5MHkVIqxW JF2G7WhoKQFiZTfQWsvwRQiRglTOM.jxp3iS5sWiNesiViZrTtKjiZZ6SnE.b490IQOikJhOaUaQ cMMUBnRHqbtmmNuhJ0l6cjlAMgOsScphmUJPMzyQxi9cOsgN6oD5HSxBdlHj29gVuu9cU2z43ZyC Wd.XCMvF.kYzj.vpr.A5ajyAIdtt9oALs0whxM9ZDCksfOcDd57Q00ra.YNujDR9BTgsYptqbEGt T5ufZicfBaXS4wszFPCmlwKY36TppMjY2PRyqM0O8GTwH5fDD_.S5lOtBE5LyU..eGmPu2_c_fPf Zrvg3.g-- X-Sonic-MF: X-Sonic-ID: 02910de0-252c-47a1-b6c7-5b1fbb1e9364 Received: from sonic.gate.mail.ne1.yahoo.com by sonic301.consmr.mail.gq1.yahoo.com with HTTP; Wed, 3 Jul 2024 17:27:15 +0000 Received: by hermes--production-gq1-5b4c49485c-55gxp (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 6a37b35cf1eab8a55b1d51f7919d7a48; Wed, 03 Jul 2024 17:27:13 +0000 (UTC) From: Mark Millard Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-stable@freebsd.org Sender: owner-freebsd-stable@FreeBSD.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.600.62\)) Subject: pkg_https:// failures related to, for example, "SSL certificate problem: certificate is not yet valid" Message-Id: <5667D5C0-44F7-4B40-8F63-50D5973D220D@yahoo.com> Date: Wed, 3 Jul 2024 10:27:03 -0700 Cc: Karl Denninger To: Philip Paeps , FreeBSD-STABLE Mailing List X-Mailer: Apple Mail (2.3774.600.62) References: <5667D5C0-44F7-4B40-8F63-50D5973D220D.ref@yahoo.com> X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.83 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.83)[-0.828]; DMARC_POLICY_ALLOW(-0.50)[yahoo.com,reject]; R_DKIM_ALLOW(-0.20)[yahoo.com:s=s2048]; R_SPF_ALLOW(-0.20)[+ptr:yahoo.com]; MIME_GOOD(-0.10)[text/plain]; DKIM_TRACE(0.00)[yahoo.com:+]; TO_DN_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; ARC_NA(0.00)[]; FREEMAIL_ENVFROM(0.00)[yahoo.com]; RCVD_TLS_LAST(0.00)[]; FREEMAIL_FROM(0.00)[yahoo.com]; MIME_TRACE(0.00)[0:+]; RCPT_COUNT_THREE(0.00)[3]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[98.137.64.148:from]; MLMMJ_DEST(0.00)[freebsd-stable@freebsd.org]; APPLE_MAILER_COMMON(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[98.137.64.148:from]; DWL_DNSWL_NONE(0.00)[yahoo.com:dkim] X-Rspamd-Queue-Id: 4WDmtX6C6lz4Ks9 =46rom a bugzilla comment frombeing blocked from working on an issue (not my entry): QUOTE ( of https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D280038#c37 = ) Well this is a problem with that image and getting enough installed to = be able to do anything like, oh, pkgbase it forward.... root@generic:~ # uname -v FreeBSD 14.1-RELEASE releng/14.1-n267679-10e31f0946d8 GENERIC freebsd root@generic:/home # pkg install git The package management tool is not yet installed on your system. Do you want to fetch and install it now? [y/N]: y Bootstrapping pkg from = pkg+https://pkg.FreeBSD.org/FreeBSD:14:aarch64/quarterly, please wait... Certificate verification failed for /CN=3Dpkg.freebsd.org 0020616CE1680000:error:0A000086:SSL = routines:tls_post_process_server_certificate:certificate verify = failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1890: ..... pkg: Error fetching = https://pkg.FreeBSD.org/FreeBSD:14:aarch64/quarterly/Latest/pkg.txz: = Authentication error A pre-built version of pkg could not be found for your system. Consider changing PACKAGESITE or installing it from ports: = 'ports-mgmt/pkg'. So it would appear that bootstrapping pkg is boned on releng/14.1 for = the Pi at the moment. I shall have to wait until a snapshot shows up I = can grab or this is corrected. END QUOTE Note the "pkg+https://". I had separate problems yesterday that I side stepped by testing use of just "pkg+http://", which worked. See: https://lists.freebsd.org/archives/freebsd-pkgbase/2024-July/000416.html pkg with -d for the https context had its debug output reporting: * SSL certificate problem: certificate is not yet valid It happened to be using 204.15.11.66:443 for the https activity. =3D=3D=3D Mark Millard marklmi at yahoo.com