From nobody Sat Aug 23 16:34:15 2025 X-Original-To: freebsd-pkgbase@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c8N1d3ZpWz667jf; Sat, 23 Aug 2025 16:34:29 +0000 (UTC) (envelope-from ctuffli@gmail.com) Received: from mail-pg1-f182.google.com (mail-pg1-f182.google.com [209.85.215.182]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c8N1c4qNVz3RL0; Sat, 23 Aug 2025 16:34:28 +0000 (UTC) (envelope-from ctuffli@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=freebsd.org (policy=none); spf=pass (mx1.freebsd.org: domain of ctuffli@gmail.com designates 209.85.215.182 as permitted sender) smtp.mailfrom=ctuffli@gmail.com Received: by mail-pg1-f182.google.com with SMTP id 41be03b00d2f7-b49c1c130c9so1136173a12.0; Sat, 23 Aug 2025 09:34:28 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1755966867; x=1756571667; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=oa379PTU7dGhfESMycjjt0xzkj8s1QpidcB4w5XTwew=; b=hvcHWbiLMiWjKWlfshZmSI3I1/yYzrQtCMuqFE1ej1IxVpsH30mnpvtMTV/o3uuDCT V48yBAZ+yTgz/oB38Rq8Z8JWzJPmsfpz0Z29tHbZ/pUxq6ROPJIJ5Mz0rMX8HPfQgBJL IPQmtJop84fuuZFaMq5WzhWgjdx3wZikba3boQ/1eMrAB5dPYcdSiuhQbZCLc7i4jxBo kqZ6F8mUBxrro9sweFW2+GFRi2kEHS0Vxc14dvbfG6Skp3SI+z3XIEcBibVVgDMKVPOD 1S/pwPdBMqpD4yOv0LHILjOJOKSHZTtyypl8IpiTvuxVC3FmAxQXeU513XjBBo3gP9Ks R32Q== X-Forwarded-Encrypted: i=1; AJvYcCV82Cmsqf1wdZcT0RmgvSSUosZNUZ0vSg8MUpemVJtDhSIvp2PQIMToZsdPgqwmayOCFfLHr5YSocldJ2uUH61S@freebsd.org, AJvYcCXqGlpimM63sTqF67LrLAUIqeSg0+dg5t94KQuqMu8qeDytk2qlumFFWuCraIW8vQv2LH6mxg/fRbIR/ytJrZE=@freebsd.org X-Gm-Message-State: AOJu0Yx0+PNb8TrNQsmZgkzcmMAeNvVnGOQdzMib/6ZMRQ2yZbbC617J 3QUacvjMLRd5JLrwLoUTiN5/hIhSNo7iq9/rx+dOawkVOPu1PaOPruh169kTtA== X-Gm-Gg: ASbGnct00zNXUQRbqU5QCDxCfhbvSxz5HNTk73MlEJJolXOoTtkEZJgqf46Ctcojrim 4TOlJz1ZA8jSeWkcfBvcxY97Xnbi+N2+CPNxBilHhXu3DibBAxVNOcXoaW5ZljAa2xoBtf1gXAh aMC5gGUglJgvWdCkEjQynwJ5K++exhHTKCsT4CVxh+HlOp4pxCECprAZpYTbe/MJSYvCGf2O2KD 0CEWuqR3mqhFdoxNyJEoTYdUCs+GrAzUYUkKB4FVeJ2IHwB6YGowuCi1lYOtkIyIWFmlDBg6F9F ehXIqZwIOhjsg3m0cGfEj18Rhn/eTDt1ljsbjl5YFigOHNfNh5IYZwCb3wp15hwBhAGvU8BHst5 6+CAvlGgq4GRq8HY9x34dUUPbYToh270NnRCRCaV0vhHPsCVViJwsPstx X-Google-Smtp-Source: AGHT+IHKluDGEMBc/zD6NFAKa+A8leyMo/y3RJj/UH8cSfoc+/aLfisq6v+ZIUkrmWIwMv6A29beAQ== X-Received: by 2002:a17:902:e5c7:b0:242:9aaa:1351 with SMTP id d9443c01a7336-2462ee01d2amr80010895ad.13.1755966867026; Sat, 23 Aug 2025 09:34:27 -0700 (PDT) Received: from mail-pj1-f43.google.com (mail-pj1-f43.google.com. [209.85.216.43]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-2466889d273sm25653775ad.142.2025.08.23.09.34.26 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 23 Aug 2025 09:34:26 -0700 (PDT) Received: by mail-pj1-f43.google.com with SMTP id 98e67ed59e1d1-325195d1b1bso1288753a91.2; Sat, 23 Aug 2025 09:34:26 -0700 (PDT) X-Forwarded-Encrypted: i=1; AJvYcCVO9rYHT4rJpWpg3NHHcgfHvBRSFJirlkEsitLWp3kZPQQOlkgw2P/akOUEgvLTDbKTCrmPg0mS87UV+tOZrl4=@freebsd.org, AJvYcCXthYh3lVB01YAoLXAxvEiXL1RgtS7Vyy/ApEsUjx2vFO/GlNqGTRQqxgHH2CF9SZHYIUQyhpjdx8NxIJ8ckmrj@freebsd.org X-Received: by 2002:a17:90b:530f:b0:325:6598:30e5 with SMTP id 98e67ed59e1d1-325659833damr1755215a91.23.1755966866338; Sat, 23 Aug 2025 09:34:26 -0700 (PDT) List-Id: Packaging the FreeBSD base system List-Archive: https://lists.freebsd.org/archives/freebsd-pkgbase List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-pkgbase@FreeBSD.org MIME-Version: 1.0 References: <86tt1zilpy.fsf@ltc.des.dev> <86plcnil2d.fsf@ltc.des.dev> In-Reply-To: <86plcnil2d.fsf@ltc.des.dev> From: Chuck Tuffli Date: Sat, 23 Aug 2025 09:34:15 -0700 X-Gmail-Original-Message-ID: X-Gm-Features: Ac12FXw2HNPSmhIRwdhdyi2-6CQf3XyG8RkEwtqt_KB0RNBAyCvTopA5wwpFwJo Message-ID: Subject: Re: certificate verification failures during pkg bootstrapping on a 15-PRERELEASE PKGBASE installation To: =?UTF-8?Q?Dag=2DErling_Sm=C3=B8rgrav?= Cc: polyduekes@proton.me, "freebsd-current@freebsd.org" , "freebsd-pkgbase@freebsd.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: -- X-Spamd-Result: default: False [-2.10 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.87)[-0.865]; FORGED_SENDER(0.30)[chuck@freebsd.org,ctuffli@gmail.com]; NEURAL_HAM_MEDIUM(-0.23)[-0.230]; R_SPF_ALLOW(-0.20)[+ip4:209.85.128.0/17:c]; MIME_GOOD(-0.10)[text/plain]; DMARC_POLICY_SOFTFAIL(0.10)[freebsd.org : SPF not aligned (relaxed), No valid DKIM,none]; RWL_MAILSPIKE_GOOD(-0.10)[209.85.215.182:from]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US]; MISSING_XM_UA(0.00)[]; TO_DN_SOME(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; MIME_TRACE(0.00)[0:+]; TO_DN_EQ_ADDR_SOME(0.00)[]; R_DKIM_NA(0.00)[]; FROM_NEQ_ENVFROM(0.00)[chuck@freebsd.org,ctuffli@gmail.com]; FROM_HAS_DN(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[209.85.215.182:from,209.85.216.43:received]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; RCVD_TLS_LAST(0.00)[]; MLMMJ_DEST(0.00)[freebsd-current@freebsd.org,freebsd-pkgbase@freebsd.org]; RCPT_COUNT_THREE(0.00)[4] X-Rspamd-Queue-Id: 4c8N1c4qNVz3RL0 On Fri, Aug 22, 2025 at 5:43=E2=80=AFAM Dag-Erling Sm=C3=B8rgrav wrote: > > Dag-Erling Sm=C3=B8rgrav writes: > > polyduekes@proton.me writes: > > > i grabbed the latest iso image snapshots of both bootonly and disc1 o= f > > > 15-PRELEASE [...] ;) upon doing pkgbase installation using the > > > "packages (experimental)" from the "select installation type" window, > > > pkg bootstrapping and installation falls with [...] > > Certificate verification failed because your clock was not set > > My apologies, I assumed you were talking about the installer itself, but > I see what you mean now. It looks like either certctl rehash did not > run or, more likely, it ran but failed because the output directories > did not exist. I did not anticipate this as they're listed in the mtree > files, but those are not used when installing packages. I'll prepare a > patch to make certctl create the directories as needed. In the > meantime, you can run: > > mtree -deU -f /etc/mtree/BSD.root.dist -p / > certctl rehash This allowed me to run pkg after a fresh install with yesterday's snapshot ISO. Thank you! --chuck