Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 07 Oct 2023 11:46:05 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 274322] security/ca_root_nss and net/openntpd failed to load constraint
Message-ID:  <bug-274322-7788-JpQqQ9BBNZ@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-274322-7788@https.bugs.freebsd.org/bugzilla/>
References:  <bug-274322-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D274322

--- Comment #5 from Christos Chatzaras <chris@cretaforce.gr> ---
With ca_root_nss-3.93 inside /etc/ssl I see this symlink:

cert.pem -> ../../usr/local/share/certs/ca-root-nss.crt

With ca_root_nss-3.93_1 this symlink doesn't exist.

I create it manually and run `certctl rehash` but still Roundcube can't con=
nect
to Dovecot and the logs show:

imap-login: Disconnected: Connection closed: SSL_accept() failed:
error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL ale=
rt
number 48 (no auth attempts in 0 secs): user=3D<>, rip=3D144.76.xxx.xxx,
lip=3D144.76.xxx.xxx, TLS handshaking: SSL_accept() failed: error:14094418:=
SSL
routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48,
session=3D<Yy+16xsHxaSQTGjm>

SSL alert number 48 means "unknown_ca".

Any idea what else changed between these two versions?

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-274322-7788-JpQqQ9BBNZ>