From owner-freebsd-stable@freebsd.org Sat Sep 8 09:58:50 2018 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 03B18FEECEA for ; Sat, 8 Sep 2018 09:58:50 +0000 (UTC) (envelope-from markoml@markoturk.info) Received: from vps.markoturk.info (vps.markoturk.info [95.154.208.14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8C0328E3F2 for ; Sat, 8 Sep 2018 09:58:49 +0000 (UTC) (envelope-from markoml@markoturk.info) Received: from vps.markoturk.info (localhost [127.0.0.1]) by vps.markoturk.info (Postfix) with ESMTPS id 134772B4EE; Sat, 8 Sep 2018 11:58:41 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=markoturk.info; s=s1024; t=1536400721; bh=nLrpZQ6qavZDXL7cq81oOGATRXEudOyLOYSlFf88hX4=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=xbCeEuo4IY3NDJQU2V3QXcanXeU74IdeOmKmggOs3ZKInhpxU6eIDjVqx/MT2+qL9 ullHpSHyCJllmmB7frVijwoGX403PFlWxorvo0B/hNYTVuN2DXVpLWK54PcGN99uDm dAZzrzLGELq04eZFlU4qKVDS58nwOhMgJ1tEPxXY= Date: Sat, 8 Sep 2018 11:58:36 +0200 From: Marko Turk To: Milan Obuch Cc: freebsd-stable@freebsd.org Subject: Re: Verification error in daily run on fresh 11.2-RELEASE install Message-ID: <20180908095836.GA10044@vps.markoturk.info> References: <20180908100845.2b5b02ae@zeta.dino.sk> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="envbJBWh7q8WU6mo" Content-Disposition: inline In-Reply-To: <20180908100845.2b5b02ae@zeta.dino.sk> User-Agent: Mutt/1.10.1 (2018-07-13) X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Sep 2018 09:58:50 -0000 --envbJBWh7q8WU6mo Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, On Sat, Sep 08, 2018 at 10:08:45AM +0200, Milan Obuch wrote: > Hi, >=20 > I did fresh install of FreeBSD 11.2-RELEASE on new amd64 system, and > daily job run has following in mailed output: >=20 > Checking for rejected mail hosts: > Certificate verification failed for /C=3DUS/ST=3DArizona/L=3DScottsdale/O= =3DStarfield Technologies, Inc./CN=3DStarfield Root Certificate Authority -= G2 > 34374371912:error:14090086:SSL routines:ssl3_get_server_certificate:certi= ficate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269: > fetch: https://www.ietf.org/timezones/data/leap-seconds.list: Authenticat= ion error >=20 > This error occurs too when I try to fetch mentioned URL from shell. Can > someone suggest what to do in order to get rid of this error? Do I > understand it right the error means my system is unable to verify > certificate validity for www.ietf.org site? Do you have ca_root_nss port/package installed? BR/Marko --envbJBWh7q8WU6mo Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhcgjUnLArcQCyVEgeDpsXaaozYgFAluTnUsACgkQeDpsXaao zYgjCRAAvzJMokLPAd3kC6T9tN3FmOMQwBM1NDisyJ4iLoGF6xfAbwQSIi8R7E4f Ue7a7gFKYUx+iytdKNVGKVigec/w2/MTpYYM9VPpvnc6jrY5Tcuzu+cSY5FS9Bh2 wKHfIHJkvNETfp8erbBPQbuWuS9vEnijnjZLWR6D9WGeHC8e3piymyulb7BP39td EZVk5johcVIYejps87I1qLYKg0OX3XSUA+YS3lyN1vGH44GWLZYuKEtPfsSLDt8a i9SvG71VenY80FRwSlUZp5u0fRrfIgUU4czAMYEV0NeSfHBuYs/laQCh/nwmYWyo HIInjlaeNY4zjrjJ1jf1nyuCDXmbapECXP/dnOKeuNENKcT5c+rXdAwjRC2ft6bA NVzAJvZv6sOO8VPG/5oTzzf2txyK4hhzRvsc5A8D5CbR+dmHL5sLiS+1/1tR9aGB JUTCH5FAgkrc9v5XGJCJbqmuhGLjjD7YT0hxdjKdRXP/wDl0gBKY/5Mn3qLpyx4T xkBjaiatdY79KrtNUZEJlY3xgAXE2aP2X3xr1PNVdS40SfMv7p3UuUs8GCwFl+DX kqP5NZJcDmpYBBZ7e//8JLdMb13UsurhU+enAuiqw3d8IOdwMmzhH9i083LPI5Gz 0nAkK7GfppX6zLqZUx/EPUbbldCnSGT6GN48Kt7mG6cVPp79XP0= =0kKS -----END PGP SIGNATURE----- --envbJBWh7q8WU6mo--