Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Jan 2022 11:56:47 +0100
From:      Axel Rau <Axel.Rau@Chaos1.DE>
To:        FreeBSD-security@FreeBSD.org
Subject:   Random failures: "unable to get local issuer certificate"
Message-ID:  <A1C37E54-1FF3-4486-AD6C-470B5F858634@Chaos1.DE>

index | next in thread | raw e-mail

[-- Attachment #1 --]
Hi all,

I’m running the download
	curl https://sh.rustup.rs -sSf | sh
this works fine, but the rust installer it calls fails on random hosts
and jails with

error sending request \
for url (https://static.rust-lang.org/dist/channel-rust-stable.toml.sha256): \
error trying to connect: error:1416F086:SSL \
routines:tls_process_server_certificate:certificate \
verify failed:ssl/statem/statem_clnt.c:1915: \
(unable to get local issuer certificate)

All tested systems/jails are running 12.2p7 and habe identical cert stores,
kept up-to-date with freebsd-update.
OpenSSL 1.1.1h-freebsd from base.

Which knobs are influencing local issuer list?
Where can I dig to resolve this issue?

Any help appreciated,
Axel
---
PGP-Key: CDE74120  ☀  computing @ chaos claudius


[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
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=M07K
-----END PGP SIGNATURE-----
home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?A1C37E54-1FF3-4486-AD6C-470B5F858634>