Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 20 Jul 2026 20:50:34 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 296937] LetsEncrypt YE2 root certificates missing
Message-ID:  <bug-296937-7788@https.bugs.freebsd.org/bugzilla/>

index | next in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296937

            Bug ID: 296937
           Summary: LetsEncrypt YE2 root certificates missing
           Product: Ports & Packages
           Version: Latest
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: vincent@landgrafx.de

Hi,

it seems that the new LetsEncrypt Root Certificates are missing in ca_root_nss:
https://letsencrypt.org/2025/11/24/gen-y-hierarchy

Manually adding works, but it is strange, since the certificates already work
in the
browser (e.g. firefox -> own trust store) but not for fetch/curl.

---
certctl list | grep ISRG
0b9bc432.0      ISRG Root X2
4042bcee.0      ISRG Root X1
---

Even bugs.freebsd.org uses YE1, so it should be in the list.

Best regards

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-296937-7788>