From nobody Mon Dec 8 16:45:03 2025 X-Original-To: pkg@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dQ7BR2dy6z6K4GD for ; Mon, 08 Dec 2025 16:45:03 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dQ7BR27MNz3MJ3 for ; Mon, 08 Dec 2025 16:45:03 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1765212303; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=8DuRCyZ3KO6HvFH1XQj+MNRtjeG89JophGBpkUyt2dM=; b=vY4pMexl3vcpBHzfNxfU5tIGVEsDfBkz3klECm91s0Lt3ozfCLqLcbfUK58bH0TRd2/wux QLyQHZP1l4J0zHICunFhIqKih69u6CHsOT1zGwC/0DhCgXvDEGDkd94uO3xLYZyumB9f5S AlSvZ8xTRpj0WUiqMHVh/RigaBZKIeOw3j16USShtXdO7bvheWWig90/TxAkGO0ZE5XH20 3cL1A+mcV8gY/RvmL2OvSIdPukmBPLI+VO4q8pcyiVxyYvulBpGF48sX1s8jj0SYsuaJeE k3eILB/jv3MgBxW8w8SfdKkbv86s68wt1zJNdxDWxDzCL8KkrGTihTjD+gi+Kw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1765212303; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=8DuRCyZ3KO6HvFH1XQj+MNRtjeG89JophGBpkUyt2dM=; b=BDpJPfNzf0kuaqDJebD2XREzNHrurOwqvqQkHT725Pk7ZJVc0LvqWX9T+MHmofXe5Aav2X EvpwF1laBgLKmp7afjkWyC5FIFoK8Lf3eUh3NXKFa+bUWMA4G7nxj3QSfNE0Sz5bbpyU+n bo+xk3WKSyKyzmyLu/gUTPaMIgaERQFzbdpOAdvAtf/2ixYxeNsX9dOFJMW/G5MMbleJP6 HLT9ZVl4EfopqiyRwAcEYLQydoBy8YogEQxtL2jxziKTuTj8Zg8N9nKBGGjqCLy1nEJCWH RHcQR8j4QOlfaXcam5mlq/P8NBIgDEyV6My1YzixMCNfzOTtmaqxmzlug9UAng== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1765212303; a=rsa-sha256; cv=none; b=v5A3gdWyZG2uuy0NHetaJN/J1nW/U7ZfA/kuh7Ykh9UOshFs3LE9W+hLj29JYk7inCqJvI d2nu+VrRGx7DV0W/X1AnY9oFRtCqzJeb96xLfVYVqGdfWo3/Euwcd8WnxxCAQ8ySEtxFc2 sHbEpymYrZuk3skHyilqEXmUToHbHbbuTPuBYdzPCbE6q7rvhXJmX6iNtSqvbU9c7tGPff N+2C8COJY9enoQWdK6sl7YezXpohBsFyVYGHNc/XAq3rgtQbml9Oo9ozdSa+I3SrLPLF2S Dvc72ZewvswPQbGbx3zwkOhCIqZXhBMydzK7bZamQNR/dCyYxHMWu76bbZlTIQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4dQ7BR1gtPz5TV for ; Mon, 08 Dec 2025 16:45:03 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 5B8Gj33t070700 for ; Mon, 8 Dec 2025 16:45:03 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 5B8Gj3Uf070699 for pkg@FreeBSD.org; Mon, 8 Dec 2025 16:45:03 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: pkg@FreeBSD.org Subject: [Bug 291483] RELEASE installation fails to fetch from non-resolving pkgbase.FreeBSD.org: No error Date: Mon, 08 Dec 2025 16:45:03 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: conf X-Bugzilla-Version: 15.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: vt+freebsd@vbcy.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: pkg@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Binary package management and package tools discussion List-Archive: https://lists.freebsd.org/archives/freebsd-pkg List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-pkg@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D291483 --- Comment #7 from Vassili Tchersky --- After some debugging with openssl s_client I got "certificate is not yet va= lid" and I knew ... the motherboard is pristine and so the RTC was set to year 2= 018. After running ntpdate from the installer console, pkg update works and so t= he installer. No obvious error was given by "pkg -dd" except for "curl_open, fetcher pkg+https" and then "pkg: Failed to fetch [...]: No Error". When using the binary /usr/bin/fetch that uses the same libfetch than pkg (= or pkg-static), it returns "pkgbase.freebsd.org: Address family for host not supported" (and I get it now, the SRV looking is a pkg-specific behaviour). My problem is resolved, the bug may be closed. However, I think the certifi= cate error should be more clearly reported in the pkg logs. (package signing with HTTP was good enough IMHO, and the security of HTTPS = here is not obvious: the certificate is checked against whatever the SRV lookup returned and pkg/libfetch resolver does not seem to check for DNSSEC) --=20 You are receiving this mail because: You are the assignee for the bug.=