Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Aug 2025 10:53:51 +0000
From:      polyduekes@proton.me
To:        "freebsd-current@freebsd.org" <freebsd-current@freebsd.org>, "freebsd-pkgbase@freebsd.org" <freebsd-pkgbase@freebsd.org>
Subject:   certificate verification failures during pkg bootstrapping on a 15-PRERELEASE PKGBASE installation
Message-ID:  <xwGw6hQhjiyfg4DMb4VIGYyHHNnAsuz10zqS2m2L4TERyUHtmamkIEMwsEVzOK_2mO84SJ59-_W5Vq6KTY7hx4t2Gc1_EJlcmJu9SbIWHA4=@proton.me>

index | next in thread | raw e-mail

[-- Attachment #1 --]
i grabbed the latest iso image snapshots of both bootonly and disc1 of 15-PRELEASE (e.g. https://download.freebsd.org/snapshots/ISO-IMAGES/15.0/FreeBSD-15.0-PRERELEASE-amd64-20250819-02a8fadd2c4d-279701-bootonly.iso.xz and https://download.freebsd.org/snapshots/ISO-IMAGES/15.0/FreeBSD-15.0-PRERELEASE-amd64-20250819-02a8fadd2c4d-279701-disc1.iso.xz ) upon doing pkgbase installation using the "packages (experimental)" from the "select installation type" window, pkg bootstrapping and installation falls with

> Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5
> 10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5
> 10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5
> 10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:
> pkg: Error fetching https://pkg.FreeBSD.org/FreeBSD:15:amd64/latest/Latest/pkg.pkg: Authentication error
> A pre-built version of pkg could not be found for your system.
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5
> 10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5
> 10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5
> 10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:
> pkg: Error fetching https://pkg.FreeBSD.org/FreeBSD:15:amd64/kmods_latest/Latest/pkg.pkg: Authentication error
> A pre-built version of pkg could not be found for your system.
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5
> 10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5
> 10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:
> Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5
> 10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:
> pkg: Error fetching https://pkg.FreeBSD.org/FreeBSD:15:amd64/base_latest/Latest/pkg.pkg: Authentication error
> A pre-built version of pkg could not be found for your system.
> Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/latest, please wait...
> Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/kmods_latest, please wait...Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/base_latest, please wait...

curiously bootstrapping pkg on a system created by the "traditional" installation happens without a hitch
[-- Attachment #2 --]
<div dir="ltr" style="margin-top: 14px; margin-bottom: 14px;">i grabbed the latest iso image snapshots of both bootonly and disc1 of 15-PRELEASE (e.g.&nbsp;https://download.freebsd.org/snapshots/ISO-IMAGES/15.0/FreeBSD-15.0-PRERELEASE-amd64-20250819-02a8fadd2c4d-279701-bootonly.iso.xz&nbsp;and&nbsp;https://download.freebsd.org/snapshots/ISO-IMAGES/15.0/FreeBSD-15.0-PRERELEASE-amd64-20250819-02a8fadd2c4d-279701-disc1.iso.xz&nbsp;) upon doing pkgbase installation using the&nbsp;"packages (experimental)" from the "select installation type" window, pkg bootstrapping and installation falls with<br><blockquote style="border-left: 3px solid rgb(200, 200, 200); border-color: rgb(200, 200, 200); padding-left: 10px; color: rgb(102, 102, 102);"><span>Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5</span><div><span>10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:</span></div><div><span>Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5</span></div><div><span>10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:</span></div><div><span>Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5</span></div><div><span>10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:</span></div><div><span>pkg: Error fetching <a target="_blank" rel="noreferrer nofollow noopener" href="https://pkg.FreeBSD.org/FreeBSD:15:amd64/latest/Latest/pkg.pkg:">https://pkg.FreeBSD.org/FreeBSD:15:amd64/latest/Latest/pkg.pkg:</a>; Authentication error</span></div><div><span>A pre-built version of pkg could not be found for your system.</span></div><div><span>Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5</span></div><div><span>10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:</span></div><div><span>Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5</span></div><div><span>10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:</span></div><div><span>Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5</span></div><div><span>10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:</span></div><div><span>pkg: Error fetching <a target="_blank" rel="noreferrer nofollow noopener" href="https://pkg.FreeBSD.org/FreeBSD:15:amd64/kmods_latest/Latest/pkg.pkg:">https://pkg.FreeBSD.org/FreeBSD:15:amd64/kmods_latest/Latest/pkg.pkg:</a>; Authentication error</span></div><div><span>A pre-built version of pkg could not be found for your system.</span></div><div><span>Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5</span></div><div><span>10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:</span></div><div><span>Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5</span></div><div><span>10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:</span></div><div><span>Certificate verification failed for /C=US/O=Let's Encrypt/CN=E5</span></div><div><span>10A0E522582C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:</span></div><div><span>pkg: Error fetching <a target="_blank" rel="noreferrer nofollow noopener" href="https://pkg.FreeBSD.org/FreeBSD:15:amd64/base_latest/Latest/pkg.pkg:">https://pkg.FreeBSD.org/FreeBSD:15:amd64/base_latest/Latest/pkg.pkg:</a>; Authentication error</span></div><div><span>A pre-built version of pkg could not be found for your system.</span></div><div><span>Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/latest, please wait...</span></div><div><span>Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/kmods_latest, please wait...</span></div><span>Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/base_latest, please wait...</span><br></blockquote></div><span style="font-family: Arial, sans-serif; font-size: 10.5pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">curiously bootstrapping pkg on a system created by the "traditional" installation happens without a hitch</span>
home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xwGw6hQhjiyfg4DMb4VIGYyHHNnAsuz10zqS2m2L4TERyUHtmamkIEMwsEVzOK_2mO84SJ59-_W5Vq6KTY7hx4t2Gc1_EJlcmJu9SbIWHA4=>