Date: Wed, 12 Jan 2022 11:56:47 +0100 From: Axel Rau <Axel.Rau@Chaos1.DE> To: FreeBSD-security@FreeBSD.org Subject: Random failures: "unable to get local issuer certificate" Message-ID: <A1C37E54-1FF3-4486-AD6C-470B5F858634@Chaos1.DE>
next in thread | raw e-mail | index | archive | help
--Apple-Mail=_2B88462F-18ED-4EE2-8266-C0C5757DCBE4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi all, I=E2=80=99m running the download curl https://sh.rustup.rs -sSf | sh this works fine, but the rust installer it calls fails on random hosts and jails with error sending request \ for url = (https://static.rust-lang.org/dist/channel-rust-stable.toml.sha256): \ error trying to connect: error:1416F086:SSL \ routines:tls_process_server_certificate:certificate \ verify failed:ssl/statem/statem_clnt.c:1915: \ (unable to get local issuer certificate) All tested systems/jails are running 12.2p7 and habe identical cert = stores, kept up-to-date with freebsd-update. OpenSSL 1.1.1h-freebsd from base. Which knobs are influencing local issuer list? Where can I dig to resolve this issue? Any help appreciated, Axel --- PGP-Key: CDE74120 =E2=98=80 computing @ chaos claudius --Apple-Mail=_2B88462F-18ED-4EE2-8266-C0C5757DCBE4 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEl5evOTfnjZdhkBzKaPxTRM3nQSAFAmHes/AACgkQaPxTRM3n QSC8og/9GMAAuPAMUORighjhfP2lAPJbknEuwW1rrAZP+XQctk7z8zg3XnJqAf2Z bfU4d+4pUzxKFkzr6Fru0KVSuZbxB0rDFR9l0oHUVUXUTVzOJIy5XwGzYlVBzyGV Y4D5gW2Wjwm9uOSnbJZ975DHjTHdvTjjSaXPxx3p5GdwfNM2Uab3DcfTwXvif/t7 J1vZmmuPuJFo4EhgNsOCKuXFtMFnz/2luSAgysxbJNGtqbAYNuNQhAc97yFG7Xmm GxJ+4o+B/Vdwn9nijFHTDkmB5/r6FJ+0nCOjAfq8Rt0kqJL05v6p0yldVfQXz72U dyRnWZ4Tj5tvH3fT10KLaNWq2IeS41eWQWLm+0dnZ0D6ax0WGM7ZnKIPKVKbSVRe 7LtLhgaLBvI0hNiWeT1JkvvxD6N3uIblNYme+2Irw2s7csJQZlGVFM4GMH0NXTV6 JQ5ZGoQzd7jBb4TVqK8wwjJB6Zj/thJDAmQ/j/+TM7vj8MwPA4J3F8j4dcggoHfL q8E+I5HPhMs+Cnmal83WdUBMmfBuBCeb1R2Ow2Xn54rUB8hzwLLaxTwL61CPXAhS t3xng9XCE53mY0iyIDID0PuIAbUIYgM2sUolO95jJkTBjQL+MqbiDHe0cpqC1iQA 51fJyCI1lOTUylwD4EMt1Z5yvwKKlLSXCo6x5yrAfHhdsI3A67Q= =M07K -----END PGP SIGNATURE----- --Apple-Mail=_2B88462F-18ED-4EE2-8266-C0C5757DCBE4--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?A1C37E54-1FF3-4486-AD6C-470B5F858634>