Milan Obuch
2018-Sep-08 08:08 UTC
Verification error in daily run on fresh 11.2-RELEASE install
Hi, I did fresh install of FreeBSD 11.2-RELEASE on new amd64 system, and daily job run has following in mailed output: Checking for rejected mail hosts: Certificate verification failed for /C=US/ST=Arizona/L=Scottsdale/O=Starfield Technologies, Inc./CN=Starfield Root Certificate Authority - G2 34374371912:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269: fetch: https://www.ietf.org/timezones/data/leap-seconds.list: Authentication error This error occurs too when I try to fetch mentioned URL from shell. Can someone suggest what to do in order to get rid of this error? Do I understand it right the error means my system is unable to verify certificate validity for www.ietf.org site? Regards, Milan
Marko Turk
2018-Sep-08 09:58 UTC
Verification error in daily run on fresh 11.2-RELEASE install
Hi, On Sat, Sep 08, 2018 at 10:08:45AM +0200, Milan Obuch wrote:> Hi, > > I did fresh install of FreeBSD 11.2-RELEASE on new amd64 system, and > daily job run has following in mailed output: > > Checking for rejected mail hosts: > Certificate verification failed for /C=US/ST=Arizona/L=Scottsdale/O=Starfield Technologies, Inc./CN=Starfield Root Certificate Authority - G2 > 34374371912:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269: > fetch: https://www.ietf.org/timezones/data/leap-seconds.list: Authentication error > > This error occurs too when I try to fetch mentioned URL from shell. Can > someone suggest what to do in order to get rid of this error? Do I > understand it right the error means my system is unable to verify > certificate validity for www.ietf.org site?Do you have ca_root_nss port/package installed? BR/Marko -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: not available URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20180908/32c22eac/attachment.sig>