Cannot fetch (and install) `pkg`

P

pkg-t

Hello. I was just testing out thin jails, after following the handbook, but it seems that `pkg` fails to install?


Code: 
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:14:aarch64/quarterly, please wait...
Certificate verification failed for /C=US/O=Let's Encrypt/CN=R3
0020C1D73E8E0000:error:16000069:STORE routines:ossl_store_get0_loader_int:unregistered scheme:/usr/src/crypto/openssl/crypto/store/store_register.c:237:scheme=file
0020C1D73E8E0000:error:80000002:system library:file_open:No such file or directory:/usr/src/crypto/openssl/providers/implementations/storemgmt/file_store.c:267:calling stat(/etc/ssl/certs/4042bcee.0)
0020C1D73E8E0000:error:16000069:STORE routines:ossl_store_get0_loader_int:unregistered scheme:/usr/src/crypto/openssl/crypto/store/store_register.c:237:scheme=file
0020C1D73E8E0000:error:80000002:system library:file_open:No such file or directory:/usr/src/crypto/openssl/providers/implementations/storemgmt/file_store.c:267:calling stat(/etc/ssl/certs/4042bcee.0)
0020C1D73E8E0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1890:
*REPETITION OF ABOVE 6 LINES HERE*
pkg: Error fetching https://pkg.FreeBSD.org/FreeBSD:14:aarch64/quarterly/Latest/pkg.txz: Authentication error
A pre-built version of pkg could not be found for your system.

Code: 
ls -lh /etc/ssl/certs/4042bcee.0
lrwxr-xr-x  1 root me   49B Jun 27 14:51 /etc/ssl/certs/4042bcee.0 -> ../../../usr/share/certs/trusted/ISRG_Root_X1.pem

And the ISRG_Root_X1.pem file does exist, and compared to a working instance of Firefox, it contains the correct SHA1 fingerprint.

So, there is something wrong with OpenSSL?
 
Ran:
Code: 
# certctl rehash

Now getting different errors:

Code: 
pkg: error:02000068:rsa routines::bad signature
Verifying signature with trusted certificate pkg.freebsd.org.2013102301... failed
Signature is not valid
 
Yep, did check those, thanks for your suggestion though.

The solution(?) was to downgrade to 13.3, which instantly installed pkg correctly.
 
You must log in or register to reply here.
Back
Top