Solved Cannot fetch security patches from freebsd.org

[Andry]

Is it possible to set three patches at once in /usr/src?

 

[drhowarddrfine]

Could you please change the title of this thread to something related to what it's about. Thanks.

 

[Andry]

PM has been sent, waiting for reply.

For me a complication appeared with:

fetch: https://security.FreeBSD.org/patches/SA-14:30/unbound.patch: Authentication error
root@gateway:~/FreeBSD-SA-14:30.unbound # Certificate verification failed for /C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority
Certificate: Command not found.
root@gateway:~/FreeBSD-SA-14:30.unbound # 675131468:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1180:
675131468:error:14090086:SSL: Command not found.
root@gateway:~/FreeBSD-SA-14:30.unbound # fetch: https://security.FreeBSD.org/patches/SA-14:30/unbound.patch: Authentication error
fetch:: Too many arguments.

I await your answer on this occasion so I can get a patch!

 

[jrm@]

For what it's worth, it's working here.

% fetch https://security.FreeBSD.org/patches/SA-14:30/unbound.patch 
fetch: https://security.FreeBSD.org/patches/SA-14:30/unbound.patch: size of remote file is not known
unbound.patch                                         4880  B   31 MBps 00m00s

ADDED: Do you have security/ca_root_nss installed?
ADDED: Output with -v flag.

% fetch -v https://security.FreeBSD.org/patches/SA-14:30/unbound.patch
looking up security.FreeBSD.org
connecting to security.FreeBSD.org:443
SSL options: 1004fff
Peer verification enabled
Using CA cert file: /usr/local/etc/ssl/cert.pem
Verify hostname
SSL connection established using DHE-RSA-AES128-SHA
Certificate subject: /OU=Domain Control Validated/OU=Gandi Standard Wildcard SSL/CN=*.freebsd.org
Certificate issuer: /C=FR/ST=Paris/L=Paris/O=Gandi/CN=Gandi Standard SSL CA 2
requesting https://security.FreeBSD.org/patches/SA-14:30/unbound.patch
301 redirect to https://www.FreeBSD.org/security/patches/SA-14:30/unbound.patch
looking up www.FreeBSD.org
connecting to www.FreeBSD.org:443
SSL options: 1004fff
Peer verification enabled
Using CA cert file: /usr/local/etc/ssl/cert.pem
Verify hostname
SSL connection established using DHE-RSA-AES128-SHA
Certificate subject: /OU=Domain Control Validated/OU=Gandi Standard Wildcard SSL/CN=*.freebsd.org
Certificate issuer: /C=FR/ST=Paris/L=Paris/O=Gandi/CN=Gandi Standard SSL CA 2
requesting https://www.FreeBSD.org/security/patches/SA-14:30/unbound.patch
fetch: https://security.FreeBSD.org/patches/SA-14:30/unbound.patch: size of remote file is not known
local size / mtime: 4880 / 1419715822
unbound.patch                                         4880  B   33 MBps 00m00s

 

[Andry]

How to see?

 

[jrm@]

How to see?

pkg info ca_root_nss

 

[Andry]

pkg info ca_root_nss

pkg: No package(s) matching ca_root_nss

 

[jrm@]

Try installing it. pkg install ca_root_nss.

 

[Andry]

fetch https://security.FreeBSD.org/patches/SA-14:30/unbound.patch
fetch: https://security.FreeBSD.org/patches/SA-14:30/unbound.patch: size of remote file is not known
unbound.patch                                         4880  B 2543 kBps 00m00s

Download the patch

 

[Andry]

Yes, patch downloaded. Solved!