After seeing the error above over the last few days, I looked for debug commands to see what might be up. It seems like there is a new perhaps problematic certificate?
Code:
root@f132:/usr/src # GIT_TRACE_PACKET=1 GIT_TRACE=2 GIT_CURL_VERBOSE=1 git pull
23:35:54.801781 git.c:465 trace: built-in: git pull
23:35:54.819273 run-command.c:657 trace: run_command: git fetch --update-head-ok
23:35:54.821704 git.c:465 trace: built-in: git fetch --update-head-ok
23:35:54.838516 run-command.c:657 trace: run_command: GIT_DIR=.git git remote-https origin [URL]https://git.freebsd.org/src.git[/URL]
23:35:54.843498 git.c:750 trace: exec: git-remote-https origin [URL]https://git.freebsd.org/src.git[/URL]
23:35:54.843586 run-command.c:657 trace: run_command: git-remote-https origin [URL]https://git.freebsd.org/src.git[/URL]
23:35:54.850344 http.c:843 == Info: Couldn't find host git.freebsd.org in the .netrc file; using defaults
23:35:54.854846 http.c:843 == Info: Host git.freebsd.org:443 was resolved.
23:35:54.854880 http.c:843 == Info: IPv6: 2001:500:6b:d::24ca:1
23:35:54.854887 http.c:843 == Info: IPv4: 192.158.248.9
23:35:54.854957 http.c:843 == Info: Trying 192.158.248.9:443...
23:35:54.879066 http.c:843 == Info: Connected to git.freebsd.org (192.158.248.9) port 443
23:35:54.882584 http.c:843 == Info: ALPN: curl offers h2,http/1.1
23:35:54.882967 http.c:843 == Info: TLSv1.3 (OUT), TLS handshake, Client hello (1):
23:35:54.967652 http.c:843 == Info: TLSv1.3 (IN), TLS handshake, Server hello (2):
23:35:54.968322 http.c:843 == Info: TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
23:35:54.968328 http.c:843 == Info: TLSv1.3 (IN), TLS handshake, Certificate (11):
23:35:54.971219 http.c:843 == Info: TLSv1.3 (IN), TLS handshake, CERT verify (15):
23:35:54.971513 http.c:843 == Info: TLSv1.3 (IN), TLS handshake, Finished (20):
23:35:54.971607 http.c:843 == Info: TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
23:35:54.971673 http.c:843 == Info: TLSv1.3 (OUT), TLS handshake, Finished (20):
23:35:54.972176 http.c:843 == Info: SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519 / id-ecPublicKey
23:35:54.972205 http.c:843 == Info: ALPN: server accepted http/1.1
23:35:54.972223 http.c:843 == Info: Server certificate:
23:35:54.972240 http.c:843 == Info: subject: CN=git.freebsd.org
23:35:54.972251 http.c:843 == Info: start date: Jun 25 20:19:13 2024 GMT
23:35:54.972257 http.c:843 == Info: expire date: Sep 23 20:19:12 2024 GMT
23:35:54.972270 http.c:843 == Info: subjectAltName: host "git.freebsd.org" matched cert's "git.freebsd.org"
23:35:54.972279 http.c:843 == Info: issuer: C=US; O=Let's Encrypt; CN=E5
23:35:54.972284 http.c:843 == Info: SSL certificate verify ok.
23:35:54.972300 http.c:843 == Info: Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA384
23:35:54.972307 http.c:843 == Info: Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using sha256WithRSAEncryption
23:35:54.972313 http.c:843 == Info: Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
23:35:54.972320 http.c:843 == Info: using HTTP/1.x
23:35:54.972499 http.c:790 => Send header, 0000000223 bytes (0x000000df)
23:35:54.972508 http.c:802 => Send header: GET /src.git/info/refs?service=git-upload-pack HTTP/1.1
23:35:54.972513 http.c:802 => Send header: Host: git.freebsd.org
23:35:54.972518 http.c:802 => Send header: User-Agent: git/2.45.2
23:35:54.972522 http.c:802 => Send header: Accept: */*
23:35:54.972551 http.c:802 => Send header: Accept-Encoding: deflate, gzip
23:35:54.972556 http.c:802 => Send header: Accept-Language: C, *;q=0.9
23:35:54.972560 http.c:802 => Send header: Pragma: no-cache
23:35:54.972565 http.c:802 => Send header: Git-Protocol: version=2
23:35:54.972585 http.c:802 => Send header:
23:35:54.972617 http.c:843 == Info: Request completely sent off
23:35:54.993613 http.c:843 == Info: TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
23:35:54.993807 http.c:843 == Info: TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
23:35:54.993839 http.c:843 == Info: old SSL session ID is stale, removing
23:35:55.004668 http.c:790 <= Recv header, 0000000017 bytes (0x00000011)
23:35:55.004695 http.c:802 <= Recv header: HTTP/1.1 200 OK
23:35:55.004703 http.c:790 <= Recv header, 0000000022 bytes (0x00000016)
23:35:55.004706 http.c:802 <= Recv header: Server: nginx/1.26.1
23:35:55.004711 http.c:790 <= Recv header, 0000000037 bytes (0x00000025)
23:35:55.004714 http.c:802 <= Recv header: Date: Wed, 26 Jun 2024 06:35:55 GMT
23:35:55.004718 http.c:790 <= Recv header, 0000000059 bytes (0x0000003b)
23:35:55.004721 http.c:802 <= Recv header: Content-Type: application/x-git-upload-pack-advertisement
23:35:55.004727 http.c:790 <= Recv header, 0000000028 bytes (0x0000001c)
23:35:55.004730 http.c:802 <= Recv header: Transfer-Encoding: chunked
23:35:55.004734 http.c:790 <= Recv header, 0000000024 bytes (0x00000018)
23:35:55.004737 http.c:802 <= Recv header: Connection: keep-alive
23:35:55.004741 http.c:790 <= Recv header, 0000000040 bytes (0x00000028)
23:35:55.004744 http.c:802 <= Recv header: Expires: Fri, 01 Jan 1980 00:00:00 GMT
23:35:55.004748 http.c:790 <= Recv header, 0000000018 bytes (0x00000012)
23:35:55.004752 http.c:802 <= Recv header: Pragma: no-cache
23:35:55.004755 http.c:790 <= Recv header, 0000000053 bytes (0x00000035)
23:35:55.004758 http.c:802 <= Recv header: Cache-Control: no-cache, max-age=0, must-revalidate
23:35:55.004762 http.c:790 <= Recv header, 0000000002 bytes (0x00000002)
23:35:55.004765 http.c:802 <= Recv header:
23:35:55.004795 http.c:843 == Info: Connection #0 to host git.freebsd.org left intact
fatal: the remote end hung up unexpectedly