Solved pkg upgrade returns SSL peer certificate error

[unitrunker]

This is a pkg-base install of 15.0-RELEASE. I am unable to do a 'pkg upgrade' ...

repository FreeBSD-base has no meta file, using default settings
pkg-static: Failed to fetch https://pkg.freebsd.org/FreeBSD:15:amd64/base_release_0/data.pkg: SSL peer certificate or SSH remote key was not OK
pkg-static: Failed to fetch https://pkg.freebsd.org/FreeBSD:15:amd64/base_release_0/data.tzst: SSL peer certificate or SSH remote key was not OK
pkg-static: Failed to fetch https://pkg.freebsd.org/FreeBSD:15:amd64/base_release_0/packagesite.pkg: SSL peer certificate or SSH remote key was not OK
pkg-static: Failed to fetch https://pkg.freebsd.org/FreeBSD:15:amd64/base_release_0/packagesite.tzst: SSL peer certificate or SSH remote key was not OK
Unable to update repository FreeBSD-base
Error updating repositories!

This machine can ping freebsd.org. The date and time are correct (edit: no it wasn't). Other machines on the same network work fine.

/etc/pkg/FreeBSD.conf is the same on all machines.

 

[unitrunker]

More precisely ...

# fetch https://pkg.freebsd.org/FreeBSD:15:amd64/base_release_0/data.pkg
Certificate verification failed for /CN=pkg.freebsd.org
10504663152B0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:2124:
fetch: https://pkg.freebsd.org/FreeBSD:15:amd64/base_release_0/data.pkg: Authentication error

Where do I find this certificate?

 

[Alain De Vos]

ntpdate -v -b pool.ntp.org
export SSL_NO_VERIFY_PEER=1
pkg bootstrap

 

[unitrunker]

Thanks Alain De Vos !
That first line fixed it. I was off by a whole day and could not see it.