/usr/local/etc/poudriere.d/make.conf comprises one line:
Attempts to build net/citrix_ica fail.
Using SSL Preferences (KDE Plasma, pictured below) to trust the certificate does not resolve the issue.
Please, what should I do?
(I'm almost certain that I resolved the same type of issue a few weeks ago, on a different computer, but can't recall what I did.)
The most recent session:
ICA_CERTS=quovadis_quovadiseuropeevsslcag1_der.crtAttempts to build net/citrix_ica fail.
Using SSL Preferences (KDE Plasma, pictured below) to trust the certificate does not resolve the issue.
Please, what should I do?
(I'm almost certain that I resolved the same type of issue a few weeks ago, on a different computer, but can't recall what I did.)
The most recent session:
Code:
root@mowa219-gjp4-vm-freebsd-13-zfs:~ # poudriere ports -u
[00:00:00] Updating portstree "default" with git+https... done
root@mowa219-gjp4-vm-freebsd-13-zfs:~ # poudriere bulk -b latest -j 13 -tC net/citrix_ica
[00:00:01] Creating the reference jail... done
[00:00:02] Mounting system devices for 13-default
[00:00:02] Stashing existing package repository
[00:00:03] Mounting ports from: /usr/local/poudriere/ports/default
[00:00:03] Mounting packages from: /usr/local/poudriere/data/packages/13-default
[00:00:03] Mounting distfiles from: /usr/ports/distfiles
[00:00:03] Copying /var/db/ports from: /usr/local/etc/poudriere.d/options
[00:00:03] Appending to make.conf: /usr/local/etc/poudriere.d/make.conf
/etc/resolv.conf -> /usr/local/poudriere/data/.m/13-default/ref/etc/resolv.conf
[00:00:03] Starting jail 13-default
[00:00:04] Will build as nobody:nobody (65534:65534)
[00:00:13] Logs: /usr/local/poudriere/data/logs/bulk/13-default/2021-08-28_07h30m21s
[00:00:13] Loading MOVED for /usr/local/poudriere/data/.m/13-default/ref/usr/ports
[00:00:15] Ports supports: FLAVORS SELECTED_OPTIONS
[00:03:10] Ports top-level git hash: 769efa05c
[00:03:10] Gathering ports metadata
[00:03:14] Warning: (net/citrix_ica): unable to load certificate
[00:03:14] Warning: (net/citrix_ica): 34374492160:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
[00:03:14] Warning: (net/citrix_ica): make: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /distfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
[00:03:15] Calculating ports order and dependencies
[00:03:15] (-C) Cleaning specified packages to build
[00:03:15] (-C) Flushing package deletions
[00:03:15] Trimming IGNORED and blacklisted ports
[00:03:16] Package fetch: Looking for missing packages to fetch
[00:03:16] Package fetch: No eligible missing packages to fetch
[00:03:19] Sanity checking the repository
[00:03:19] Checking packages for incremental rebuild needs
[00:03:20] Deleting stale symlinks... done
[00:03:20] Deleting empty directories... done
[00:03:20] Unqueueing existing packages
[00:03:20] Unqueueing orphaned build dependencies
[00:03:20] Sanity checking build queue
[00:03:20] Processing PRIORITY_BOOST
[00:03:20] Balancing pool
[13-default] [2021-08-28_07h30m21s] [balancing_pool:] Queued: 1 Built: 0 Failed: 0 Skipped: 0 Ignored: 0 Tobuild: 1 Time: 00:03:07
[00:03:20] Recording filesystem state for prepkg... done
[00:03:23] Building 1 packages using 1 builders
[00:03:23] Starting/Cloning builders
[00:03:24] Hit CTRL+t at any time to see build progress and stats
[00:03:24] [01] [00:00:00] Building net/citrix_ica | citrix_ica-13.10.0
[00:03:46] [01] [00:00:22] Finished net/citrix_ica | citrix_ica-13.10.0: Failed: fetch
[00:03:46] Stopping 1 builders
[00:03:50] Creating pkg repository
Creating repository in /tmp/packages: 100%
Packing files for repository: 100%
[00:04:09] Committing packages to repository: /usr/local/poudriere/data/packages/13-default/.real_1630132471 via .latest symlink
[00:04:09] Removing old packages
[00:04:09] Failed ports: net/citrix_ica:fetch
[13-default] [2021-08-28_07h30m21s] [committing:] Queued: 1 Built: 0 Failed: 1 Skipped: 0 Ignored: 0 Tobuild: 0 Time: 00:03:56
[00:04:09] Logs: /usr/local/poudriere/data/logs/bulk/13-default/2021-08-28_07h30m21s
[00:04:09] Cleaning up
[00:04:09] Unmounting file systems
root@mowa219-gjp4-vm-freebsd-13-zfs:~ # file /usr/ports/distfiles/linuxx86-13.10.0.20.tar.gz
/usr/ports/distfiles/linuxx86-13.10.0.20.tar.gz: gzip compressed data, was "linuxx86.tar", last modified: Tue Jun 19 06:51:16 2018, from Unix, original size modulo 2^32 57999360
root@mowa219-gjp4-vm-freebsd-13-zfs:~ # cat /usr/local/poudriere/data/logs/bulk/13-default/2021-08-28_07h30m21s/logs/errors/citrix_ica-13.10.0.log
=>> Building net/citrix_ica
unable to load certificate
34374492160:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
make: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /distfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
build started at 2021-08-28T06:33:47+0000
port directory: /usr/ports/net/citrix_ica
package name: citrix_ica-13.10.0
building for: FreeBSD 13-default-job-01 13.0-RELEASE-p3 FreeBSD 13.0-RELEASE-p3 amd64
maintained by: ports@FreeBSD.org
Makefile datestamp: -rw-r--r-- 1 root wheel 2963 May 27 12:06 /usr/ports/net/citrix_ica/Makefile
Ports top last git commit: 769efa05c
Ports top unclean checkout: no
Port dir last git commit: 536c148c2
Port dir unclean checkout: no
Poudriere version: poudriere-git-3.3.99.20210818
Host OSVERSION: 1300139
Jail OSVERSION: 1300139
Job Id: 01
---Begin Environment---
SHELL=/bin/csh
OSVERSION=1300139
UNAME_v=FreeBSD 13.0-RELEASE-p3
UNAME_r=13.0-RELEASE-p3
BLOCKSIZE=K
MAIL=/var/mail/root
MM_CHARSET=UTF-8
LANG=C.UTF-8
WARNING_WAIT=0
STATUS=1
HOME=/root
PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/bin
LOCALBASE=/usr/local
USER=root
POUDRIERE_NAME=poudriere-git
LIBEXECPREFIX=/usr/local/libexec/poudriere
POUDRIERE_VERSION=3.3.99.20210818
MASTERMNT=/usr/local/poudriere/data/.m/13-default/ref
DEV_WARNING_WAIT=0
LC_COLLATE=C
POUDRIERE_BUILD_TYPE=bulk
PACKAGE_BUILDING=yes
SAVED_TERM=xterm-256color
GID=0
OUTPUT_REDIRECTED_STDERR=4
OUTPUT_REDIRECTED=1
UID=0
PWD=/usr/local/poudriere/data/.m/13-default/ref/.p/pool
OUTPUT_REDIRECTED_STDOUT=3
NO_WARNING_PKG_INSTALL_EOL=yes
P_PORTS_FEATURES=FLAVORS SELECTED_OPTIONS
MASTERNAME=13-default
SCRIPTPREFIX=/usr/local/share/poudriere
OLDPWD=/usr/local/poudriere/data/.m/13-default/ref/.p
POUDRIERE_PKGNAME=poudriere-git-3.3.99.20210818
SCRIPTPATH=/usr/local/share/poudriere/bulk.sh
POUDRIEREPATH=/usr/local/bin/poudriere
---End Environment---
---Begin Poudriere Port Flags/Env---
PORT_FLAGS=
PKGENV=
FLAVOR=
DEPENDS_ARGS=
MAKE_ARGS=
---End Poudriere Port Flags/Env---
---Begin OPTIONS List---
unable to load certificate
34374492160:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
make: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /distfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
---End OPTIONS List---
--MAINTAINER--
ports@FreeBSD.org
--End MAINTAINER--
--CONFIGURE_ARGS--
--End CONFIGURE_ARGS--
--CONFIGURE_ENV--
XDG_DATA_HOME=/wrkdirs/usr/ports/net/citrix_ica/work XDG_CONFIG_HOME=/wrkdirs/usr/ports/net/citrix_ica/work HOME=/wrkdirs/usr/ports/net/citrix_ica/work TMPDIR="/tmp" PATH=/wrkdirs/usr/ports/net/citrix_ica/work/.bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/bin SHELL=/bin/sh CONFIG_SHELL=/bin/sh
--End CONFIGURE_ENV--
--MAKE_ENV--
XDG_DATA_HOME=/wrkdirs/usr/ports/net/citrix_ica/work XDG_CONFIG_HOME=/wrkdirs/usr/ports/net/citrix_ica/work HOME=/wrkdirs/usr/ports/net/citrix_ica/work TMPDIR="/tmp" PATH=/wrkdirs/usr/ports/net/citrix_ica/work/.bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/bin NO_PIE=yes MK_DEBUG_FILES=no MK_KERNEL_SYMBOLS=no SHELL=/bin/sh NO_LINT=YES PREFIX=/usr/local LOCALBASE=/usr/local CC="cc" CFLAGS="-O2 -pipe -fstack-protector-strong -fno-strict-aliasing " CPP="cpp" CPPFLAGS="" LDFLAGS=" -fstack-protector-strong " LIBS="" CXX="c++" CXXFLAGS="-O2 -pipe -fstack-protector-strong -fno-strict-aliasing " MANPREFIX="/usr/local" BSD_INSTALL_PROGRAM="install -s -m 555" BSD_INSTALL_LIB="install -s -m 0644" BSD_INSTALL_SCRIPT="install -m 555" BSD_INSTALL_DATA="install -m 0644" BSD_INSTALL_MAN="install -m 444"
--End MAKE_ENV--
--PLIST_SUB--
MOZILLA_HOME= HAVE_ICA_CERTS="" ICA_CERTS="quovadis_quovadiseuropeevsslcag1_der.crt" CERTDIR="/usr/local/ICAClient/keystore/cacerts" WEBPLUGIN_DIR="ICAClient" OSREL=13.0 PREFIX=%D LOCALBASE=/usr/local RESETPREFIX=/usr/local LIB32DIR=lib DOCSDIR="share/doc/citrix_ica" EXAMPLESDIR="share/examples/citrix_ica" DATADIR="share/citrix_ica" WWWDIR="www/citrix_ica" ETCDIR="etc/citrix_ica"
--End PLIST_SUB--
--SUB_LIST--
CDIR=/usr/local/ICAClient PREFIX=/usr/local LOCALBASE=/usr/local DATADIR=/usr/local/share/citrix_ica DOCSDIR=/usr/local/share/doc/citrix_ica EXAMPLESDIR=/usr/local/share/examples/citrix_ica WWWDIR=/usr/local/www/citrix_ica ETCDIR=/usr/local/etc/citrix_ica
--End SUB_LIST--
---Begin make.conf---
USE_PACKAGE_DEPENDS=yes
BATCH=yes
WRKDIRPREFIX=/wrkdirs
PORTSDIR=/usr/ports
PACKAGES=/packages
DISTDIR=/distfiles
FORCE_PACKAGE=yes
PACKAGE_BUILDING=yes
PACKAGE_BUILDING_FLAVORS=yes
#### /usr/local/etc/poudriere.d/make.conf ####
ICA_CERTS=quovadis_quovadiseuropeevsslcag1_der.crt
#### Misc Poudriere ####
.include "/etc/make.conf.ports_env"
---End make.conf---
--Resource limits--
cpu time (seconds, -t) unlimited
file size (512-blocks, -f) unlimited
data seg size (kbytes, -d) 33554432
stack size (kbytes, -s) 524288
core file size (512-blocks, -c) unlimited
max memory size (kbytes, -m) unlimited
locked memory (kbytes, -l) unlimited
max user processes (-u) 6656
open files (-n) 1024
virtual mem size (kbytes, -v) unlimited
swap limit (kbytes, -w) unlimited
socket buffer size (bytes, -b) unlimited
pseudo-terminals (-p) unlimited
kqueues (-k) unlimited
umtx shared locks (-o) unlimited
--End resource limits--
unable to load certificate
34374492160:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
make: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /distfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
=======================<phase: check-sanity >============================
===== env: DEVELOPER_MODE=yes DEVELOPER=1 STRICT_DEPENDS=yes USER=nobody UID=65534 GID=65534
unable to load certificate
34374492160:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
make: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /distfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
===> NOTICE:
The citrix_ica port currently does not have a maintainer. As a result, it is
more likely to have unresolved issues, not be up-to-date, or even be removed in
the future. To volunteer to maintain this port, please create an issue at:
https://bugs.freebsd.org/bugzilla
More information about port maintainership is available at:
https://docs.freebsd.org/en/articles/contributing/#ports-contributing
===> License citrix accepted by the user
===========================================================================
=======================<phase: pkg-depends >============================
===== env: DEVELOPER_MODE=yes USE_PACKAGE_DEPENDS_ONLY=1 USER=root UID=0 GID=0
unable to load certificate
34374492160:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
make: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /distfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
===> citrix_ica-13.10.0 depends on file: /usr/local/sbin/pkg - not found
===> Installing existing package /packages/All/pkg-1.17.1.pkg
[13-default-job-01] Installing pkg-1.17.1...
[13-default-job-01] Extracting pkg-1.17.1: .......... done
===> citrix_ica-13.10.0 depends on file: /usr/local/sbin/pkg - found
===> Returning to build of citrix_ica-13.10.0
===========================================================================
=======================<phase: fetch-depends >============================
===== env: DEVELOPER_MODE=yes USE_PACKAGE_DEPENDS_ONLY=1 USER=root UID=0 GID=0
unable to load certificate
34374492160:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
make: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /distfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
===========================================================================
Can't open /portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt for reading, No such file or directory
34374492160:error:02001002:system library:fopen:No such file or directory:/usr/src/crypto/openssl/crypto/bio/bss_file.c:69:fopen('/portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt','r')
34374492160:error:2006D080:BIO routines:BIO_new_file:no such file:/usr/src/crypto/openssl/crypto/bio/bss_file.c:76:
unable to load certificate
make: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
=======================<phase: fetch >============================
===== env: DEVELOPER_MODE=yes STRICT_DEPENDS=yes USER=root UID=0 GID=0
Can't open /portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt for reading, No such file or directory
34374492160:error:02001002:system library:fopen:No such file or directory:/usr/src/crypto/openssl/crypto/bio/bss_file.c:69:fopen('/portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt','r')
34374492160:error:2006D080:BIO routines:BIO_new_file:no such file:/usr/src/crypto/openssl/crypto/bio/bss_file.c:76:
unable to load certificate
make: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
===> NOTICE:
The citrix_ica port currently does not have a maintainer. As a result, it is
more likely to have unresolved issues, not be up-to-date, or even be removed in
the future. To volunteer to maintain this port, please create an issue at:
https://bugs.freebsd.org/bugzilla
More information about port maintainership is available at:
https://docs.freebsd.org/en/articles/contributing/#ports-contributing
===> License citrix accepted by the user
===> citrix_ica-13.10.0 depends on file: /usr/local/sbin/pkg - found
Checking quovadis_quovadiseuropeevsslcag1_der.crt
Cert quovadis_quovadiseuropeevsslcag1_der.crt not found.
make: exec(exit) failed (No such file or directory)
*** Error code 1
Stop.
make: stopped in /usr/ports/net/citrix_ica
=>> Cleaning up wrkdir
Can't open /portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt for reading, No such file or directory
34374492160:error:02001002:system library:fopen:No such file or directory:/usr/src/crypto/openssl/crypto/bio/bss_file.c:69:fopen('/portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt','r')
34374492160:error:2006D080:BIO routines:BIO_new_file:no such file:/usr/src/crypto/openssl/crypto/bio/bss_file.c:76:
unable to load certificate
make: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
Can't open /portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt for reading, No such file or directory
34374492160:error:02001002:system library:fopen:No such file or directory:/usr/src/crypto/openssl/crypto/bio/bss_file.c:69:fopen('/portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt','r')
34374492160:error:2006D080:BIO routines:BIO_new_file:no such file:/usr/src/crypto/openssl/crypto/bio/bss_file.c:76:
unable to load certificate
make[1]: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
===> Cleaning for citrix_ica-13.10.0
Can't open /portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt for reading, No such file or directory
34374492160:error:02001002:system library:fopen:No such file or directory:/usr/src/crypto/openssl/crypto/bio/bss_file.c:69:fopen('/portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt','r')
34374492160:error:2006D080:BIO routines:BIO_new_file:no such file:/usr/src/crypto/openssl/crypto/bio/bss_file.c:76:
unable to load certificate
make[1]: "/usr/ports/net/citrix_ica/Makefile" line 50: warning: "openssl x509 -noout -hash -in /portdistfiles/quovadis_quovadiseuropeevsslcag1_der.crt" returned non-zero status
build of net/citrix_ica | citrix_ica-13.10.0 ended at Sat Aug 28 07:34:08 BST 2021
build time: 00:00:23
!!! build failure encountered !!!
root@mowa219-gjp4-vm-freebsd-13-zfs:~ # file /usr/ports/distfiles/quovadis_quovadiseuropeevsslcag1_der.crt
/usr/ports/distfiles/quovadis_quovadiseuropeevsslcag1_der.crt: Certificate, Version=3
root@mowa219-gjp4-vm-freebsd-13-zfs:~ #