Cannot fetch (and install) `pkg`

P

pkg-t

Hello. I was just testing out thin jails, after following the handbook, but it seems that `pkg` fails to install?


Code: 
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:14:aarch64/quarterly, please wait...
Certificate verification failed for /C=US/O=Let's Encrypt/CN=R3
0020C1D73E8E0000:error:16000069:STORE routines:ossl_store_get0_loader_int:unregistered scheme:/usr/src/crypto/openssl/crypto/store/store_register.c:237:scheme=file
0020C1D73E8E0000:error:80000002:system library:file_open:No such file or directory:/usr/src/crypto/openssl/providers/implementations/storemgmt/file_store.c:267:calling stat(/etc/ssl/certs/4042bcee.0)
0020C1D73E8E0000:error:16000069:STORE routines:ossl_store_get0_loader_int:unregistered scheme:/usr/src/crypto/openssl/crypto/store/store_register.c:237:scheme=file
0020C1D73E8E0000:error:80000002:system library:file_open:No such file or directory:/usr/src/crypto/openssl/providers/implementations/storemgmt/file_store.c:267:calling stat(/etc/ssl/certs/4042bcee.0)
0020C1D73E8E0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1890:
*REPETITION OF ABOVE 6 LINES HERE*
pkg: Error fetching https://pkg.FreeBSD.org/FreeBSD:14:aarch64/quarterly/Latest/pkg.txz: Authentication error
A pre-built version of pkg could not be found for your system.

Code: 
ls -lh /etc/ssl/certs/4042bcee.0
lrwxr-xr-x  1 root me   49B Jun 27 14:51 /etc/ssl/certs/4042bcee.0 -> ../../../usr/share/certs/trusted/ISRG_Root_X1.pem

And the ISRG_Root_X1.pem file does exist, and compared to a working instance of Firefox, it contains the correct SHA1 fingerprint.

So, there is something wrong with OpenSSL?
 
Ran:
Code: 
# certctl rehash

Now getting different errors:

Code: 
pkg: error:02000068:rsa routines::bad signature
Verifying signature with trusted certificate pkg.freebsd.org.2013102301... failed
Signature is not valid
 
Yep, did check those, thanks for your suggestion though.

The solution(?) was to downgrade to 13.3, which instantly installed pkg correctly.
 
On the first run a new image with "FreeBSD 14.2-STABLE stable/14-n269986-0a9808eb751f" on my OPI PC (armv7) I couldn't run "pkg bootstrap" for the same reasons.
Then I ran "service ntpdate onestart", thanks nxjoseph, and faced an infinite wait:
Code: 
# pkg bootstrap
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:14:armv7/quarterly, please wait...
^C
But "pkg -6 bootstrap" ran successfully... somehow (Of course, I have installed ipv6 on my router before, and pkg.freebsd.org was successfully pinged on both protocols, 4 and 6. But "pkg -4 bootstrap" didn't work)
 
You must log in or register to reply here.
Back
Top