Solved Certificate issues after upgrade?

[jpoa]

Greetings,

Posting this because I can't figure the solution after several attempts...

Long story short, updated the system some days ago and now nextcloud complains about the Let's Encrypt intermediate certificate (R3). This is not specific to nextcloud as far as I understand it (seems to be Qt related somehow based on my searches online).

Tried reinstalling ca_root_nss, checked the symbolic links, deleted them, recreated them, the issue remains.

Any ideas?

How are these Qt apps navigating the certificate chain?

Things I have tried:

pkg install --force ca_root_nss

ls -la /etc/ssl/cert.pem /usr/local/etc/ssl/cert.pem /usr/local/openssl/cert.pem /usr/local/etc/ssl/cert.pem.sample /usr/local/openssl/cert.pem.sample
lrwxr-xr-x  1 root  wheel      43 Feb  9 01:18 /etc/ssl/cert.pem -> ../../usr/local/share/certs/ca-root-nss.crt
lrwxr-xr-x  1 root  wheel      33 Feb  9 01:18 /usr/local/etc/ssl/cert.pem -> ../../share/certs/ca-root-nss.crt
lrwxr-xr-x  1 root  wheel      33 Feb  9 01:18 /usr/local/etc/ssl/cert.pem.sample -> ../../share/certs/ca-root-nss.crt
-rw-r--r--  1 root  wheel  744726 Feb  9 01:18 /usr/local/openssl/cert.pem
lrwxr-xr-x  1 root  wheel      30 Feb  9 01:18 /usr/local/openssl/cert.pem.sample -> ../share/certs/ca-root-nss.crt

rm /etc/ssl/certs/*
certctl rehash

 

[jpoa]

In case someone else stumbles upon this issue I could get it to work by doing the following:

rm /etc/ssl/cert.pem
rm /usr/local/etc/ssl/cert.pem
rm /usr/local/openssl/cert.pem
rm /etc/ssl/certs/*
pkg install --force net/qt5-network ca_root_nss

 

[person3876]

I had a similar problem, Postfix wasn't starting TLS. pkg install ca_root_nss was all I needed -- it was not installed somehow! I think an autoremove got rid of it but not sure. Thanks for posting!