DaemonForums  

Go Back   DaemonForums > NetBSD > NetBSD Package System (pkgsrc)

NetBSD Package System (pkgsrc) Installation and upgrading of packages on NetBSD.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 28th January 2024
rdikarlus rdikarlus is offline
Real Name: Carlosn
Fdisk Soldier
 
Join Date: Nov 2018
Location: IBZ ISLAND
Posts: 63
Default Authentication error when executing pkgin

Hi all,
since last last time I executed pkgin full-upgrade , I get the following error message:

# pkgin update
processing remote summary (https://cdn.netbsd.org/pub/pkgsrc/pa...0.0_2023Q4/All)...
00886327D6700000:error:0A000086:SSL routines:tls_post_process_server_certificate:certi ficate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1889:
00886327D6700000:error:0A000086:SSL routines:tls_post_process_server_certificate:certi ficate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1889:
00886327D6700000:error:0A000086:SSL routines:tls_post_process_server_certificate:certi ficate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1889:
pkgin: Could not fetch https://cdn.netbsd.org/pub/pkgsrc/pa...kg_summary.gz: Authentication error

Any idea how to solve this ?

I am Using NetBSD 10.0_RC3 amd64 on my home-office desktop.

Thanks,
Reply With Quote
  #2   (View Single Post)  
Old 28th January 2024
bsd-keith bsd-keith is offline
Real Name: Keith
Open Source Software user
 
Join Date: Jun 2014
Location: Surrey/Hants Border, England
Posts: 349
Default

Don't know if it makes a difference or not, but full-upgrade has been deprecated, it is suggested to just use upgrade.
__________________
Linux since 1999, & also a BSD user.
Reply With Quote
  #3   (View Single Post)  
Old 28th January 2024
rdikarlus rdikarlus is offline
Real Name: Carlosn
Fdisk Soldier
 
Join Date: Nov 2018
Location: IBZ ISLAND
Posts: 63
Default

The same:
# pkgin upgrade
0068BD5B9F7D0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certi ficate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1889:
0068BD5B9F7D0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certi ficate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1889:
0068BD5B9F7D0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certi ficate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1889:
pkgin: Could not fetch https://cdn.netbsd.org/pub/pkgsrc/pa...kg_summary.gz: Authentication error
#
Reply With Quote
  #4   (View Single Post)  
Old 29th January 2024
bsd-keith bsd-keith is offline
Real Name: Keith
Open Source Software user
 
Join Date: Jun 2014
Location: Surrey/Hants Border, England
Posts: 349
Default

Perhaps, do an update first(?).

I did an update, (got no changes), then I installed some more programs with out any problems.

(I'm on RC3 as well.)
__________________
Linux since 1999, & also a BSD user.
Reply With Quote
  #5   (View Single Post)  
Old 29th January 2024
rdikarlus rdikarlus is offline
Real Name: Carlosn
Fdisk Soldier
 
Join Date: Nov 2018
Location: IBZ ISLAND
Posts: 63
Default

Exactly the same:

# pkgin update
processing remote summary (https://cdn.netbsd.org/pub/pkgsrc/pa...0.0_2023Q4/All)...
00882C25797C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certi ficate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1889:
00882C25797C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certi ficate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1889:
00882C25797C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certi ficate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1889:
pkgin: Could not fetch https://cdn.netbsd.org/pub/pkgsrc/pa...kg_summary.gz: Authentication error
Reply With Quote
  #6   (View Single Post)  
Old 30th January 2024
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,136
Default

It seems that one of the servers of the https://cdn.netbsd.org/ does not have a correct certificate or does not support https yet.
The first time I pasted the https URL of your post into Chrome, it degraded to plain text http
Code:
http://cdn.netbsd.org/pub/pkgsrc/packages/NetBSD/amd64/10.0_2023Q4/All/
And the browser showed a warning for an 'insecure site'

A second effort was successful
Code:
https://cdn.netbsd.org/pub/pkgsrc/packages/NetBSD/amd64/10.0_2023Q4/All/
Chrome now shows an correct secure https connection icon.
Maybe there is one server in the Content Delivery Network (CDN) that has an outdated or misconfigured SSL certificate. Or it does not redirect http traffic to https.

Cannot you chose or configure a non-CDN server? That would prevent playing Russian http/https roulette with the CDN network.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
  #7   (View Single Post)  
Old 31st January 2024
rdikarlus rdikarlus is offline
Real Name: Carlosn
Fdisk Soldier
 
Join Date: Nov 2018
Location: IBZ ISLAND
Posts: 63
Default

It's working now, thanks for your reply. I just changed the server to ftp://ftp.NetBSD.org/pub/pkgsrc/pack...0.0_2023Q4/All in my /usr/pkg/etc/pkgin/repositories.conf file.
Reply With Quote
  #8   (View Single Post)  
Old 1 Week Ago
BSD_Jpn BSD_Jpn is offline
New User
 
Join Date: Jul 2024
Posts: 1
Default

Hello,

I had this same thing happen suddenly a few weeks ago. In my case installing
Quote:
mozilla-rootcerts-openssl
fixed it.

NetBSD 9.3 on a Raspberry Pi 3
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
pkg_add pkgin error netbsdnew17 NetBSD Package System (pkgsrc) 1 21st September 2021 10:14 AM
Bus master DMA error occurs while executing newfs Ninguem NetBSD Installation and Upgrading 3 5th December 2011 10:11 PM
Executing Builtin with xargs issue Rubiks FreeBSD General 1 31st August 2010 01:50 PM
Executing web scripts : can't! erehwon OpenBSD General 3 3rd November 2009 10:02 PM
Executing a c program Libran Programming 13 12th August 2008 11:42 PM


All times are GMT. The time now is 01:17 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick