Re: pkg update broke

> On Jul 5, 2026, at 9:37=E2=80=AFPM, William F. Dudley Jr. =
<[email protected]> wrote:
>=20
> I am running "FreeBSD 14.3-RELEASE-p16 amd64".
>=20
> I did "freebsd-update fetch" followed by "freebsd-update install", and =
the power (and my UPS) failed, I think, during the "freebsd-update =
install" step.
>=20
> Now, when I run "pkg update", I get this:
>=20
> pkg: Failed to fetch =
https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly/meta.conf: SSL peer =
certificate or SSH remote key was not OK
>=20
> And identical lines for meta.txz, data.pkg, data.tzst, etc.
>=20
> I have a nearly identical machine, and that machine can do pkg update
> successfully.
>=20
> I have tried to figure out where pkg stores the SSL certificate or SSH =
key that it's complaining about but have been unsuccessful.  Running =
"man pkg", "man pkg.conf", scanning output of "pkg -vv", running "pkg -f =
bootstrap" all failed to help.
>=20
> What is broken and how can I fix it?
>=20
> Thanks,
> Bill Dudley
>=20

Okay, try the following:

openssl s_client -connect pkg.freebsd.org:443=20

and see what the verification prints, it should show the results, and I =
think by default it uses the system cert store.  It should also use the =
same DNS you're using so should get the same pkg server.

-Dan=