Re: pkg 1.18.4 refuses local CAcert on 13.1-RELEASE-p2

On 9/4/22 18:42, Axel Rau wrote:
> While accessing my local poudriere repo I’m getting
> - - -
> Bootstrapping pkg from https://some_fqdn/131amd64-default, please wait...
> Certificate verification failed for some_internal_CA
> 34391269376:error:1416F086:SSL \
> routines:tls_process_server_certificate:certificate \
> verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
> - - -
> but openssl verify shows successful verification:

Can you try getting /usr/local/etc/ssl/cert.pem out of the way?
Possibly /etc/ssl/cert.pem too, if you have it.

I have the same problem and I solve it by deleting that file.
Unfortunately it's recreated every time ca_root_nss is upgraded.

  bye
	av.