FreeBSD: Authentication Error when fetching ports from github

For people who have the same problem:

I have tried to install a port that fetches its source from github and it failed to fetch it.

When I tried the fetch command manually for the given URL I saw the following error:

Certificate verification failed for /C=US/O=DigiCert Inc/ High Assurance EV CA-1
34380826280:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1168:
fetch: Authentication error

I assume its related to githubs latest improvement to their HTTPS/SSL infrastructure.

To solve this I installed the very latest version of OpenSSL on my FreeBSD 10 machine and afterwards the installation just went fine.

2 Responses to FreeBSD: Authentication Error when fetching ports from github

    • Yes. This works only out of the box if you build the security/ca_root_nss port with the option ETCSYMLINK enabled. If you didn’t enable it or if you installed the package, you need to manually add the following symlink:

      ln -sf /usr/local/share/certs/ca-root-nss.crt /etc/ssl/cert.pem

Leave a Reply

Your email address will not be published. Required fields are marked *