FreeBSD: Authentication Error when fetching ports from github

For people who have the same problem:

I have tried to install a port that fetches its source from github and it failed to fetch it.

When I tried the fetch command manually for the given URL I saw the following error:

Certificate verification failed for /C=US/O=DigiCert Inc/ High Assurance EV CA-1
34380826280:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1168:
fetch: Authentication error

I assume its related to githubs latest improvement to their HTTPS/SSL infrastructure.

To solve this I installed the very latest version of OpenSSL on my FreeBSD 10 machine and afterwards the installation just went fine.

4 thoughts on "FreeBSD: Authentication Error when fetching ports from github"

  1. Borro says:

    You may install ca_root_nss only.

    1. dlat says:

      Yes. This works only out of the box if you build the security/ca_root_nss port with the option ETCSYMLINK enabled. If you didn’t enable it or if you installed the package, you need to manually add the following symlink:

      ln -sf /usr/local/share/certs/ca-root-nss.crt /etc/ssl/cert.pem

    2. saw24 says:

      Worked, Thanks

  2. hqc says:

    recompiled the ca_root_nss and portupgrade starts working again!!!

Leave a Reply

Your email address will not be published. Required fields are marked *