<HTML><BODY><br>Hi Rimvydas,<br>I have security/ca_root_nss installed via dports and the /etc/ssl/cert.pem symlink goes to /usr/local/share/certs/ca-root-nss.crt. But I can't install any package due to the error:<br>Certificate verification failed for /C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root 34371375740:error:14007086:SSL routines:CONNECT_CR_CERT:certificate verify <br> failed:/usr/src/lib/libressl/../../crypto/libressl/ssl/ssl_clnt.c:1121:<br> pkg: <a href="https://mirror-master.dragonflybsd.org/dports/dragonfly:5.6:x86:64/LATEST/meta.txz" rel="noopener" target="_blank" data-mce-href="https://mirror-master.dragonflybsd.org/dports/dragonfly:5.6:x86:64/LATEST/meta.txz">https://mirror-master.dragonflybsd.org/dports/dragonfly:5.6:x86:64/LATEST/meta.txz</a>: Authentication error...<br> pkg: <a href="https://mirror-master.dragonflybsd.org/dports/dragonfly:5.6:x86:64/LATEST/packagesite.txz" rel="noopener" target="_blank" data-mce-href="https://mirror-master.dragonflybsd.org/dports/dragonfly:5.6:x86:64/LATEST/packagesite.txz">https://mirror-master.dragonflybsd.org/dports/dragonfly:5.6:x86:64/LATEST/packagesite.txz</a>: Authentication error<br><br><br><blockquote style="border-left:1px solid #0857A6; margin:10px; padding:0 0 0 10px;">
Понедельник, 11 ноября 2019, 12:02 +03:00 от Rimvydas Jasinskas <rimvydasjas@gmail.com>:<br>
<br>
<div id="">
<div class="js-helper js-readmsg-msg">
<style type="text/css"></style>
<div>
<div id="style_15734629711597117963_BODY">On Fri, Nov 8, 2019 at 1:59 PM Ilia Gorstkine <<a href="mailto:cadavo@mail.ru">cadavo@mail.ru</a>> wrote:<br>
> I have tried other repositories, but with the same results.<br>
> I tried installing ca_root_nss, but pkg install ca_root_nss returned the same error.<br>
> pkg fetch, pkg search, pkg update - same error.<br>
If /usr/local/share/certs/ca-root-nss.crt is not available then you<br>
have a dangling symlink for /etc/ssl/cert.pem.<br>
DragonFly BSD base now comes with /usr/share/examples/etc/ssl/cert.pem<br>
(as provided by LibreSSL 2.9.1) and it could be copied as<br>
/etc/ssl/cert.pem for cases when /usr/local is not mounted or<br>
security/ca_root_nss package is not installed without need to set<br>
SSL_NO_VERIFY_PEER environment variable for libfetch users or use<br>
"fetch --no-verify-peer". The /etc/ssl/cert.pem will be replaced by<br>
symlink once security/ca_root_nss port gets installed.<br>
<br>
> pkg: sqlite error while executing ALTER TABLE packages ADD licenselogic INTEGER NOT NULL DEFAULT(1); in file pkgdb.c:2477: no such table: packages<br>
Your pkg database got corrupted, it is located in<br>
/var/db/pkg/local.sqlite (by default). The pkg(8) will create a new<br>
one if it is deleted.<br>
<br>
Best regards,<br>
Rimvydas<br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
<br>-- <br>Ilia Gorstkine<br></BODY></HTML>