> I see this in the mail for package errors: > https://ftp.openbsd.org/pub/OpenBSD/7.8/packages/amd64/apache-httpd-2.4.65p0.tgz: > TLS handshake failure: handshake failed: error:02FFF00D:system > library:func(4095):Permission denied
> acme-client: 172.65.46.172: tls_write: handshake failed: > error:02FFF00D:system library:func(4095):Permission denied > acme-client: 172.65.46.172: tls_write: handshake failed: Could it be that your root ca file(s) are broken/unreadable or something? Seems like you get similar "permission denied" out of both ftp(1) when fetching packages and when acme-client talks to the LE staging thing. If you could reproduce the "ftp https://ftp.openbsd.org/pub/OpenBSD/7.8/packages/amd64/apache-httpd-2.4.65p0.tgz"; error, then ktrace/kdump might show which call gave "permission denied" so you can divinate if it is a file that is required for TLS which can't be read or if it is when trying to write to the socket or whatever causes the error. -- May the most significant bit of your life be positive.
