Re: FreeBSD-EN-21:07.caroot.asc question
On Wed, Feb 24, 2021 at 7:21 PM Herbert J. Skuhra wrote: > > On Wed, Feb 24, 2021 at 06:42:17PM -0600, Greg Balfour wrote: > > After installing the security and errata patches that came out today > > on my 12.2-RELEASE system, I see the following during the "make > > installworld" step. Is this the expected output after removing > > certificates from the root certificate bundle or did something go > > wrong? ... > > unable to load certificate > > 34371108864:error:0909006C:PEM routines:get_name:no start > > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > > TRUSTED CERTIFICATE > > Error: /usr/share/certs/trusted/GeoTrust_Global_CA.pem ... > Patch does not remove empty files unless "-E" switch is used. > > The pem files above are propably empty and you have to remove them > manually (both in /usr/src and /usr/share). > > Why are you not using svn/git to update /usr/src? > > -- > Herbert Applying the patch with the -E option does fix the problem. Thanks. ___ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "[email protected]"
Re: FreeBSD-EN-21:07.caroot.asc question
On Wed, Feb 24, 2021 at 06:42:17PM -0600, Greg Balfour wrote: > After installing the security and errata patches that came out today > on my 12.2-RELEASE system, I see the following during the "make > installworld" step. Is this the expected output after removing > certificates from the root certificate bundle or did something go > wrong? > > [...] > -- > >>> Installing everything completed on Wed Feb 24 18:16:59 CST 2021 > -- > Scanning /usr/share/certs/blacklisted for certificates... > Scanning /usr/share/certs/trusted for certificates... > unable to load certificate > 34371108864:error:0909006C:PEM routines:get_name:no start > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > TRUSTED CERTIFICATE > Error: /usr/share/certs/trusted/GeoTrust_Global_CA.pem > unable to load certificate > 34371108864:error:0909006C:PEM routines:get_name:no start > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > TRUSTED CERTIFICATE > Error: /usr/share/certs/trusted/GeoTrust_Primary_Certification_Authority.pem > unable to load certificate > 34371108864:error:0909006C:PEM routines:get_name:no start > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > TRUSTED CERTIFICATE > Error: > /usr/share/certs/trusted/GeoTrust_Primary_Certification_Authority_-_G3.pem > unable to load certificate > 34371108864:error:0909006C:PEM routines:get_name:no start > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > TRUSTED CERTIFICATE > Error: /usr/share/certs/trusted/GeoTrust_Universal_CA.pem > unable to load certificate > 34371108864:error:0909006C:PEM routines:get_name:no start > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > TRUSTED CERTIFICATE > Error: /usr/share/certs/trusted/GeoTrust_Universal_CA_2.pem > unable to load certificate > 34371108864:error:0909006C:PEM routines:get_name:no start > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > TRUSTED CERTIFICATE > Error: > /usr/share/certs/trusted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem > unable to load certificate > 34371108864:error:0909006C:PEM routines:get_name:no start > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > TRUSTED CERTIFICATE > Error: > /usr/share/certs/trusted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem > unable to load certificate > 34371108864:error:0909006C:PEM routines:get_name:no start > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > TRUSTED CERTIFICATE > Error: /usr/share/certs/trusted/thawte_Primary_Root_CA.pem > unable to load certificate > 34371108864:error:0909006C:PEM routines:get_name:no start > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > TRUSTED CERTIFICATE > Error: /usr/share/certs/trusted/thawte_Primary_Root_CA_-_G2.pem > unable to load certificate > 34371108864:error:0909006C:PEM routines:get_name:no start > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: > TRUSTED CERTIFICATE > Error: /usr/share/certs/trusted/thawte_Primary_Root_CA_-_G3.pem Patch does not remove empty files unless "-E" switch is used. The pem files above are propably empty and you have to remove them manually (both in /usr/src and /usr/share). Why are you not using svn/git to update /usr/src? -- Herbert ___ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "[email protected]"
FreeBSD-EN-21:07.caroot.asc question
After installing the security and errata patches that came out today on my 12.2-RELEASE system, I see the following during the "make installworld" step. Is this the expected output after removing certificates from the root certificate bundle or did something go wrong? [...] -- >>> Installing everything completed on Wed Feb 24 18:16:59 CST 2021 -- Scanning /usr/share/certs/blacklisted for certificates... Scanning /usr/share/certs/trusted for certificates... unable to load certificate 34371108864:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE Error: /usr/share/certs/trusted/GeoTrust_Global_CA.pem unable to load certificate 34371108864:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE Error: /usr/share/certs/trusted/GeoTrust_Primary_Certification_Authority.pem unable to load certificate 34371108864:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE Error: /usr/share/certs/trusted/GeoTrust_Primary_Certification_Authority_-_G3.pem unable to load certificate 34371108864:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE Error: /usr/share/certs/trusted/GeoTrust_Universal_CA.pem unable to load certificate 34371108864:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE Error: /usr/share/certs/trusted/GeoTrust_Universal_CA_2.pem unable to load certificate 34371108864:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE Error: /usr/share/certs/trusted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem unable to load certificate 34371108864:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE Error: /usr/share/certs/trusted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem unable to load certificate 34371108864:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE Error: /usr/share/certs/trusted/thawte_Primary_Root_CA.pem unable to load certificate 34371108864:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE Error: /usr/share/certs/trusted/thawte_Primary_Root_CA_-_G2.pem unable to load certificate 34371108864:error:0909006C:PEM routines:get_name:no start line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE Error: /usr/share/certs/trusted/thawte_Primary_Root_CA_-_G3.pem ___ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "[email protected]"
