Bug 242214

Summary: 12.0 Release p12 leapsecond file error
Product: Base System Reporter: mike <mikref>
Component: miscAssignee: freebsd-bugs (Nobody) <bugs>
Status: Closed Not A Bug    
Severity: Affects Some People CC: lwhsu
Priority: ---    
Version: Unspecified   
Hardware: amd64   
OS: Any   

Description mike 2019-11-25 00:51:40 UTC
Problem with leapfile!


#dmesg -a 
Nov 25 00:16:31 mybox ntpd[922]: leapsecond file ('/var/db/ntpd.leap-seconds.list'): expired less than 697 days ago



root@mybox:/home/mike # service ntpd fetch
Certificate verification failed for /C=US/ST=Arizona/L=Scottsdale/O=Starfield Technologies, Inc./CN=Starfield Root Certificate Authority - G2
34370572288:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1925:
fetch: https://www.ietf.org/timezones/data/leap-seconds.list: Authentication error
root@mybox:/home/mike #


root@mybox:/home/mike # uname -a
FreeBSD mybox 12.0-RELEASE-p12 FreeBSD 12.0-RELEASE-p12 GENERIC  amd64
Comment 1 Li-Wen Hsu freebsd_committer freebsd_triage 2019-11-25 08:03:35 UTC
Please install or update ca_root_nss package and try again.
Comment 2 mike 2019-11-25 19:28:23 UTC
(In reply to Li-Wen Hsu from comment #1)

Thanks it worked!
Comment 3 Li-Wen Hsu freebsd_committer freebsd_triage 2019-11-25 19:36:25 UTC
Closed it as it works after updating the root CA.  I'm not sure that I should select "Not A Bug" or "Works As Intended", but anyway, there is an ongoing work of SSL root bundle in base at https://svnweb.freebsd.org/base/head/secure/caroot/