Bug 260372

Summary: missing correct certificate to download from mirror in Malaysia
Product: Services Reporter: wa5qjh
Component: FTP/WWW Sites & MirrorsAssignee: FreeBSD Mirror Admin <mirror-admin>
Status: Closed FIXED    
Severity: Affects Many People CC: philip
Priority: ---    
Version: unspecified   
Hardware: Any   
OS: Any   

Description wa5qjh 2021-12-12 23:25:13 UTC
Attempting to download FreeBSD-12.3 ( or ANY RELEASE for any architect  ) in Philippines from mirror in Malaysia fails for incorrect or missing certificate. This has been a recurring problem for at least several months when downloading either for amd64 or the arm64 images that I've tried.
 notes:
downloading on an Rpi 3B in Release 12.2 in a country with some of the sorriest internet from a rural area with speeds <1/20 national average (55kb/s at the moment), to be run on an hp laptop with the bios or os corrupted. (just so you understand the odd combination).
This is my first bug report since I began using FreeBSD around 1993.

Here is where I was told to report the problem by @freebsdhelp on twitter.
Comment 1 wa5qjh 2021-12-12 23:46:40 UTC
Forgot to mention that missing certificate complaint registered by lynx browser as well as downloading with wget or fetch. With Lynx browser searching download.freebsd.org on down thru directory tree, everywhere stop to allow bad certificate.
Comment 2 Philip Paeps freebsd_committer freebsd_triage 2021-12-13 02:59:04 UTC
As far as I can tell, the certificates on the Malaysian mirror are correct.

E.g., this works fine:

curl --connect-to download.freebsd.org:443:ftp0.kul.freebsd.org:443 https://download.freebsd.org

You could try downloading over plain HTTP or FTP and compare the checksums against a securely downloaded checksums file.
Comment 3 wa5qjh 2021-12-14 10:59:57 UTC
How do I kill this report completely?
Due to an error on my part, I really need to cancel this completely!
PLEASE, if someone can help me or do it for me would greatly appreciate it!