Bug 293502

Summary: FreeBSD 14.4-RC1 OpenSSL certificate verification failures with fetch (using a VirtualBox snapshot from months ago)
Product: Base System Reporter: Graham Perrin <grahamperrin>
Component: binAssignee: freebsd-bugs (Nobody) <bugs>
Status: Closed Not A Bug    
Severity: Affects Only Me    
Priority: ---    
Version: 14.4-STABLE   
Hardware: Any   
OS: Any   
URL: https://github.com/freebsd/freebsd-src/blob/041aa28386d3d78cb549c626702306bb179dc98e/crypto/openssl/ssl/statem/statem_clnt.c#L1890

Description Graham Perrin 2026-02-28 14:57:17 UTC 
An example: 

Script started on Fri Aug 15 09:21:16 2025
root@thirteen:~ # fetch -o pkgbasify.lua https://tinyurl.com/pkgbasify-foundation

Certificate verification failed for /CN=tinyurl.com
108046BAB4190000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1890:
fetch: https://tinyurl.com/pkgbasify-foundation: Authentication error
root@thirteen:~ # echo $SHELL

/bin/csh
root@thirteen:~ # freebsd-version -kru

14.4-RC1
14.4-RC1
14.4-RC1
root@thirteen:~ # exit

exit

Script done on Fri Aug 15 09:26:00 2025
Comment 1 Graham Perrin 2026-02-28 15:36:08 UTC 
The example above was in a VirtualBox guest. The OS probably underwent multiple upgrades to reach 14.4-RC1. I'll try make the issue reproducible. 

----

With a different virtual machine, in QEMU, I can not reproduce the issue. It seems likely that this machine originated with FreeBSD-14.4-RC1-amd64-dvd1.iso – no upgrade. Three notes to self: 


A)

Script started on Sat Feb 28 15:14:38 2026
root@fourteen-four:~ # freebsd-version -kru ; uname -a

14.4-RC1
14.4-RC1
14.4-RC1
FreeBSD fourteen-four 14.4-RC1 FreeBSD 14.4-RC1 releng/14.4-n273674-041aa28386d3 GENERIC amd64
root@fourteen-four:~ # fetch https://github.com/FreeBSDFoundation/pkgbasify/raw/refs/heads/main/pkgbasify.lua


pkgbasify.lua                                   0% of   20 kB    0  Bps
pkgbasify.lua                                           20 kB 2364 kBps    00s
root@fourteen-four:~ # bectl list -c creation

BE      Active Mountpoint Space Created
default NR     /          6.25G 2026-02-28 07:39
root@fourteen-four:~ # exit

exit

Script done on Sat Feb 28 15:17:00 2026


B)

root@fourteen-four:~ # head -n 20 /var/log/messages

Feb 28 07:51:48 fourteen-four newsyslog[772]: logfile first created
Feb 28 07:51:48 fourteen-four syslogd: kernel boot file is /boot/kernel/kernel
Feb 28 07:51:48 fourteen-four kernel: Waiting (max 60 seconds) for system process `vnlru' to stop... done
Feb 28 07:51:48 fourteen-four kernel: Waiting (max 60 seconds) for system process `syncer' to stop... 
Feb 28 07:51:48 fourteen-four kernel: Syncing disks, vnodes remaining... 0 0 0 0 done
Feb 28 07:51:48 fourteen-four kernel: All buffers synced.
Feb 28 07:51:48 fourteen-four kernel: Uptime: 12m50s
Feb 28 07:51:48 fourteen-four kernel: uhid0: detached
Feb 28 07:51:48 fourteen-four kernel: uhub0: detached
Feb 28 07:51:48 fourteen-four kernel: uhub1: detached
Feb 28 07:51:48 fourteen-four kernel: uhub3: detached
Feb 28 07:51:48 fourteen-four kernel: uhub2: detached
Feb 28 07:51:48 fourteen-four kernel: Rebooting...
Feb 28 07:51:48 fourteen-four kernel: cpu_reset: Stopping other CPUs
Feb 28 07:51:48 fourteen-four kernel: ---<<BOOT>>---
Feb 28 07:51:48 fourteen-four kernel: Copyright (c) 1992-2023 The FreeBSD Project.
Feb 28 07:51:48 fourteen-four kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
Feb 28 07:51:48 fourteen-four kernel: 	The Regents of the University of California. All rights reserved.
Feb 28 07:51:48 fourteen-four kernel: FreeBSD is a registered trademark of The FreeBSD Foundation.
Feb 28 07:51:48 fourteen-four kernel: FreeBSD 14.4-RC1 releng/14.4-n273674-041aa28386d3 GENERIC amd64
root@fourteen-four:~ # 


C) 

The guest is currently named 'freebsd13.0', I did previously use it for a test of 13.0-RELEASE.
Comment 2 Graham Perrin 2026-02-28 17:37:30 UTC 
Re: comment 0

> Script started on Fri Aug 15 09:21:16 2025

After correcting the date, fetch succeeded.