Re: bin/57456: ftp fails for https in netbsd-10 due to missing certificates

[David Brownlee <abs%absd.org@localhost>]

The following reply was made to PR bin/57456; it has been noted by GNATS.

From: David Brownlee <abs%absd.org@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: gnats-admin%netbsd.org@localhost, netbsd-bugs%netbsd.org@localhost
Subject: Re: bin/57456: ftp fails for https in netbsd-10 due to missing certificates
Date: Wed, 21 Jun 2023 20:50:01 +0100

 On Thu, 8 Jun 2023 at 22:10, Martin Husemann <martin%duskware.de@localhost> wrote:
 >
 >  Actually the installer issue is quite simple: I'll make it check
 >  for any root certs in it's /etc/openssl/certs and if none is found
 >  set FTPSSLNOVERIFY.
 
 That looks like a good change for the installer (and worth making
 independent of any other fix), but this issue is still outstanding for
 netbsd-10
 
 Without installing mozilla-rootcerts-openssl or similar from pkgsrc,
 ftp will fail on any http URL with:
 
 18446744073709551615:error:1416F086:SSL
 routines:tls_process_server_certificate:certificate verify
 failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1919:
 
 including downloading https://ftp.netbsd.org/pub/pkgsrc/current/pkgsrc.tar.xz
 
 I'm inclined to suggest this should be a blocker for netbsd-10
 
 David