pkgin update "certificate verify failed"

[Ramiro Aceves <ea1abz%gmail.com@localhost>]

Hi,


I have upgraded my Acer Aspire One to NetBSD-11.0_RC1

netbsd-acer# uname -a
NetBSD netbsd-acer.home 11.0_RC1 NetBSD 11.0_RC1 (GENERIC) #0: Fri Feb  6 08:24:25 UTC 2026 mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/amd64/compile/GENERIC amd64

I have changed pkgin repositories to:

netbsd-acer# cat /usr/pkg/etc/pkgin/repositories.conf

#
# Pkgin repositories list
#
# Simply add repositories URIs one below the other
#
# WARNING: order matters, duplicates will not be added, if two
# repositories hold the same package, it will be fetched from
# the first one listed in this file.
#
# This file format supports the following macros:
# $arch to define the machine hardware platform
# $osrelease to define the release version for the operating system
#
# Remote ftp repository
#
# ftp://ftp.netbsd.org/pub/pkgsrc/packages/NetBSD/$arch/5.1/All
#
# Remote http repository
#
# http://mirror-master.dragonflybsd.org/packages/$arch/DragonFly-$osrelease/stable/All
#
# Local repository (must contain a pkg_summary.gz or bz2)
#
# file:///usr/pkgsrc/packages/All
# NetBSD OS release can look like 6.0_STABLE, do not use it as-is
https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/11.0_2025Q4/All

And have this problem when trying to pkg upgrade the packages using https. Using http works fine:

netbsd-acer# pkgin up
processing remote summary (https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/11.0_2025Q4/All)...
00A89BDA9B7C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
00A89BDA9B7C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
00A89BDA9B7C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
pkgin: Could not fetch https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/11.0_2025Q4/All/pkg_summary.gz: Authentication error
netbsd-acer#


Thanks.

Regards.






netbsd-acer# pkgin update
processing remote summary (https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/11.0_2025Q4/All)...
0068DD7E897C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
0068DD7E897C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
0068DD7E897C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
pkgin: Could not fetch https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/11.0_2025Q4/All/pkg_summary.gz: Authentication error
netbsd-acer#