Re: [solved]Re: pkgin update "certificate verify failed"

[x85729201kza <x85729201kza%outlook.com@localhost>]

On 22/02/2026 2:32 am, Ramiro Aceves wrote:
> Sorry, I had a problem with BIOS system time. ntpd was not allowed to correct the date cause BIOS time was very far from the actual time. I think that caused the certification errors. could it be possible?

Yes, absolutely.
I had my server with a dead BIOS battery powered off and when rebooted the date was the default date - nothing worked involving certificates because they were issued after the date in the system. NTP refused to update being the time gap was such a large gap from reality :-)

Cheers
Max


> Now it works.
>
>
> El 21/2/26 a las 15:49, Ramiro Aceves escribió:
> > Hi,
> >
> >
> > I have upgraded my Acer Aspire One to NetBSD-11.0_RC1
> >
> > netbsd-acer# uname -a
> > NetBSD netbsd-acer.home 11.0_RC1 NetBSD 11.0_RC1 (GENERIC) #0: Fri Feb  6 08:24:25 UTC 2026 mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/amd64/compile/GENERIC amd64
> >
> > I have changed pkgin repositories to:
> >
> > netbsd-acer# cat /usr/pkg/etc/pkgin/repositories.conf
> >
> > #
> > # Pkgin repositories list
> > #
> > # Simply add repositories URIs one below the other
> > #
> > # WARNING: order matters, duplicates will not be added, if two
> > # repositories hold the same package, it will be fetched from
> > # the first one listed in this file.
> > #
> > # This file format supports the following macros:
> > # $arch to define the machine hardware platform
> > # $osrelease to define the release version for the operating system
> > #
> > # Remote ftp repository
> > #
> > # ftp://ftp.netbsd.org/pub/pkgsrc/packages/NetBSD/$arch/5.1/All
> > #
> > # Remote http repository
> > #
> > # http://mirror-master.dragonflybsd.org/packages/$arch/DragonFly-$osrelease/stable/All
> > #
> > # Local repository (must contain a pkg_summary.gz or bz2)
> > #
> > # file:///usr/pkgsrc/packages/All
> > # NetBSD OS release can look like 6.0_STABLE, do not use it as-is
> > https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/11.0_2025Q4/All
> >
> > And have this problem when trying to pkg upgrade the packages using https. Using http works fine:
> >
> > netbsd-acer# pkgin up
> > processing remote summary (https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/11.0_2025Q4/All)...
> > 00A89BDA9B7C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
> > 00A89BDA9B7C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
> > 00A89BDA9B7C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
> > pkgin: Could not fetch https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/11.0_2025Q4/All/pkg_summary.gz: Authentication error
> > netbsd-acer#
> >
> >
> > Thanks.
> >
> > Regards.
> >
> >
> >
> >
> >
> >
> > netbsd-acer# pkgin update
> > processing remote summary (https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/11.0_2025Q4/All)...
> > 0068DD7E897C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
> > 0068DD7E897C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
> > 0068DD7E897C0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/usr/src/crypto/external/apache2/openssl/dist/ssl/statem/statem_clnt.c:2123:
> > pkgin: Could not fetch https://cdn.NetBSD.org/pub/pkgsrc/packages/NetBSD/amd64/11.0_2025Q4/All/pkg_summary.gz: Authentication error
> > netbsd-acer#