Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    pkg warning for missing LE E7 cert

    Scheduled Pinned Locked Moved Plus 26.07 Snapshots (Retired)
    4 Posts 2 Posters 635 Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • luckman212L Offline
      luckman212 LAYER 8
      last edited by luckman212

      Upgraded my 6100 to 26.07.b.20260702.2342 this morning, and in the spirit of updating, decided to bump my tailscale version to 1.98.8_1

      pkg add -f https://pkg.freebsd.org/FreeBSD:16:amd64/latest/All/tailscale-1.98.8_1.pkg

      Got this...

      Certificate verification failed for /C=US/O=Let's Encrypt/CN=E7
10B0C68ADA040000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-main/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.c:2125:
Certificate verification failed for /C=US/O=Let's Encrypt/CN=E7
10B0C68ADA040000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-main/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.c:2125:
Certificate verification failed for /C=US/O=Let's Encrypt/CN=E7
10B0C68ADA040000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:/var/jenkins/workspace/pfSense-Plus-snapshots-26_07-main/sources/FreeBSD-src-plus-RELENG_26_07/crypto/openssl/ssl/statem/statem_clnt.c:2125:
pkg: https://pkg.freebsd.org/FreeBSD:16:amd64/latest/All/tailscale-1.98.8_1.pkg: Authentication error

      What's the correct move here? Manually add the cert?

      Here's a screenshot of my CA screen

      7c77d15c-9547-48c7-bf1a-17d48f76263e-image.png

      Also see this ancient redmine: https://redmine.pfsense.org/issues/10729 but not sure what came of that

      I also tried

      pkg-static clean -ay; pkg-static install -fy pkg; pkg-static install -xfy pfSense-repo pfSense-upgrade
      1 Reply Last reply Reply Quote 0
      • M Offline
        marcosm Netgate
        last edited by marcosm

        You can use fetch then add the local file with pkg.

        luckman212L 1 Reply Last reply Reply Quote 0
        • luckman212L Offline
          luckman212 LAYER 8 @marcosm
          last edited by

          @marcosm Thank you. Yes that works. I also found another method:

          export PKG_ENV='{SSL_CA_CERT_FILE: "/etc/ssl/cert.pem"}'
pkg add -f https://pkg.freebsd.org/FreeBSD:16:amd64/latest/All/tailscale-1.98.8_1.pkg
          1 Reply Last reply Reply Quote 0
          • M Offline
            marcosm Netgate
            last edited by

            Also:

            env PKG_ENV='{SSL_CA_CERT_FILE: "/etc/ssl/cert.pem"}' pkg add https://pkg.freebsd.org/FreeBSD:16:amd64/latest/All/tailscale-1.98.8_1.pkg
            1 Reply Last reply Reply Quote 2
            • M marcosm referenced this topic on
            • First post
              Last post
            Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.
            Privacy Policy · Cookie Policy