pkg_add -Dsnap not fetching any updates and packages on -current

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

pkg_add -Dsnap not fetching any updates and packages on -current

neerajpal
Hi there,

Yesterday I installed OpenBSD 6.3-stable then upgraded it to OpenBSD
-current by downloading and copying bsd.rd file into /
Then, after that, I am trying to update the userland but it is
throwing an error but it was working fine previously like one or two
days before because I have done the same with my other machines.
It seems there is some problem with server-side?
If I have forgotten something or doing something wrong then please let me know.

openbsd$ cat /etc/installurl
https://fastly.cdn.openbsd.org/pub/OpenBSD
openbsd$

openbsd$ doas pkg_add -Dsnap -u
doas ([hidden email]) password:
https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/:
ftp: SSL write error: ocsp verify failed: ocsp response not current
https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/: empty
Couldn't find updates for axel-2.4p0 gettext-0.19.8.1p1 libiconv-1.14p3

openbsd$ doas pkg_add -Dsnap -iv vim
doas ([hidden email]) password:
https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/:
ftp: SSL write error: ocsp verify failed: ocsp response not current
https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/: empty
Can't find vim
openbsd$

openbsd$ doas pkg_add -Dsnap -iv wget
doas ([hidden email]) password:
https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/:
ftp: SSL write error: ocsp verify failed: ocsp response not current
https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/: empty
Can't find wget

--

Thank you!
Sincere regards;

Neeraj Pal

Reply | Threaded
Open this post in threaded view
|

Re: pkg_add -Dsnap not fetching any updates and packages on -current

Sebastian Benoit-3
Neeraj Pal([hidden email]) on 2018.10.15 10:36:16 +0530:

> Hi there,
>
> Yesterday I installed OpenBSD 6.3-stable then upgraded it to OpenBSD
> -current by downloading and copying bsd.rd file into /
> Then, after that, I am trying to update the userland but it is
> throwing an error but it was working fine previously like one or two
> days before because I have done the same with my other machines.
> It seems there is some problem with server-side?
> If I have forgotten something or doing something wrong then please let me know.
>
> openbsd$ cat /etc/installurl
> https://fastly.cdn.openbsd.org/pub/OpenBSD
> openbsd$
>
> openbsd$ doas pkg_add -Dsnap -u
> doas ([hidden email]) password:
> https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/:
> ftp: SSL write error: ocsp verify failed: ocsp response not current
> https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/: empty
> Couldn't find updates for axel-2.4p0 gettext-0.19.8.1p1 libiconv-1.14p3
>
> openbsd$ doas pkg_add -Dsnap -iv vim
> doas ([hidden email]) password:
> https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/:
> ftp: SSL write error: ocsp verify failed: ocsp response not current
> https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/: empty
> Can't find vim
> openbsd$
>
> openbsd$ doas pkg_add -Dsnap -iv wget
> doas ([hidden email]) password:
> https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/:
> ftp: SSL write error: ocsp verify failed: ocsp response not current
> https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/: empty
> Can't find wget

Hi,

this could be a server side problem, or a problem with the time on your
system.

If you still can reproduce the problem, please check that your systems time
is correct.

If it is, show the output of

 nc -cvvv fastly.cdn.openbsd.org 443

It should look something like this:

Connection to fastly.cdn.openbsd.org 443 port [tcp/https] succeeded!
TLS handshake negotiated TLSv1.2/ECDHE-RSA-AES128-GCM-SHA256 with host
fastly.cdn.openbsd.org
Peer name: fastly.cdn.openbsd.org
Subject: /C=US/ST=California/L=San Francisco/O=Fastly,
Inc./CN=osff.map.fastly.net
Issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CloudSSL CA - SHA256 - G3
Valid From: Fri Oct 12 01:08:13 2018
Valid Until: Sun Feb 24 20:25:45 2019
Cert Hash:
SHA256:28dd8ee0a34e3760554aea2944d8cc8c13601282fd51382215da748b8b06a826
OCSP URL: http://ocsp2.globalsign.com/cloudsslsha2g3
OCSP Stapling: good
  response_status=0 cert_status=0 crl_reason=0
  this update: Mon Oct 15 02:20:32 2018
  next update: Fri Oct 19 02:20:32 2018
  revocation:


At that point type

 GET / HTTP/1.1
 Host: fastly.cdn.openbsd.org
 <enter><enter>

and you should see:

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Sat, 18 Aug 2018 17:48:08 GMT
Server: OpenBSD httpd
Backend-Name: 5GnZ0LBU5CzDw9NCjFbkjI--F_ftp_openbsd_org__primary_
Via: 1.1 varnish
Content-Length: 5206
Accept-Ranges: bytes
Date: Mon, 15 Oct 2018 06:30:24 GMT
Via: 1.1 varnish
Age: 805
Connection: keep-alive
X-Served-By: cache-sea1028-SEA, cache-hhn1527-HHN
X-Cache: HIT, HIT
X-Cache-Hits: 1, 2
X-Timer: S1539585024.143724,VS0,VE4

The X-Served-By: line is needed.

Thanks,
Benno

Reply | Threaded
Open this post in threaded view
|

Re: pkg_add -Dsnap not fetching any updates and packages on -current

neerajpal
It worked.
yeah, I configured the timezone and forgot to check the date and time.
So, now after syncing the date and time with ntp servers, everything works fine.

Thank you Benno for the help.

openbsd$ nc -cvvv fastly.cdn.openbsd.org 443
Connection to fastly.cdn.openbsd.org 443 port [tcp/https] succeeded!
TLS handshake negotiated TLSv1.2/ECDHE-RSA-AES128-GCM-SHA256 with host
fastly.cdn.openbsd.org
Peer name: fastly.cdn.openbsd.org
Subject: /C=US/ST=California/L=San Francisco/O=Fastly,
Inc./CN=osff.map.fastly.net
Issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CloudSSL CA - SHA256 - G3
Valid From: Fri Oct 12 04:38:13 2018
Valid Until: Mon Feb 25 00:55:45 2019
Cert Hash: SHA256:28dd8ee0a34e3760554aea2944d8cc8c13601282fd51382215da748b8b06a826
OCSP URL: http://ocsp2.globalsign.com/cloudsslsha2g3
OCSP Stapling: good
  response_status=0 cert_status=0 crl_reason=0
  this update: Mon Oct 15 05:50:32 2018
  next update: Fri Oct 19 05:50:32 2018
  revocation:
GET / HTTP/1.1
Host: fastly.cdn.openbsd.org

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Sat, 18 Aug 2018 17:48:08 GMT
Server: OpenBSD httpd
Backend-Name: 5GnZ0LBU5CzDw9NCjFbkjI--F_ftp_openbsd_org__primary_
Via: 1.1 varnish
Content-Length: 5206
Accept-Ranges: bytes
Date: Mon, 15 Oct 2018 07:28:48 GMT
Via: 1.1 varnish
Age: 0
Connection: keep-alive
X-Served-By: cache-sea1044-SEA, cache-bom18221-BOM
X-Cache: HIT, MISS
X-Cache-Hits: 1, 0
X-Timer: S1539588528.413228,VS0,VE267
On Mon, Oct 15, 2018 at 12:03 PM Sebastian Benoit <[hidden email]> wrote:

>
> Neeraj Pal([hidden email]) on 2018.10.15 10:36:16 +0530:
> > Hi there,
> >
> > Yesterday I installed OpenBSD 6.3-stable then upgraded it to OpenBSD
> > -current by downloading and copying bsd.rd file into /
> > Then, after that, I am trying to update the userland but it is
> > throwing an error but it was working fine previously like one or two
> > days before because I have done the same with my other machines.
> > It seems there is some problem with server-side?
> > If I have forgotten something or doing something wrong then please let me know.
> >
> > openbsd$ cat /etc/installurl
> > https://fastly.cdn.openbsd.org/pub/OpenBSD
> > openbsd$
> >
> > openbsd$ doas pkg_add -Dsnap -u
> > doas ([hidden email]) password:
> > https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/:
> > ftp: SSL write error: ocsp verify failed: ocsp response not current
> > https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/: empty
> > Couldn't find updates for axel-2.4p0 gettext-0.19.8.1p1 libiconv-1.14p3
> >
> > openbsd$ doas pkg_add -Dsnap -iv vim
> > doas ([hidden email]) password:
> > https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/:
> > ftp: SSL write error: ocsp verify failed: ocsp response not current
> > https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/: empty
> > Can't find vim
> > openbsd$
> >
> > openbsd$ doas pkg_add -Dsnap -iv wget
> > doas ([hidden email]) password:
> > https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/:
> > ftp: SSL write error: ocsp verify failed: ocsp response not current
> > https://fastly.cdn.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/: empty
> > Can't find wget
>
> Hi,
>
> this could be a server side problem, or a problem with the time on your
> system.
>
> If you still can reproduce the problem, please check that your systems time
> is correct.
>
> If it is, show the output of
>
>  nc -cvvv fastly.cdn.openbsd.org 443
>
> It should look something like this:
>
> Connection to fastly.cdn.openbsd.org 443 port [tcp/https] succeeded!
> TLS handshake negotiated TLSv1.2/ECDHE-RSA-AES128-GCM-SHA256 with host
> fastly.cdn.openbsd.org
> Peer name: fastly.cdn.openbsd.org
> Subject: /C=US/ST=California/L=San Francisco/O=Fastly,
> Inc./CN=osff.map.fastly.net
> Issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CloudSSL CA - SHA256 - G3
> Valid From: Fri Oct 12 01:08:13 2018
> Valid Until: Sun Feb 24 20:25:45 2019
> Cert Hash:
> SHA256:28dd8ee0a34e3760554aea2944d8cc8c13601282fd51382215da748b8b06a826
> OCSP URL: http://ocsp2.globalsign.com/cloudsslsha2g3
> OCSP Stapling: good
>   response_status=0 cert_status=0 crl_reason=0
>   this update: Mon Oct 15 02:20:32 2018
>   next update: Fri Oct 19 02:20:32 2018
>   revocation:
>
>
> At that point type
>
>  GET / HTTP/1.1
>  Host: fastly.cdn.openbsd.org
>  <enter><enter>
>
> and you should see:
>
> HTTP/1.1 200 OK
> Content-Type: text/html
> Last-Modified: Sat, 18 Aug 2018 17:48:08 GMT
> Server: OpenBSD httpd
> Backend-Name: 5GnZ0LBU5CzDw9NCjFbkjI--F_ftp_openbsd_org__primary_
> Via: 1.1 varnish
> Content-Length: 5206
> Accept-Ranges: bytes
> Date: Mon, 15 Oct 2018 06:30:24 GMT
> Via: 1.1 varnish
> Age: 805
> Connection: keep-alive
> X-Served-By: cache-sea1028-SEA, cache-hhn1527-HHN
> X-Cache: HIT, HIT
> X-Cache-Hits: 1, 2
> X-Timer: S1539585024.143724,VS0,VE4
>
> The X-Served-By: line is needed.
>
> Thanks,
> Benno



--

Thank you!
Sincere regards;

Neeraj Pal