September 30th, 2021 syspatches: some assembly might be required
by from OpenBSD Journal on (#5Q74V)
Did you just runsyspatch(8)and see it fail?
Here's the reason: one of the two root certificatesbehind the (excellent)Let's EncryptCA service has expired.A bug in (the "legacy" verifier of)LibreSSLalso contributed.
The syspatches (for OpenBSD 6.8,032, for OpenBSD 6.9,018) mitigate the unfortunate situation.
However, your syspatch may fail if your local mirror uses aLet's Encrypt certificate.Patch-22!In that case, the best advice may be to try a mirror that does notuse a Let's Encrypt certificate just to get past this speed bump.