On 2022-03-03, Łukasz Moskała <l...@lukaszmoskala.pl> wrote: > Hi Jason, > > Please keep responses on mailing list. > > The expired CA cert is in /etc/ssl/cert.pem > > I'll copy this from another thread that was on misc@ a while ago: > https://www.mail-archive.com/misc@openbsd.org/msg181131.html
That thread talks about ftp.openbsd.org. It is not relevant to cdn.openbsd.org or to mirror.aarnet.edu.au, neither of these use a letsencrypt certificate. I suggest either using http for the update (sysupgrade has its own signature mechanism; https does not gain you much at all here) or downloading an install image (iso for CDROM or fs for USB stick) with a gui web browser and doing an "upgrade" install from that. -- Please keep replies on the mailing list.