FreeBSD 14 CI isn't working

[tgross35]

For the past week or so, the FreeBSD CI jobs have been failing with the following:

+ target=x86_64-unknown-freebsd
+ export 'RUST_BACKTRACE=1'
+ export 'RUSTFLAGS= '
+ echo $'RUSTFLAGS: \' \''
RUSTFLAGS: ' '
+ uname -a
FreeBSD cirrus-task-6098932637368320 14.3-RELEASE FreeBSD 14.3-RELEASE releng/14.3-n271432-8c9ce319fef7 GENERIC amd64
+ cmd='cargo test --target x86_64-unknown-freebsd '
+ test_flags='--skip check_style'
+ cmd='cargo test --target x86_64-unknown-freebsd  --workspace'
+ rustc --print cfg --target x86_64-unknown-freebsd
+ sed -n 's/target_env="\(.*\)"/\1/p'
+ env=''
+ rustc --print cfg --target x86_64-unknown-freebsd
+ sed -n 's/target_pointer_width="\(.*\)"/\1/p'
+ bits=64
+ cargo test --target x86_64-unknown-freebsd --workspace --no-default-features -- --skip check_style
    Updating crates.io index
error: failed to get `askama` as a dependency of package `ctest v0.5.0-beta.3 (/tmp/cirrus-ci-build/ctest)`

Caused by:
  download of config.json failed

Caused by:
  failed to download from `https://index.crates.io/config.json`

Caused by:
  [60] SSL peer certificate or SSH remote key was not OK (SSL certificate OpenSSL verify result: unable to get local issuer certificate (20))

Exit status: 101

I think this is a general Cargo failure rather than something specific to askama (probably just the first dependency alphabetically) but I'm not sure why.

Sample run: https://github.com/rust-lang/libc/pull/4951/checks?check_run_id=61869883603

Cc @asomers

[asomers]

I saw this too somewhere else. I think it's a new Cargo bug. But that error message makes me wonder if it's the same bug that cargo-audit has, which we can workaround by installing a bundle of root certificates. I'll try a PR.

[asomers]

This is a Cargo bug. I opened it back in early December, and Cargo fixed it. But then it regressed again this month. rust-lang/cargo#16357 .