https vs. http problem with a raspbian mirror - Raspberry Pi Forums


when doing normal apt-get upgrade, got:

e: failed fetch http://mirrordirector.raspbian.org/rasp ... -1_all.deb server certificate verification failed. cafile: /etc/ssl/certs/ca-certificates.crt crlfile: none

when trying again, worked (probably used mirror).

fortunately using http proxy easy find mirror log.

$ lang=c wget -o /dev/null -s http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb
converted 'http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb' (ansi_x3.4-1968) -> 'http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb' (utf-8)
--2016-02-01 14:38:43-- http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb
resolving raspbian.chaoshost.at (raspbian.chaoshost.at)... 2a01:190:1700:48::6, 92.60.5.231
connecting raspbian.chaoshost.at (raspbian.chaoshost.at)|2a01:190:1700:48::6|:80... connected.
http request sent, awaiting response...
http/1.1 302 found
cache-control: no-cache
content-length: 0
location: https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb
connection: close
location: https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb [following]
converted 'https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb' (ansi_x3.4-1968) -> 'https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb' (utf-8)
--2016-02-01 14:38:43-- https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb
connecting raspbian.chaoshost.at (raspbian.chaoshost.at)|2a01:190:1700:48::6|:443... connected.
error: certificate of 'raspbian.chaoshost.at' not trusted.
error: certificate of 'raspbian.chaoshost.at' hasn't got known issuer.
certificate's owner not match hostname 'raspbian.chaoshost.at'

doing redirect http https debian packages bad idea, because apt-transport-https not installed everywhere.

mirror has wrong name in it's ssl certificate wouldn't work if apt-transport-https installed.

suggest mirror removed mirrordirector until these issues fixed.

it seems if accept bad cert still doesn't serve packages. i'll disable entry in mirror redirection system , mail admin mirror when home tonight.


raspberrypi



Comments

Popular posts from this blog

invalid use of void expresion in FlexiTimer2 library

error: a function-definition is not allowed here before '{' token

LED Strip Code