https vs. http problem with a raspbian mirror - Raspberry Pi Forums
when doing normal apt-get upgrade, got:
e: failed fetch http://mirrordirector.raspbian.org/rasp ... -1_all.deb server certificate verification failed. cafile: /etc/ssl/certs/ca-certificates.crt crlfile: none
when trying again, worked (probably used mirror).
fortunately using http proxy easy find mirror log.
$ lang=c wget -o /dev/null -s http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb
converted 'http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb' (ansi_x3.4-1968) -> 'http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb' (utf-8)
--2016-02-01 14:38:43-- http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb
resolving raspbian.chaoshost.at (raspbian.chaoshost.at)... 2a01:190:1700:48::6, 92.60.5.231
connecting raspbian.chaoshost.at (raspbian.chaoshost.at)|2a01:190:1700:48::6|:80... connected.
http request sent, awaiting response...
http/1.1 302 found
cache-control: no-cache
content-length: 0
location: https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb
connection: close
location: https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb [following]
converted 'https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb' (ansi_x3.4-1968) -> 'https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb' (utf-8)
--2016-02-01 14:38:43-- https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb
connecting raspbian.chaoshost.at (raspbian.chaoshost.at)|2a01:190:1700:48::6|:443... connected.
error: certificate of 'raspbian.chaoshost.at' not trusted.
error: certificate of 'raspbian.chaoshost.at' hasn't got known issuer.
certificate's owner not match hostname 'raspbian.chaoshost.at'
doing redirect http https debian packages bad idea, because apt-transport-https not installed everywhere.
mirror has wrong name in it's ssl certificate wouldn't work if apt-transport-https installed.
suggest mirror removed mirrordirector until these issues fixed.
e: failed fetch http://mirrordirector.raspbian.org/rasp ... -1_all.deb server certificate verification failed. cafile: /etc/ssl/certs/ca-certificates.crt crlfile: none
when trying again, worked (probably used mirror).
fortunately using http proxy easy find mirror log.
$ lang=c wget -o /dev/null -s http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb
converted 'http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb' (ansi_x3.4-1968) -> 'http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb' (utf-8)
--2016-02-01 14:38:43-- http://raspbian.chaoshost.at/raspbian/p ... _armhf.deb
resolving raspbian.chaoshost.at (raspbian.chaoshost.at)... 2a01:190:1700:48::6, 92.60.5.231
connecting raspbian.chaoshost.at (raspbian.chaoshost.at)|2a01:190:1700:48::6|:80... connected.
http request sent, awaiting response...
http/1.1 302 found
cache-control: no-cache
content-length: 0
location: https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb
connection: close
location: https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb [following]
converted 'https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb' (ansi_x3.4-1968) -> 'https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb' (utf-8)
--2016-02-01 14:38:43-- https://raspbian.chaoshost.at/raspbian/ ... _armhf.deb
connecting raspbian.chaoshost.at (raspbian.chaoshost.at)|2a01:190:1700:48::6|:443... connected.
error: certificate of 'raspbian.chaoshost.at' not trusted.
error: certificate of 'raspbian.chaoshost.at' hasn't got known issuer.
certificate's owner not match hostname 'raspbian.chaoshost.at'
doing redirect http https debian packages bad idea, because apt-transport-https not installed everywhere.
mirror has wrong name in it's ssl certificate wouldn't work if apt-transport-https installed.
suggest mirror removed mirrordirector until these issues fixed.
it seems if accept bad cert still doesn't serve packages. i'll disable entry in mirror redirection system , mail admin mirror when home tonight.
raspberrypi
Comments
Post a Comment