Re: Expired cdimage.debian.org letsencrypt cert?

SZÉPE Viktor <[email protected]>
Newsgroups gmane.linux.debian.devel.www
Message-ID <[email protected]>
Idézem/Quoting Mauricio Tavares <[email protected]>:

> raub@testbox:~$ wget
> https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-11.2.0-amd64-netinst.iso
> --2021-12-26 07:15:41--
> https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-11.2.0-amd64-netinst.iso
> Resolving cdimage.debian.org... 194.71.11.173, 194.71.11.165,
> 2001:6b0:19::173, ...
> Connecting to cdimage.debian.org|194.71.11.173|:443... connected.
> ERROR: cannot verify cdimage.debian.org's certificate, issued by
> '/C=US/O=Let\'s Encrypt/CN=R3':
>   Issued certificate has expired.
> To connect to cdimage.debian.org insecurely, use `--no-check-certificate'.
> raub@testbox:~$

Hello Mauricio!

Your CA-s may include an expired one.
Try excluding mozilla/DST_Root_CA_X3.crt in /etc/ca-certificates.conf

Let's Encrypt certs are cross-signed:  
https://www.ssllabs.com/ssltest/analyze.html?d=cdimage.debian.org&s=194.71.11.165&latest

All the best to you!


SZÉPE Viktor, webes alkalmazás üzemeltetés / Running your application
https://github.com/szepeviktor/debian-server-tools/blob/master/CV.md
~~~
ügyelet 🌶️ hotline: +36-20-4242498  [email protected]  skype: szepe.viktor
Budapest, III. kerület
smime.p7s (application/pkcs7-signature, 6 KB) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.