Re: HTTPS for Debian archive mirrors, and CAA

Hi,

First, sorry to not follow the thread.

I am trying to rebuild my lost repositories.

Bo I have (not tested yet).


root@ryzen:/home/arne/a_scripts# ./aamirrordebian3sarge
Mirroring to /home/debmirror/debmirror3sarge from http://archive.debian.org/debian/
Arches: i386
Dists: sarge
Sections: main,contrib,non-free
Including source.
Pdiff mode: use
Passive mode on.
Will clean up after mirroring.
Attempting to get lock ...
Updating remote trace files (using rsync) ...
@ERROR: Unknown module 'debian'
rsync error: error starting client-server protocol (code 5) at main.c(1817) [Receiver=3.2.3]
Warning: failed to use rsync to download extra files.
Getting meta files ...
[  0%] Getting: dists/sarge/Release... 	 #** GET http://archive.debian.org/debian/dists/sarge/Release ==> 200 OK
ok
[  0%] Getting: dists/sarge/InRelease... 	 #** GET http://archive.debian.org/debian/dists/sarge/InRelease ==> 404 Not Found
Download of dists/sarge/InRelease failed: 404 Not Found
[  0%] Getting: dists/sarge/Release.gpg... 	 #** GET http://archive.debian.org/debian/dists/sarge/Release.gpg ==> 200 OK
ok
[GNUPG:] ERROR add_keyblock_resource 33554433
[GNUPG:] NEWSIG
[GNUPG:] ERROR keydb_search 33554445
[GNUPG:] ERRSIG A70DAF536070D3A1 17 2 00 1208027104 9 -
[GNUPG:] NO_PUBKEY A70DAF536070D3A1
[GNUPG:] NEWSIG
[GNUPG:] ERROR keydb_search 33554445
[GNUPG:] ERRSIG B5D0C804ADB11277 17 2 00 1208027604 9 -
[GNUPG:] NO_PUBKEY B5D0C804ADB11277
gpgv: unknown type of key resource 'trustedkeys.kbx'
gpgv: keyblock resource '/root/.gnupg/trustedkeys.kbx': General error
gpgv: Signature made Sat 12 Apr 2008 09:05:04 PM CEST
gpgv:                using DSA key A70DAF536070D3A1
gpgv: Can't check signature: No public key
gpgv: Signature made Sat 12 Apr 2008 09:13:24 PM CEST
gpgv:                using DSA key B5D0C804ADB11277
gpgv: Can't check signature: No public key
gpgv: unknown type of key resource 'trustedkeys.kbx'
gpgv: keyblock resource '/root/.gnupg/trustedkeys.kbx': General error
gpgv: Signature made Sat 12 Apr 2008 09:05:04 PM CEST
gpgv:                using DSA key A70DAF536070D3A1
gpgv: Can't check signature: No public key
gpgv: Signature made Sat 12 Apr 2008 09:13:24 PM CEST
gpgv:                using DSA key B5D0C804ADB11277
gpgv: Can't check signature: No public key
.temp/.tmp/dists/sarge/Release.gpg signature does not verify.
Ignoring failed Release files.
Ignoring missing Release file for dists/sarge/main/binary-all/Packages.gz
[ 74%] Getting: dists/sarge/main/binary-all/Packages.gz... 	 #** GET http://archive.debian.org/debian/dists/sarge/main/binary-all/Packages.gz ==> 404 Not Found
Download of dists/sarge/main/binary-all/Packages.gz failed: 404 Not Found
Ignoring missing Release file for dists/sarge/contrib/binary-all/Packages.gz
[ 98%] Getting: dists/sarge/contrib/binary-all/Packages.gz... 	 #** GET http://archive.debian.org/debian/dists/sarge/contrib/binary-all/Packages.gz ==> 404 Not Found
Download of dists/sarge/contrib/binary-all/Packages.gz failed: 404 Not Found
Ignoring missing Release file for dists/sarge/non-free/binary-all/Packages.gz
[100%] Getting: dists/sarge/non-free/binary-all/Packages.gz... 	 #** GET http://archive.debian.org/debian/dists/sarge/non-free/binary-all/Packages.gz ==> 404 Not Found
Download of dists/sarge/non-free/binary-all/Packages.gz failed: 404 Not Found
Errors:
 .temp/.tmp/dists/sarge/Release.gpg signature does not verify
 Ignoring failed Release files
 Ignoring missing Release file for dists/sarge/main/binary-all/Packages.gz
 Download of dists/sarge/main/binary-all/Packages.gz failed: 404 Not Found
 Ignoring missing Release file for dists/sarge/contrib/binary-all/Packages.gz
 Download of dists/sarge/contrib/binary-all/Packages.gz failed: 404 Not Found
 Ignoring missing Release file for dists/sarge/non-free/binary-all/Packages.gz
 Download of dists/sarge/non-free/binary-all/Packages.gz failed: 404 Not Found
Failed to download some Package, Sources or Release files!
WARNING: releasing 1 pending lock...

my script:
root@ryzen:/home/arne/a_scripts# cat ./aamirrordebian3sarge
debmirror \
--host=archive.debian.org \
--root=/debian \
--ignore-small-errors \
--allow-dist-rename \
--timeout=600 \
--section=main,contrib,non-free \
--dist=sarge \
--arch=i386 \
--source \
--method=http \
--getcontents \
--progress \
--verbose \
--passive \
--ignore-missing-release \

Thanks!

PS. I had a hard time finding the original thread and did not succeed to find it with claws-mail
But I did find some empty send mails!
If anyone can tell me which mail program is better, and also non-X?

Arne