:: [DNG] SSL certificate or host mappi…
Startseite
Nachricht löschen
Nachricht beantworten
Autor: crichmon
Datum:  
To: dng
Betreff: [DNG] SSL certificate or host mapping for ASCII updates for APT not right
I'm trying to 'apt update' an ascii box, and the repos in the apt source
list point here:
deb http://us.deb.devuan.org/merged ascii main non-free contrib
deb http://us.deb.devuan.org/merged ascii-security main non-free contrib
deb http://us.deb.devuan.org/merged ascii-updates main non-free contrib
deb-src http://us.deb.devuan.org/merged ascii main non-free contrib
deb-src http://us.deb.devuan.org/merged ascii-security main non-free contrib
deb-src http://us.deb.devuan.org/merged ascii-updates main non-free contrib

So. apt fails, and trying https://us.deb.devuan.org in a browser fails with
certificate errors.
wget for http: works, but https: also fails with certificate errors.

/tmp# wget https://us.deb.devuan.org
--2021-04-08 08:15:13-- https://us.deb.devuan.org/
Resolving us.deb.devuan.org (us.deb.devuan.org)... 152.228.204.144
Connecting to us.deb.devuan.org (us.deb.devuan.org)|152.228.204.144|:443...
connected.
The certificate's owner does not match hostname 'us.deb.devuan.org'

This is a bit of the certificate info:
/tmp# echo -n | openssl s_client -connect us.deb.devuan.org:443
Certificate chain
0 s:/CN=archive.devuan.org
i:/C=US/O=Let's Encrypt/CN=R3
1 s:/C=US/O=Let's Encrypt/CN=R3
i:/O=Digital Signature Trust Co./CN=DST Root CA X3

https://archive.devuan.org does work and appears to list rational things,
but not what's needed.
Both hosts resolve to the same ip address:
tmp# host archive.devuan.org
archive.devuan.org has address 152.228.204.144

tmp# host us.deb.devuan.org
us.deb.devuan.org is an alias for pkgmaster.devuan.org.
pkgmaster.devuan.org has address 152.228.204.144

This seems to have changed in the last week or two.

Thx, Chris