Hi,

It is not possible to do https and round-robin at the same time. Many
mirrors that are part of the round-robin already support https but only
on their primary address. 

Currently gb.deb.devuan.org is only sledjhamr.org.
You have two options:

1) http://gb.deb.devuan.org/merged
2) https://sledjhamr.org/devuan/merged

With best regards,
b.


On Sat, 2022-09-24 at 19:07 +0100, Mike Tubby wrote:
> All,
>
> Getting SSL certificate errors when trying to update:
>
> root@public:/home/mike# apt-get update
> Err:1 https://gb.deb.devuan.org/merged chimaera InRelease
>    Certificate verification failed: The certificate is NOT trusted.
> The
> name in the certificate does not match the expected.  Could not
> handshake: Error in the certificate verification. [IP:
> 2a02:2a38:1:400:422a:422a:422a:422a 443]
> Err:2 https://gb.deb.devuan.org/merged chimaera-security InRelease
>    Certificate verification failed: The certificate is NOT trusted.
> The
> name in the certificate does not match the expected.  Could not
> handshake: Error in the certificate verification. [IP:
> 2a02:2a38:1:400:422a:422a:422a:422a 443]
> Err:3 https://gb.deb.devuan.org/merged chimaera-updates InRelease
>    Certificate verification failed: The certificate is NOT trusted.
> The
> name in the certificate does not match the expected.  Could not
> handshake: Error in the certificate verification. [IP:
> 2a02:2a38:1:400:422a:422a:422a:422a 443]
> Reading package lists... Done
>
> Whois suggests the host is in The Netherlands:
>
>
> root@public:/home/mike# whois 2a02:2a38:1:400:422a:422a:422a:422a
> % This is the RIPE Database query service.
> % The objects are in RPSL format.
> %
> % The RIPE Database is subject to Terms and Conditions.
> % See http://www.ripe.net/db/support/db-terms-conditions.pdf
>
> % Note: this output has been filtered.
> %       To receive output for a database update, use the "-B" flag.
>
> % Information related to '2a02:2a38::/32'
>
> % Abuse contact for '2a02:2a38::/32' is 'abuse@???'
>
> inet6num:       2a02:2a38::/32
> netname:        NL-YISP-20101123
> country:        NL
> org:            ORG-RAta1-RIPE
> admin-c:        RA4892-RIPE
> tech-c:         RA4892-RIPE
> status:         ALLOCATED-BY-RIR
> mnt-by:         RIPE-NCC-HM-MNT
> mnt-by:         RA92286-MNT
> mnt-routes:     RA92286-MNT
> created:        2010-11-23T17:23:58Z
> last-modified:  2019-05-14T15:21:52Z
> source:         RIPE # Filtered
>
> organisation:   ORG-RAta1-RIPE
> org-name:       YISP B.V.
> country:        NL
> org-type:       LIR
> address:        Byronstraat 44
> address:        3533VZ
> address:        Utrecht
> address:        NETHERLANDS
> phone:          +31852737135
> fax-no:         +31852737135
> mnt-ref:        RA92286-MNT
> mnt-ref:        RIPE-NCC-HM-MNT
> mnt-by:         RIPE-NCC-HM-MNT
> mnt-by:         RA92286-MNT
> abuse-c:        AR13317-RIPE
> created:        2010-11-23T10:22:22Z
> last-modified:  2020-12-16T12:42:45Z
> source:         RIPE # Filtered
>
> person:         Rens Ariens
> address:        Europalaan 20
> address:        3526 KS Utrecht
> phone:          +31852737135
> nic-hdl:        RA4892-RIPE
> mnt-by:         RA92286-MNT
> created:        2010-11-23T10:40:54Z
> last-modified:  2015-12-01T12:44:15Z
> source:         RIPE # Filtered
>
> % Information related to '2a02:2a38::/32AS58073'
>
> route6:         2a02:2a38::/32
> descr:          YISP
> origin:         AS58073
> mnt-by:         RA92286-MNT
> created:        2014-11-27T21:44:58Z
> last-modified:  2014-11-27T21:44:58Z
> source:         RIPE
>
> % This query was served by the RIPE Database Query Service version
> 1.103
> (HEREFORD)
>
>
>
> Mike
>
> _______________________________________________
> Dng mailing list
> Dng@???
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng