On 2023-09-29 21:17:53, Joel Roth via Dng wrote:
> I encountered certificate-related problems running
> apt-get update. Any suggestions on resolving them?
>
> % cat /etc/apt/sources.list
>

> deb https://deb.devuan.org/merged daedalus          main 
> deb https://deb.devuan.org/merged daedalus-updates main
> deb https://deb.devuan.org/merged daedalus-security main

Don't use https for deb.devuan.org. That's a DNS Round Robin for several
of our package mirrors, none of them have a certificate that matches
"deb.devuan.org".

If you want to use HTTPS, then pick a mirror from
https://pkgmaster.devuan.org/mirror_list.txt that supports HTTPS and use
that one directly instead of deb.devuan.org.

> % apt-get update
>
> Ign:1 https://deb.devuan.org/merged daedalus InRelease
> Ign:2 https://deb.devuan.org/merged daedalus-updates InRelease
> Ign:3 https://deb.devuan.org/merged daedalus-security InRelease
> Ign:1 https://deb.devuan.org/merged daedalus InRelease
> Ign:2 https://deb.devuan.org/merged daedalus-updates InRelease
> Ign:3 https://deb.devuan.org/merged daedalus-security InRelease
> Ign:1 https://deb.devuan.org/merged daedalus InRelease
> Ign:2 https://deb.devuan.org/merged daedalus-updates InRelease
> Ign:3 https://deb.devuan.org/merged daedalus-security InRelease
> Err:1 https://deb.devuan.org/merged daedalus InRelease
> Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 2607:5300:61:95f:7283:11d9:f86:e691 443]
> Err:2 https://deb.devuan.org/merged daedalus-updates InRelease
> Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 2607:5300:61:95f:7283:11d9:f86:e691 443]
> Err:3 https://deb.devuan.org/merged daedalus-security InRelease
> Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 2607:5300:61:95f:7283:11d9:f86:e691 443]
> Reading package lists... Done
> W: Failed to fetch https://deb.devuan.org/merged/dists/daedalus/InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 2607:5300:61:95f:7283:11d9:f86:e691 443]
> W: Failed to fetch https://deb.devuan.org/merged/dists/daedalus-updates/InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 2607:5300:61:95f:7283:11d9:f86:e691 443]
> W: Failed to fetch https://deb.devuan.org/merged/dists/daedalus-security/InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 2607:5300:61:95f:7283:11d9:f86:e691 443]
> W: Some index files failed to download. They have been ignored, or old ones used instead.

--
A big old stinking pile of genius that no one wants
coz there are too many silver coated monkeys in the world.