Re: Expired cdimage.debian.org letsencrypt cert?

[SZÉPE Viktor <viktor@szepe.net>]

Idézem/Quoting Mauricio Tavares <raubvogel@gmail.com>:

> raub@testbox:~$ wget
> https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-11.2.0-amd64-netinst.iso
> --2021-12-26 07:15:41--
> https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-11.2.0-amd64-netinst.iso
> Resolving cdimage.debian.org... 194.71.11.173, 194.71.11.165,
> 2001:6b0:19::173, ...
> Connecting to cdimage.debian.org|194.71.11.173|:443... connected.
> ERROR: cannot verify cdimage.debian.org's certificate, issued by
> '/C=US/O=Let\'s Encrypt/CN=R3':
>   Issued certificate has expired.
> To connect to cdimage.debian.org insecurely, use `--no-check-certificate'.
> raub@testbox:~$

Hello Mauricio!

Your CA-s may include an expired one.
Try excluding mozilla/DST_Root_CA_X3.crt in /etc/ca-certificates.conf

Let's Encrypt certs are cross-signed:  
https://www.ssllabs.com/ssltest/analyze.html?d=cdimage.debian.org&s=194.71.11.165&latest

All the best to you!


SZÉPE Viktor, webes alkalmazás üzemeltetés / Running your application
https://github.com/szepeviktor/debian-server-tools/blob/master/CV.md
~~~
ügyelet 🌶️ hotline: +36-20-4242498  sms@szepe.net  skype: szepe.viktor
Budapest, III. kerület

Attachment: smime.p7s
Description: S/MIME Signature