Bug#1015887: debian-installer: Adding https repo doesn't work without manually installing ca-certificates
On Sun, Jul 24, 2022 at 12:15:24AM +1200, Richard Hector wrote:
> On 23/07/22 23:01, Cyril Brulebois wrote:
>
> > As mentioned by Julien, getting the installer's syslog (compressed, to
> > make sure it reaches the mailing list) would help understand what's
> > going on.
>
> Oh - uncompressed, it made it into the BTS,
https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=1015887;filename=syslog;msg=27
Jul 23 01:08:13 in-target: Err:1 https://deb.debian.org/debian bullseye InRelease
Jul 23 01:08:13 in-target: Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 2a04:4e42:27::644 443]
Jul 23 01:08:13 in-target: Reading package lists...
Jul 23 01:08:13 in-target:
Jul 23 01:08:13 in-target: W: https://deb.debian.org/debian/dists/bullseye/InRelease: No system certificates available. Try installing ca-certificates.
Jul 23 01:08:13 in-target: W: Failed to fetch https://deb.debian.org/debian/dists/bullseye/InRelease Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 2a04:4e42:27::644 443]
Jul 23 01:08:13 in-target: W: Some index files failed to download. They have been ignored, or old ones used instead.
Jul 23 01:08:13 apt-setup: dpkg-divert: warning: diverting file '/sbin/start-stop-daemon' from an Essential package with rename is dangerous, use --no-rename
Jul 23 01:08:14 in-target: Err:1 https://deb.debian.org/debian bullseye InRelease
Jul 23 01:08:14 in-target: Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 2a04:4e42:27::644 443]
Jul 23 01:08:14 in-target: Reading package lists...
Jul 23 01:08:14 in-target:
Jul 23 01:08:14 in-target: W: https://deb.debian.org/debian/dists/bullseye/InRelease: No system certificates available. Try installing ca-certificates.
Jul 23 01:08:14 in-target: W: Failed to fetch https://deb.debian.org/debian/dists/bullseye/InRelease Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 2a04:4e42:27::644 443]
Jul 23 01:08:14 in-target: W: Some index files failed to download. They have been ignored, or old ones used instead.
no traces of manual install of ca-certificates found by me.
Regards
Geert Stappers
Failed to explain that httpS is NOT needed for apt.
Agrees that it is nice to have ca-certificates installed.
--
Silence is hard to parse
Reply to: