[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Buster wget: The certificate of 'lists.debian.org' is not trusted



On Fri, Oct 01, 2021 at 07:09:45PM +0200, Thomas Schmitt wrote:
> Hi,
> 
> new certification problem, this time on buster.
> 
> While looking why wget on Debian 8 does not work with lists.debian.org
> i learn that it does not work on Debian 10 either:
> 
>   $ wget -d https://lists.debian.org/debian-user/
>   DEBUG output created by Wget 1.20.1 on linux-gnu.

Hm. Works for me. Buster, too...

[...]

> Firefox works without problems.
> The number of 126 certificates would match /etc/ssl/certs.

...but mine loads... 127 certs :-/

Just for kicks: this is the top of my `ls -lt /etc/ssl/certs. Perhaps you
notice something funny, dunno.

  total 568
  -rw-r--r-- 1 root root 199974 Feb  7  2021 ca-certificates.crt
  lrwxrwxrwx 1 root root     15 Jun 30  2020 0a775a30.0 -> GTS_Root_R3.pem
  lrwxrwxrwx 1 root root     32 Jun 30  2020 0f5dc4f3.0 -> UCA_Extended_Validation_Root.pem
  lrwxrwxrwx 1 root root     15 Jun 30  2020 1001acf7.0 -> GTS_Root_R1.pem
  lrwxrwxrwx 1 root root     27 Jun 30  2020 14bc7599.0 -> emSign_ECC_Root_CA_-_G3.pem
  ...

But oh, those are just link farms to /usr/share/ca-certificates/mozilla:
There's newer stuff there:

  total 548
  -rw-r--r-- 1 root root 2772 Jan 28  2021 ACCVRAIZ1.crt
  -rw-r--r-- 1 root root 1972 Jan 28  2021 AC_RAIZ_FNMT-RCM.crt
  -rw-r--r-- 1 root root 2049 Jan 28  2021 Actalis_Authentication_Root_CA.crt
  -rw-r--r-- 1 root root 1204 Jan 28  2021 AffirmTrust_Commercial.crt
  ...

The working Firefox suggests that perhaps some of the links got
lost -- or perhaps that you have to rebuild `ca-certificates.crt'

Cheers
 - t

Attachment: signature.asc
Description: Digital signature


Reply to: