Hi, the relevant man page is sources.list(5). The legacy format is, for example,deb [ signed-by=/usr/share/keyrings/debian-archive-keyring.gpg ] https://deb.debian.org/debian stable main contrib non-free-firmware
in a file named /etc/apt/sources.list. The now recommended entry in deb822 style looks like this: Types: deb URIs: https://deb.debian.org/debian Suites: stable Components: main contrib non-free-firmware Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg in a file named /etc/apt/sources.d/BASENAME.sources Regards, Jörg. Harald Dunkel wrote on 19/09/2025 15:32:
Hi folks, is there some way to tell apt the path to the root CA certificate, so it could verify the certificate chain provided by a private debian repository via https? I had added tho root CA to /usr/local/share/ca-certificates seem and ran update-ca-certificates, but this did not help. Hopefully I am not too blind to see, but apt.conf(5) and the others don't mention certificates.
<snip>