Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Certificate error on the website #222

Open
N7Normandy opened this issue Aug 2, 2023 · 5 comments
Open

Certificate error on the website #222

N7Normandy opened this issue Aug 2, 2023 · 5 comments

Comments

@N7Normandy
Copy link

Hello everyone. There is a certificate error on the website that expired on 08/31/23. As a result, the repo can no longer be updated. Untrustworthy. Is the repo no longer available? Thanks in advance :)

Error:
Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 46.105.204.23 443]

@CreasaBE
Copy link

CreasaBE commented Aug 2, 2023

Yep same issue here when trying to set up indi-allsky as it needs packages from astroberry. Cert has indeed expired and needs to be renewed again.
It's a LetsEncrypt certificate, so it should've been done automaticaly, but apparently it has not.

@bartczar
Copy link

bartczar commented Aug 2, 2023

You can add /etc/apt/apt.conf.d/99astroberry file with the following content:
Acquire::https::www.astroberry.io::Verify-Peer "false";
Acquire::https::www.astroberry.io::Verify-Host "false";

To get a repo key from the astroberry.io you need to use this to ignore cert issue: "wget --no-check-certificate -O - https://www.astroberry.io/repo/key"

@N7Normandy
Copy link
Author

Yeah it works . Thanks a lot.

@CreasaBE
Copy link

CreasaBE commented Aug 3, 2023

You can add /etc/apt/apt.conf.d/99astroberry file with the following content: Acquire::https::www.astroberry.io::Verify-Peer "false"; Acquire::https::www.astroberry.io::Verify-Host "false";

To get a repo key from the astroberry.io you need to use this to ignore cert issue: "wget --no-check-certificate -O - https://www.astroberry.io/repo/key"

Yes although that will work, it is not a solution to the problem.

  • it is insecure
  • it does not mean that the website or repo is valid and can be trusted

the website itself is untrusted too because of the certificate expiring and a lot of browsers will complain and firewalls with SSL Decryption enabled will deny access

@rkaczorek
Copy link
Owner

HI guys. This is error on the server side. For some unknown reason SSL certificates did not renewed recently.
I'm gonna manually fix this right away.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants