Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #240743

Re: Buster wget: The certificate of 'lists.debian.org' is not trusted

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Fri, Oct 01, 2021 at 07:09:45PM +0200, Thomas Schmitt wrote:
> Hi,
> 
> new certification problem, this time on buster.
> 
> While looking why wget on Debian 8 does not work with lists.debian.org
> i learn that it does not work on Debian 10 either:
> 
>   $ wget -d https://lists.debian.org/debian-user/
>   DEBUG output created by Wget 1.20.1 on linux-gnu.

Hm. Works for me. Buster, too...

[...]

> Firefox works without problems.
> The number of 126 certificates would match /etc/ssl/certs.

...but mine loads... 127 certs :-/

Just for kicks: this is the top of my `ls -lt /etc/ssl/certs. Perhaps you
notice something funny, dunno.

  total 568
  -rw-r--r-- 1 root root 199974 Feb  7  2021 ca-certificates.crt
  lrwxrwxrwx 1 root root     15 Jun 30  2020 0a775a30.0 -> GTS_Root_R3.pem
  lrwxrwxrwx 1 root root     32 Jun 30  2020 0f5dc4f3.0 -> UCA_Extended_Validation_Root.pem
  lrwxrwxrwx 1 root root     15 Jun 30  2020 1001acf7.0 -> GTS_Root_R1.pem
  lrwxrwxrwx 1 root root     27 Jun 30  2020 14bc7599.0 -> emSign_ECC_Root_CA_-_G3.pem
  ...

But oh, those are just link farms to /usr/share/ca-certificates/mozilla:
There's newer stuff there:

  total 548
  -rw-r--r-- 1 root root 2772 Jan 28  2021 ACCVRAIZ1.crt
  -rw-r--r-- 1 root root 1972 Jan 28  2021 AC_RAIZ_FNMT-RCM.crt
  -rw-r--r-- 1 root root 2049 Jan 28  2021 Actalis_Authentication_Root_CA.crt
  -rw-r--r-- 1 root root 1204 Jan 28  2021 AffirmTrust_Commercial.crt
  ...

The working Firefox suggests that perhaps some of the links got
lost -- or perhaps that you have to rebuild `ca-certificates.crt'

Cheers
 - t

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Buster wget: The certificate of 'lists.debian.org' is not trusted "Thomas Schmitt" <scdbackup@gmx.net> - 2021-10-01 19:10 +0200
  Re: Buster wget: The certificate of 'lists.debian.org' is not trusted <tomas@tuxteam.de> - 2021-10-01 19:40 +0200
    Re: Buster wget: The certificate of 'lists.debian.org' is not trusted "Thomas Schmitt" <scdbackup@gmx.net> - 2021-10-01 20:30 +0200
      [SOLVED] Re: Buster wget: The certificate of 'lists.debian.org' is not trusted "Thomas Schmitt" <scdbackup@gmx.net> - 2021-10-01 20:40 +0200
        Re: [SOLVED] Re: Buster wget: The certificate of 'lists.debian.org'  is not trusted David Wright <deblis@lionunicorn.co.uk> - 2021-10-01 22:20 +0200
          Re: [SOLVED] Re: Buster wget: The certificate of 'lists.debian.org'  is not trusted <tomas@tuxteam.de> - 2021-10-02 08:20 +0200
            Re: [SOLVED] Re: Buster wget: The certificate of 'lists.debian.org'  is not trusted David Wright <deblis@lionunicorn.co.uk> - 2021-10-03 20:20 +0200
            Re: [SOLVED] Re: Buster wget: The certificate of 'lists.debian.org'  is not trusted David Wright <deblis@lionunicorn.co.uk> - 2021-10-05 18:20 +0200
      Re: Buster wget: The certificate of 'lists.debian.org' is not trusted <tomas@tuxteam.de> - 2021-10-01 21:30 +0200
  Re: Buster wget: The certificate of 'lists.debian.org' is not  trusted didier gaumet <didier.gaumet@gmail.com> - 2021-10-01 20:40 +0200

csiph-web