Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #178601 > unrolled thread
| Started by | Jorick Astrego <jorick@netbulae.eu> |
|---|---|
| First post | 2017-03-09 11:00 +0100 |
| Last post | 2017-03-09 13:30 +0100 |
| Articles | 4 — 3 participants |
Back to article view | Back to linux.debian.user
ssl certificate on archive.debian.net expired Jorick Astrego <jorick@netbulae.eu> - 2017-03-09 11:00 +0100
Re: ssl certificate on archive.debian.net expired Jorick Astrego <jorick@netbulae.eu> - 2017-03-09 11:10 +0100
Re: ssl certificate on archive.debian.net expired Jonathan Dowland <jmtd@debian.org> - 2017-03-09 12:10 +0100
Re: ssl certificate on archive.debian.net expired Peter Palfrader <weasel@debian.org> - 2017-03-09 13:30 +0100
| From | Jorick Astrego <jorick@netbulae.eu> |
|---|---|
| Date | 2017-03-09 11:00 +0100 |
| Subject | ssl certificate on archive.debian.net expired |
| Message-ID | <tj31v-3pp-17@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
Hi, Just letting you know the ssl certificate on archive.debian.net "uses an invalid security certificate. The certificate expired on 02/19/2017 05:25 AM. The current time is 03/09/2017 10:32 AM. (Error code: sec_error_expired_certificate)" Most people will use archive.debian.org, but still it's not so nice to see such a warning. Met vriendelijke groet, With kind regards, Jorick Astrego Netbulae Virtualization Experts ---------------- Tel: 053 20 30 270 info@netbulae.eu Staalsteden 4-3A KvK 08198180 Fax: 053 20 30 271 www.netbulae.eu 7547 TA Enschede BTW NL821234584B01 ----------------
[toc] | [next] | [standalone]
| From | Jorick Astrego <jorick@netbulae.eu> |
|---|---|
| Date | 2017-03-09 11:10 +0100 |
| Message-ID | <tj3bb-3I3-1@gated-at.bofh.it> |
| In reply to | #178601 |
[Multipart message — attachments visible in raw view] — view raw
On 03/09/2017 10:36 AM, Jorick Astrego wrote: > Hi, > > Just letting you know the ssl certificate on archive.debian.net "uses > an invalid security certificate. The certificate expired on 02/19/2017 > 05:25 AM. The current time is 03/09/2017 10:32 AM. (Error code: > sec_error_expired_certificate)" > > Most people will use archive.debian.org, but still it's not so nice to > see such a warning. > > Even worse, the ssl certificate on https://archive.debian.org is invalid too. Common name is "gretchaninov.debian.org" and it appears self signed.... Met vriendelijke groet, With kind regards, Jorick Astrego Netbulae Virtualization Experts ---------------- Tel: 053 20 30 270 info@netbulae.eu Staalsteden 4-3A KvK 08198180 Fax: 053 20 30 271 www.netbulae.eu 7547 TA Enschede BTW NL821234584B01 ----------------
[toc] | [prev] | [next] | [standalone]
| From | Jonathan Dowland <jmtd@debian.org> |
|---|---|
| Date | 2017-03-09 12:10 +0100 |
| Message-ID | <tj47g-4lW-29@gated-at.bofh.it> |
| In reply to | #178602 |
[Multipart message — attachments visible in raw view] — view raw
On Thu, Mar 09, 2017 at 10:38:32AM +0100, Jorick Astrego wrote: > On 03/09/2017 10:36 AM, Jorick Astrego wrote: > > Just letting you know the ssl certificate on archive.debian.net "uses > > an invalid security certificate. The certificate expired on 02/19/2017 > > 05:25 AM. The current time is 03/09/2017 10:32 AM. (Error code: > > sec_error_expired_certificate)" > > > > Most people will use archive.debian.org, but still it's not so nice to > > see such a warning. > > > Even worse, the ssl certificate on https://archive.debian.org is invalid > too. > > Common name is "gretchaninov.debian.org" and it appears self signed.... Thanks for the report. The contact for that host is debian-admin, who I have CCed. The gretchaninov certificate is signed by an internal "Debian SMTP CA" which is probably not in your CA trust store (and is itself self signed). So the certificate for the host itself is probably fine from a debian-admin POV. The issue is whether the archive.debian.org service is supposed to be accessible over HTTPS and if so, its hosts need to be configured accordingly. "archive.debian.org" would appear to be multi-hosted in some fashion, I got a certificate warning for klecker.debian.org (neither klecker nor gretchaninov's certificates seem to have subjectAltNames for archive.debian.org) -- Jonathan Dowland Please do not CC me, I am subscribed to the list.
[toc] | [prev] | [next] | [standalone]
| From | Peter Palfrader <weasel@debian.org> |
|---|---|
| Date | 2017-03-09 13:30 +0100 |
| Message-ID | <tj5mG-56r-1@gated-at.bofh.it> |
| In reply to | #178606 |
On Thu, 09 Mar 2017, Jonathan Dowland wrote:
> On Thu, Mar 09, 2017 at 10:38:32AM +0100, Jorick Astrego wrote:
> > On 03/09/2017 10:36 AM, Jorick Astrego wrote:
> > > Just letting you know the ssl certificate on archive.debian.net "uses
> > > an invalid security certificate. The certificate expired on 02/19/2017
> > > 05:25 AM. The current time is 03/09/2017 10:32 AM. (Error code:
> > > sec_error_expired_certificate)"
> > >
> > > Most people will use archive.debian.org, but still it's not so nice to
> > > see such a warning.
> > >
> > Even worse, the ssl certificate on https://archive.debian.org is invalid
> > too.
https://archive.debian.org/ is not at this time available over https,
not was it ever advertised as such.
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
https://www.palfrader.org/ | `. `' Operating System
| `- https://www.debian.org/
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.user
csiph-web