Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #222243
| From | Mark Jonas <toertel@gmail.com> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: armhf: buster: TLS / HTTPS partly broken |
| Date | 2020-05-05 08:10 +0200 |
| Message-ID | <A2YWd-4MT-1@gated-at.bofh.it> (permalink) |
| References | (2 earlier) <A2Eb8-pD-13@gated-at.bofh.it> <A2HVo-2FT-5@gated-at.bofh.it> <A2IeJ-31p-5@gated-at.bofh.it> <A2Ok9-6Bv-5@gated-at.bofh.it> <A2XQv-3Uu-21@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Hi Reco,
> > 1613 stat64("/etc/ssl/certs/4a6481c9.0", 0x7ec95160) = -1 ENOENT (No
> > such file or directory)
>
> Presumably ca-certificates postinst script haven't run, because these
> symlinks missing ain't normal.
Ubuntu 18.04 on my PC gives more or less the same errors but succeeds.
So I have some doubt. I think the symlinks are there.
openat(AT_FDCWD, "/usr/lib/ssl/openssl.cnf", O_RDONLY) = 6
openat(AT_FDCWD, "/etc/ssl/certs/ca-certificates.crt", O_RDONLY) = 6
stat("/etc/ssl/certs/99bdd351.0", 0x7ffc3c886370) = -1 ENOENT (No such
file or directory)
> So, start with "dpkg-reconfigure ca-certificates", and if it does not
> fix it - "apt-get install --reinstall ca-certificates".
This does not work either. But the following works. And this is super confusing.
1. Run "dpkg-reconfigure ca-certificates"
Trust new certificates from certificate authorities? 1 (yes)
Certificates to activate: (empty list)
Updating certificates in /etc/ssl/certs...
0 added, 128 removed; done.
2. Run "dpkg-reconfigure ca-certificates"
Trust new certificates from certificate authorities? 1 (yes)
Certificates to activate: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40
41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63
64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86
87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107
108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124
125 126 127 128
Updating certificates in /etc/ssl/certs...
128 added, 0 removed; done.
3. "curl https://www.google.com" now succeeds.
What now? How do I get this fixed in Debian and/ or the official
container image?
Is there a way to automate the above so I can do it as a workaround in
the container creation?
Greetings,
Mark
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-04 09:30 +0200
Re: armhf: buster: TLS / HTTPS partly broken Reco <recoverym4n@enotuniq.net> - 2020-05-04 10:00 +0200
Re: armhf: buster: TLS / HTTPS partly broken <tomas@tuxteam.de> - 2020-05-04 14:00 +0200
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-04 14:40 +0200
Re: armhf: buster: TLS / HTTPS partly broken tomas@tuxteam.de - 2020-05-04 15:20 +0200
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-04 20:40 +0200
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-04 14:00 +0200
Re: armhf: buster: TLS / HTTPS partly broken Reco <recoverym4n@enotuniq.net> - 2020-05-04 14:20 +0200
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-04 20:50 +0200
Re: armhf: buster: TLS / HTTPS partly broken Reco <recoverym4n@enotuniq.net> - 2020-05-05 07:00 +0200
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-05 08:10 +0200
Re: armhf: buster: TLS / HTTPS partly broken Reco <recoverym4n@enotuniq.net> - 2020-05-05 08:30 +0200
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-05 08:50 +0200
Re: armhf: buster: TLS / HTTPS partly broken Andrei POPESCU <andreimpopescu@gmail.com> - 2020-05-05 09:20 +0200
Re: armhf: buster: TLS / HTTPS partly broken Michael Howard <mike@dewberryfields.co.uk> - 2020-05-05 09:20 +0200
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-05 16:10 +0200
Re: armhf: buster: TLS / HTTPS partly broken Reco <recoverym4n@enotuniq.net> - 2020-05-05 09:30 +0200
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-05 16:50 +0200
Re: armhf: buster: TLS / HTTPS partly broken Greg Wooledge <wooledg@eeg.ccf.org> - 2020-05-05 13:40 +0200
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-05 16:40 +0200
Re: armhf: buster: TLS / HTTPS partly broken Greg Wooledge <wooledg@eeg.ccf.org> - 2020-05-05 17:10 +0200
Re: armhf: buster: TLS / HTTPS partly broken Mark Jonas <toertel@gmail.com> - 2020-05-05 17:50 +0200
csiph-web