Hi guys, I'm running Debian on the testing release and I've been having troubles with the kwant repository for apt updates. The command apt-get update returns the following errors: Err:15 https://downloads.kwant-project.org/debian testing Release server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none E: The repository 'http://downloads.kwant-project.org/debian testing Release' does no longer have a Release file. My source list is fairly simple: deb http://ftp.fr.debian.org/debian/ testing main non-free contrib deb-src http://ftp.fr.debian.org/debian/ testing main non-free contrib deb http://security.debian.org/ testing/updates main contrib non-free deb-src http://security.debian.org/ testing/updates main contrib non-free deb http://downloads.kwant-project.org/debian/ testing main deb-src http://downloads.kwant-project.org/debian/ testing main Is my configuration wrong? Best, Benoit
Hi Benoît, Thanks for reporting this. I'm running Debian testing myself, but I didn't see this problem because I hadn't upgrade the ca-certificates package in the last two weeks or so. After upgrading, I see the same error as you. The SSL certificate of our website is from StartCom, a company that used to offer cheap certificates that were popular in the open source world (kernel.org was using the same kind of certifiacate as we have), but recently fell into distrust [1]. As we see now the problem extends to old certificates like ours as well. We need to replace our certificate ASAP. In the mean time you can download the Kwant debs manually and install them directly with 'dpkg' or you can downgrade the ca-certificates package to an older version (before 20161130+nmu1). Cheers, Christoph [1] https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-star...
participants (2)
-
Benoit Gaury
-
Christoph Groth