Bug#1022199: apt: 'apt-get update' fails on repository with snakeoil certificate

[Martin-Éric Racine]

Package: apt
Version: 3.0.3
Followup-For: Bug #1022199
X-Debbugs-Cc: martin-eric.racine at iki.fi

I still experience a similar issue when doing 'apt-get update' with sources that include a local repository signed with a snakeoil certificate.

Err:1 https://repos.internal/debian unstable InRelease
  SSL connection failed: error:0A000086:SSL routines::certificate verify failed / Success [IP: 172.16.1.1 443]

-- System Information:
Debian Release: 13.4
  APT prefers stable-security-debug
  APT policy: (500, 'stable-security-debug'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.74+deb13+1-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=fi_FI.UTF-8, LC_CTYPE=fi_FI.UTF-8 (charmap=UTF-8), LANGUAGE=fi:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages apt depends on:
ii  adduser                 3.152
ii  base-passwd             3.6.7
ii  debian-archive-keyring  2025.1
ii  libapt-pkg7.0           3.0.3
ii  libc6                   2.41-12+deb13u2
ii  libgcc-s1               14.2.0-19
ii  libseccomp2             2.6.0-2
ii  libssl3t64              3.5.5-1~deb13u1
ii  libstdc++6              14.2.0-19
ii  libsystemd0             257.9-1~deb13u1
ii  sqv                     1.3.0-3+b2

Versions of packages apt recommends:
ii  ca-certificates  20250419

Versions of packages apt suggests:
pn  apt-doc                      <none>
pn  aptitude | synaptic | wajig  <none>
pn  dpkg-dev                     <none>
ii  gnupg                        2.4.7-21+deb13u1
ii  powermgmt-base               1.38

-- no debconf information