[DRE-maint] Bug#995448: apt-listbugs: fails to connect to the BTS - certificate expired
Diederik de Haas
didi.debian at cknow.org
Tue Oct 5 10:55:25 BST 2021
On Fri, 1 Oct 2021 15:19:48 -0300 Antonio Terceiro <terceiro at debian.org>
wrote:
> On Fri, Oct 01, 2021 at 07:43:35PM +0200, Michael Biebl wrote:
> > Am 01.10.21 um 19:27 schrieb Antonio Terceiro:
> > > I tracked this down to an issue between apt-listbugs (or ruby-soap4r, or
> > > something else below that) and apt-cacher-ng. If I disable
> > > apt-cacher-ng, apt-listbugs works fine. However trying to make other
> > > clients go for bugs.debian.org through apt-cacher-ng work fine (e.g.
> > > curl), so maybe this is not even caused by apt-cacher-ng itself.
> >
> > I'm seeing the same issue and I'm also running apt-cacher-ng
>
> FWIW for now I'm working around this issue like this:
>
> ───────┬───────────────────────────────────────────────────────
> │ File: /etc/apt/apt.conf.d/apt-listbugs-noproxy.conf
> ───────┼───────────────────────────────────────────────────────
> 1 │ # FIXME
> 2 │ Acquire::http::Proxy::bugs.debian.org DIRECT;
> ───────┴───────────────────────────────────────────────────────
I've been having this issue too and I'm also using apt-cacher-ng.
Assuming it was actually caused by ca-certificates, I responded to a bug there:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=995432#20
I _think_ that my 'dpkg-reconfigure ca-certificates' and manually deselecting
"mozilla/DST_Root_CA_X3.crt" already does what an update to the ca-certificates
package will do. I did that action on my PC.
Assuming there was more to it than an update to ca-certificates, I ran
'reportbug apt-listbugs' and so I found this bug. It also shows 995432.
(I usually use the web interface to see whether 'my' issue has already been
found, but it doesn't show up there)
Seeing that apt-cacher-ng (CC-ed) was a common factor, I did 'dpkg-reconfigure
ca-certificates' on the machine that's running apt-cacher-ng for my LAN.
Restarted the apt-cacher-ng service and updated another machine in my LAN
(with apt-listbugs installed) and got the issue there too.
Then I disabled the use of apt-cacher-ng on that machine and installed a
package and that succeeded.
Then enabled the use of apt-cacher-ng again and also applied Antonio's
workaround and installed a new package and that succeeded as well.
IOW: +1 on the existence of this bug and +1 on Antonio's analyses.
HTH,
Diederik
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/pkg-ruby-extras-maintainers/attachments/20211005/1ca0de4a/attachment-0003.sig>
More information about the Pkg-ruby-extras-maintainers
mailing list