[DRE-maint] Bug#995448: apt-listbugs: fails to connect to the BTS - certificate expired

[Diederik de Haas]

On Fri, 1 Oct 2021 15:19:48 -0300 Antonio Terceiro <terceiro at debian.org> 
wrote:
> On Fri, Oct 01, 2021 at 07:43:35PM +0200, Michael Biebl wrote:
> > Am 01.10.21 um 19:27 schrieb Antonio Terceiro:
> > > I tracked this down to an issue between apt-listbugs (or ruby-soap4r, or
> > > something else below that) and apt-cacher-ng. If I disable
> > > apt-cacher-ng, apt-listbugs works fine. However trying to make other
> > > clients go for bugs.debian.org through apt-cacher-ng work fine (e.g.
> > > curl), so maybe this is not even caused by apt-cacher-ng itself.
> > 
> > I'm seeing the same issue and I'm also running apt-cacher-ng
> 
> FWIW for now I'm working around this issue like this:
> 
> ───────┬───────────────────────────────────────────────────────
>        │ File: /etc/apt/apt.conf.d/apt-listbugs-noproxy.conf
> ───────┼───────────────────────────────────────────────────────
>    1   │ # FIXME
>    2   │ Acquire::http::Proxy::bugs.debian.org DIRECT;
> ───────┴───────────────────────────────────────────────────────

I've been having this issue too and I'm also using apt-cacher-ng.

Assuming it was actually caused by ca-certificates, I responded to a bug there:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=995432#20

I _think_ that my 'dpkg-reconfigure ca-certificates' and manually deselecting 
"mozilla/DST_Root_CA_X3.crt" already does what an update to the ca-certificates 
package will do. I did that action on my PC.
Assuming there was more to it than an update to ca-certificates, I ran 
'reportbug apt-listbugs' and so I found this bug. It also shows 995432.
(I usually use the web interface to see whether 'my' issue has already been 
found, but it doesn't show up there)

Seeing that apt-cacher-ng (CC-ed) was a common factor, I did 'dpkg-reconfigure 
ca-certificates' on the machine that's running apt-cacher-ng for my LAN. 
Restarted the apt-cacher-ng service and updated another machine in my LAN 
(with apt-listbugs installed) and got the issue there too.
Then I disabled the use of apt-cacher-ng on that machine and installed a 
package and that succeeded.
Then enabled the use of apt-cacher-ng again and also applied Antonio's 
workaround and installed a new package and that succeeded as well.

IOW: +1 on the existence of this bug and +1 on Antonio's analyses.

HTH,
  Diederik
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/pkg-ruby-extras-maintainers/attachments/20211005/1ca0de4a/attachment-0003.sig>