apt update error - librewolf [Solved]

[towwire]

Ehhh-not working-get an incomprehensible compiler error:

Code: Select all

[ 1313s] /usr/src/packages/BUILD/build-browser/dist/include/mozilla/dom/TypedArray.h:974:64: error: no matching function for call to 'mozilla::dom::binding_detail....

and so on for ages.

Stevo, I do have the latest version. For now I will just disable it's repo because of the certificate problem so my other programs can be updated. I also still have Pale Moon to use. And as always THANKS for trying.

[siamhie]

You can also download the .deb files of these builds directly from the Open Build Service.

[siamhie]

I just got that certificate error message this morning.

Code: Select all

doas nala upgrade
No Change: http://deb.debian.org/debian bookworm-updates InRelease
No Change: http://deb.debian.org/debian bookworm InRelease
No Change: http://security.debian.org/debian-security bookworm-security 
InRelease
No Change: http://deb.xanmod.org releases InRelease
Ignored:   https://repo.librewolf.net librewolf InRelease
No Change: https://repo.nordvpn.com/deb/nordvpn/debian stable InRelease
No Change: http://la.mxrepo.com/mx/repo bookworm InRelease
Ignored:   https://repo.librewolf.net librewolf InRelease
Ignored:   https://repo.librewolf.net librewolf InRelease
Error: https://repo.librewolf.net librewolf InRelease
  Certificate verification failed: The certificate is NOT trusted. The 
certificate chain uses expired certificate.  Could not handshake: Error in the 
certificate verification. [IP: 207.211.187.177 443]
Fetched 0 Bytes in 7s (0 bytes/s)                                               

Error: https://repo.librewolf.net librewolf InRelease
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  
  Could not handshake: Error in the certificate verification. [IP: 207.211.187.177 443]
All packages are up to date.

Seems to be an issue for others also. https://codeberg.org/librewolf/issues/issues/2160

[siamhie]

Code: Select all

curl -RLJO https://repo.librewolf.net/dists/librewolf/InRelease

and also check with a browser to open
https://repo.librewolf.net/dists/librewolf/

We LibreWolf users will just have to wait for the web site to be corrected.

[Eadwine Rose]

"Accept and continue" *click*

I am fearless

[fehlix]

Code: Select all

curl -RLJO https://repo.librewolf.net/dists/librewolf/InRelease

and also check with a browser to open
https://repo.librewolf.net/dists/librewolf/

We LibreWolf users will just have to wait for the web site to be corrected.

I got the new cert they have been renewed 5 days ago:

libreowolf-cert.jpg

So here is working all good.

[siamhie]

Code: Select all

curl -RLJO https://repo.librewolf.net/dists/librewolf/InRelease

I got the new cert they have been renewed 5 days ago:libreowolf-cert.jpg
So here is working all good.

I hadn't tried the curl command before. All good now.
I suppose the web site is just not up to date then?

[siamhie]

"Accept and continue" *click*

I am fearless

I was once a naive Windows user of the late 90's but I have learned from those mistakes.

[fehlix]

Seems to me a DNS related issue, B/c I got the IP 130.61.181.106 resolved for repo.librewolf.net, where the valid cert it send.
In the post above was shown this IP 207.211.187.177 was resolved for repo.librewolf.net
If I now take the IP you have got from DNS into the host file,
207.211.187.177 repo.librewolf.net

I do now get the same expired key issue:

libreowolf-cert-expired.jpg

So seems your guys, have been offered anothe IP's from DNS probably the repo
is within a delievey CDN-network, where they missed to apply letsEncrypt auto cert-renewal for that IP
+++EDIT+++
Yep, the one I got for repo.librewolf.net with the valid Let'sEncrypt cert
130.61.181.106 _ Frankfurt am Main/Germany with the Oracle Cloud network
The one with the expired cert:
207.211.187.177 : Chicago/US also within Oracle Cloud network
So conclusion: The issue is a cert-renewal/sync issue with the Oracle Cloud network.
Probably will be sorted soon.

[towwire]

Works for me now too. Thanks.