mirror.us.oneandone.net certificate verification failed

[xaol]

i got the same warning as this thread today: viewtopic.php?p=811419&hilit=oneandone#p811419

changing repos also worked for me, but it seems like if that issue is still happening a few days later maybe it needs to be looked into?

Code: Select all

sudo apt update
Hit:1 http://security.debian.org/debian-security bookworm-security InRelease
Hit:2 http://deb.debian.org/debian bookworm-updates InRelease               
Hit:3 http://deb.debian.org/debian bookworm InRelease                       
Ign:4 https://mirror.us.oneandone.net/linux/distributions/mx/packages/mx/repo bookworm InRelease       
Hit:5 https://repo.librewolf.net librewolf InRelease                                                   
Ign:4 https://mirror.us.oneandone.net/linux/distributions/mx/packages/mx/repo bookworm InRelease
Ign:4 https://mirror.us.oneandone.net/linux/distributions/mx/packages/mx/repo bookworm InRelease
Err:4 https://mirror.us.oneandone.net/linux/distributions/mx/packages/mx/repo bookworm InRelease
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 74.208.240.17 443]
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
1 package can be upgraded. Run 'apt list --upgradable' to see it.
W: Failed to fetch https://mirror.us.oneandone.net/linux/distributions/mx/packages/mx/repo/dists/bookworm/InRelease  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 74.208.240.17 443]
W: Some index files failed to download. They have been ignored, or old ones used instead.

[dolphin_oracle]

the owners of that mirror have apparently let their certificate expire. the repo is up to date, just unusable.

if they don't update their cert soon, we will drop them from the list. also affects a German mirror.

[timkb4cq]

Firefox and Chromium are both showing the site is now secure.

[dolphin_oracle]

Firefox and Chromium are both showing the site is now secure.

hmmm, looks like there is a redirect, and the redirect has the cert.

[fehlix]

That's an IONOS mirror, and apparently they had some Re-settings with their new partner ship IONOS Partners with Sectigo to Redefine Digital"
So we may think to change URL with the repos list:
from

Code: Select all

United States, Lenexa KA - https://mirror.us.oneandone.net/linux/distributions/mx/packages

with

Code: Select all

United States, Lenexa KA - https://us.mirror.ionos.com/linux/distributions/mx/packages/

on CLI: with

Code: Select all

sudo sed -i "s/mirror.us.oneandone.net/us.mirror.ionos.com/" /usr/share/mx-repo-list/repos.txt

[dolphin_oracle]

the lenexa va entry is now updated. should show up in mx-repo-manager.

[dolphin_oracle]

there was a german mirror also affected. correct that one too