Page 1 of 1

mirror.us.oneandone.net certificate verification failed

Posted: Fri Feb 28, 2025 11:58 am
by xaol
i got the same warning as this thread today: viewtopic.php?p=811419&hilit=oneandone#p811419

changing repos also worked for me, but it seems like if that issue is still happening a few days later maybe it needs to be looked into?

Code: Select all

sudo apt update
Hit:1 http://security.debian.org/debian-security bookworm-security InRelease
Hit:2 http://deb.debian.org/debian bookworm-updates InRelease               
Hit:3 http://deb.debian.org/debian bookworm InRelease                       
Ign:4 https://mirror.us.oneandone.net/linux/distributions/mx/packages/mx/repo bookworm InRelease       
Hit:5 https://repo.librewolf.net librewolf InRelease                                                   
Ign:4 https://mirror.us.oneandone.net/linux/distributions/mx/packages/mx/repo bookworm InRelease
Ign:4 https://mirror.us.oneandone.net/linux/distributions/mx/packages/mx/repo bookworm InRelease
Err:4 https://mirror.us.oneandone.net/linux/distributions/mx/packages/mx/repo bookworm InRelease
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 74.208.240.17 443]
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
1 package can be upgraded. Run 'apt list --upgradable' to see it.
W: Failed to fetch https://mirror.us.oneandone.net/linux/distributions/mx/packages/mx/repo/dists/bookworm/InRelease  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 74.208.240.17 443]
W: Some index files failed to download. They have been ignored, or old ones used instead.

Re: mirror.us.oneandone.net certificate verification failed

Posted: Fri Feb 28, 2025 1:09 pm
by dolphin_oracle
the owners of that mirror have apparently let their certificate expire. the repo is up to date, just unusable.

if they don't update their cert soon, we will drop them from the list. also affects a German mirror.

Re: mirror.us.oneandone.net certificate verification failed

Posted: Fri Feb 28, 2025 1:32 pm
by timkb4cq
Firefox and Chromium are both showing the site is now secure.

Re: mirror.us.oneandone.net certificate verification failed

Posted: Fri Feb 28, 2025 2:00 pm
by dolphin_oracle
timkb4cq wrote: Fri Feb 28, 2025 1:32 pm Firefox and Chromium are both showing the site is now secure.
hmmm, looks like there is a redirect, and the redirect has the cert.

Re: mirror.us.oneandone.net certificate verification failed

Posted: Fri Feb 28, 2025 2:08 pm
by fehlix
That's an IONOS mirror, and apparently they had some Re-settings with their new partner ship IONOS Partners with Sectigo to Redefine Digital"
So we may think to change URL with the repos list:
from

Code: Select all

United States, Lenexa KA - https://mirror.us.oneandone.net/linux/distributions/mx/packages
with

Code: Select all

United States, Lenexa KA - https://us.mirror.ionos.com/linux/distributions/mx/packages/
on CLI: with

Code: Select all

sudo sed -i "s/mirror.us.oneandone.net/us.mirror.ionos.com/" /usr/share/mx-repo-list/repos.txt

Re: mirror.us.oneandone.net certificate verification failed

Posted: Fri Feb 28, 2025 2:14 pm
by dolphin_oracle
the lenexa va entry is now updated. should show up in mx-repo-manager.

Re: mirror.us.oneandone.net certificate verification failed

Posted: Fri Feb 28, 2025 2:22 pm
by dolphin_oracle
there was a german mirror also affected. correct that one too