Beiträge von Poff

Poff · 14. Januar 2022

Oh man, manchmal ist es so offensichtlich ... danke.

Dann werd ich mal die traurige Nachricht überbringen.

Poff · 14. Januar 2022

Moin, ich führ das hier mal weiter weil ich gerade das gleiche / ein ähnliches Problem auf einem VServer habe.

Code

# uname -a
Linux REDACTED.bestsrv.de 4.9.0-0.bpo.12-amd64 #1 SMP Debian 4.9.210-1+deb9u1~deb8u1 (2020-06-09) x86_64 GNU/Linux

Nach "apt update" folgende Ausgabe:

Code

# apt update
Ign http://froxlormirror.netcup.net jessie InRelease
Hit http://froxlormirror.netcup.net jessie InRelease                                                                                               
Ign http://ftp.de.debian.org jessie InRelease                                                                                                      
Hit http://security.debian.org jessie/updates InRelease                                       
Get:1 http://froxlormirror.netcup.net jessie Release.gpg [213 B]                              
Get:2 http://froxlormirror.netcup.net jessie/main amd64 Packages [672 B]
Ign http://debian.froxlor.org jessie InRelease                          
Hit http://ftp.de.debian.org jessie Release.gpg                         
Hit http://froxlormirror.netcup.net jessie Release                      
Ign http://froxlormirror.netcup.net jessie/main Translation-en_US                                                 
Ign http://froxlormirror.netcup.net jessie/main Translation-en                              
Ign http://froxlormirror.netcup.net jessie Release                    
Ign http://froxlormirror.netcup.net jessie/main amd64 Packages/DiffIndex
Hit http://ftp.de.debian.org jessie Release    
Get:3 http://froxlormirror.netcup.net jessie/main amd64 Packages [1,477 B]
Ign http://debian.froxlor.org jessie Release.gpg                       
Get:4 http://security.debian.org jessie/updates/main Sources [366 kB]  
Ign http://froxlormirror.netcup.net jessie/main Translation-en_US                                                  
Ign http://froxlormirror.netcup.net jessie/main Translation-en                              
Get:5 http://security.debian.org jessie/updates/main amd64 Packages [781 kB]
Ign http://debian.froxlor.org jessie Release                                    
Get:6 http://security.debian.org jessie/updates/main Translation-en [401 kB]
Hit http://ftp.de.debian.org jessie/main Sources                                                            
Err http://debian.froxlor.org jessie/main Sources    
  
Hit http://ftp.de.debian.org jessie/main amd64 Packages
Hit http://ftp.de.debian.org jessie/main Translation-en                
Err http://debian.froxlor.org jessie/main amd64 Packages       
  
Err http://debian.froxlor.org jessie/main Sources
  
Err http://debian.froxlor.org jessie/main amd64 Packages
  
Err http://debian.froxlor.org jessie/main Sources
  
Err http://debian.froxlor.org jessie/main amd64 Packages
  
Err http://debian.froxlor.org jessie/main Sources  
  
Err http://debian.froxlor.org jessie/main amd64 Packages
  
Err http://debian.froxlor.org jessie/main Sources  
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
Err http://debian.froxlor.org jessie/main amd64 Packages
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
Ign http://debian.froxlor.org jessie/main Translation-en_US
Ign http://debian.froxlor.org jessie/main Translation-en
Fetched 2,362 B in 4s (545 B/s)
W: GPG error: http://froxlormirror.netcup.net jessie Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY F6B4A8704F9E9BBC
W: Failed to fetch http://debian.froxlor.org/dists/jessie/main/source/Sources  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

W: Failed to fetch http://debian.froxlor.org/dists/jessie/main/binary-amd64/Packages  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

E: Some index files failed to download. They have been ignored, or old ones used instead.

Alles anzeigen

Davor "apt-get install ca-certificates" und "dpkg-reconfigure ca-certificates":

Code

# apt-get install ca-certificates
[...]
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.


# dpkg-reconfigure ca-certificates
Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done.
Processing triggers for ca-certificates (20141019+deb8u4) ...
Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....done.

Weiter infos:

Code

# cat /etc/apt/sources.list{,.d/*.list}
deb http://ftp.de.debian.org/debian/ jessie main
deb-src http://ftp.de.debian.org/debian/ jessie main

deb http://security.debian.org/debian-security jessie/updates main
deb-src http://security.debian.org/debian-security jessie/updates main

deb http://debian.froxlor.org jessie main
deb-src http://debian.froxlor.org jessie main
#Backup if main mirror fails
deb http://froxlormirror.netcup.net/froxlor jessie main
#Mirror for netcup builds if main mirror lack new release
deb http://froxlormirror.netcup.net/froxlor-nc jessie main


# aptitude search '?installed(?origin(sury))'
<HIER KAM NIX>


# apt-cache policy openssl
openssl:
  Installed: 1.0.1t-1+deb8u12
  Candidate: 1.0.1t-1+deb8u12
  Version table:
 *** 1.0.1t-1+deb8u12 0
        500 http://security.debian.org/debian-security/ jessie/updates/main amd64 Packages
        100 /var/lib/dpkg/status
     1.0.1t-1+deb8u8 0
        500 http://ftp.de.debian.org/debian/ jessie/main amd64 Packages

Alles anzeigen

Code

# openssl s_client -connect debian.froxlor.org:https
CONNECTED(00000003)
depth=3 O = Digital Signature Trust Co., CN = DST Root CA X3
verify error:num=10:certificate has expired
notAfter=Sep 30 14:01:15 2021 GMT
verify return:0
---
Certificate chain
 0 s:/CN=admin.froxlor.org
   i:/C=US/O=Let's Encrypt/CN=R3
 1 s:/C=US/O=Let's Encrypt/CN=R3
   i:/C=US/O=Internet Security Research Group/CN=ISRG Root X1
 2 s:/C=US/O=Internet Security Research Group/CN=ISRG Root X1
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----
<GEKÜRZT>
-----END CERTIFICATE-----
subject=/CN=admin.froxlor.org
issuer=/C=US/O=Let's Encrypt/CN=R3
---
No client certificate CA names sent
---
SSL handshake has read 5281 bytes and written 483 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: C288A79C66F2DDEB78C8FC2F1E3D1F7075FB925410B07D453F7F6AE1CEF85579
    Session-ID-ctx: 
    Master-Key: 07ACEA56F6AF64643A9C9FF150B2421AD275CC215DF142ACC7B61138E4D2A214F70B448856F8036C2D36ECA64C2EC7AA
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    <GEKÜRZT>

    Start Time: 1642163974
    Timeout   : 300 (sec)
    Verify return code: 10 (certificate has expired)
---
closed

Alles anzeigen

Beiträge von Poff

Froxlor: Signaturfehler bei apt-get Update

Froxlor: Signaturfehler bei apt-get Update