Beiträge von Poff

Poff

Oh man, manchmal ist es so offensichtlich ... danke.

Dann werd ich mal die traurige Nachricht überbringen.

Poff

Moin, ich führ das hier mal weiter weil ich gerade das gleiche / ein ähnliches Problem auf einem VServer habe.

Code

# uname -a
Linux REDACTED.bestsrv.de 4.9.0-0.bpo.12-amd64 #1 SMP Debian 4.9.210-1+deb9u1~deb8u1 (2020-06-09) x86_64 GNU/Linux

Nach "apt update" folgende Ausgabe:

Code

# apt update
Ign http://froxlormirror.netcup.net jessie InRelease
Hit http://froxlormirror.netcup.net jessie InRelease                                                                                               
Ign http://ftp.de.debian.org jessie InRelease                                                                                                      
Hit http://security.debian.org jessie/updates InRelease                                       
Get:1 http://froxlormirror.netcup.net jessie Release.gpg [213 B]                              
Get:2 http://froxlormirror.netcup.net jessie/main amd64 Packages [672 B]
Ign http://debian.froxlor.org jessie InRelease                          
Hit http://ftp.de.debian.org jessie Release.gpg                         
Hit http://froxlormirror.netcup.net jessie Release                      
Ign http://froxlormirror.netcup.net jessie/main Translation-en_US                                                 
Ign http://froxlormirror.netcup.net jessie/main Translation-en                              
Ign http://froxlormirror.netcup.net jessie Release                    
Ign http://froxlormirror.netcup.net jessie/main amd64 Packages/DiffIndex
Hit http://ftp.de.debian.org jessie Release    
Get:3 http://froxlormirror.netcup.net jessie/main amd64 Packages [1,477 B]
Ign http://debian.froxlor.org jessie Release.gpg                       
Get:4 http://security.debian.org jessie/updates/main Sources [366 kB]  
Ign http://froxlormirror.netcup.net jessie/main Translation-en_US                                                  
Ign http://froxlormirror.netcup.net jessie/main Translation-en                              
Get:5 http://security.debian.org jessie/updates/main amd64 Packages [781 kB]
Ign http://debian.froxlor.org jessie Release                                    
Get:6 http://security.debian.org jessie/updates/main Translation-en [401 kB]
Hit http://ftp.de.debian.org jessie/main Sources                                                            
Err http://debian.froxlor.org jessie/main Sources    
  
Hit http://ftp.de.debian.org jessie/main amd64 Packages
Hit http://ftp.de.debian.org jessie/main Translation-en                
Err http://debian.froxlor.org jessie/main amd64 Packages       
  
Err http://debian.froxlor.org jessie/main Sources
  
Err http://debian.froxlor.org jessie/main amd64 Packages
  
Err http://debian.froxlor.org jessie/main Sources
  
Err http://debian.froxlor.org jessie/main amd64 Packages
  
Err http://debian.froxlor.org jessie/main Sources  
  
Err http://debian.froxlor.org jessie/main amd64 Packages
  
Err http://debian.froxlor.org jessie/main Sources  
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
Err http://debian.froxlor.org jessie/main amd64 Packages
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
Ign http://debian.froxlor.org jessie/main Translation-en_US
Ign http://debian.froxlor.org jessie/main Translation-en
Fetched 2,362 B in 4s (545 B/s)
W: GPG error: http://froxlormirror.netcup.net jessie Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY F6B4A8704F9E9BBC
W: Failed to fetch http://debian.froxlor.org/dists/jessie/main/source/Sources  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

W: Failed to fetch http://debian.froxlor.org/dists/jessie/main/binary-amd64/Packages  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

E: Some index files failed to download. They have been ignored, or old ones used instead.

Alles anzeigen

Davor "apt-get install ca-certificates" und "dpkg-reconfigure ca-certificates":

Code

# apt-get install ca-certificates
[...]
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.


# dpkg-reconfigure ca-certificates
Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done.
Processing triggers for ca-certificates (20141019+deb8u4) ...
Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....done.

Weiter infos:

Code

# cat /etc/apt/sources.list{,.d/*.list}
deb http://ftp.de.debian.org/debian/ jessie main
deb-src http://ftp.de.debian.org/debian/ jessie main

deb http://security.debian.org/debian-security jessie/updates main
deb-src http://security.debian.org/debian-security jessie/updates main

deb http://debian.froxlor.org jessie main
deb-src http://debian.froxlor.org jessie main
#Backup if main mirror fails
deb http://froxlormirror.netcup.net/froxlor jessie main
#Mirror for netcup builds if main mirror lack new release
deb http://froxlormirror.netcup.net/froxlor-nc jessie main


# aptitude search '?installed(?origin(sury))'
<HIER KAM NIX>


# apt-cache policy openssl
openssl:
  Installed: 1.0.1t-1+deb8u12
  Candidate: 1.0.1t-1+deb8u12
  Version table:
 *** 1.0.1t-1+deb8u12 0
        500 http://security.debian.org/debian-security/ jessie/updates/main amd64 Packages
        100 /var/lib/dpkg/status
     1.0.1t-1+deb8u8 0
        500 http://ftp.de.debian.org/debian/ jessie/main amd64 Packages

Alles anzeigen

Code

# openssl s_client -connect debian.froxlor.org:https
CONNECTED(00000003)
depth=3 O = Digital Signature Trust Co., CN = DST Root CA X3
verify error:num=10:certificate has expired
notAfter=Sep 30 14:01:15 2021 GMT
verify return:0
---
Certificate chain
 0 s:/CN=admin.froxlor.org
   i:/C=US/O=Let's Encrypt/CN=R3
 1 s:/C=US/O=Let's Encrypt/CN=R3
   i:/C=US/O=Internet Security Research Group/CN=ISRG Root X1
 2 s:/C=US/O=Internet Security Research Group/CN=ISRG Root X1
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----
<GEKÜRZT>
-----END CERTIFICATE-----
subject=/CN=admin.froxlor.org
issuer=/C=US/O=Let's Encrypt/CN=R3
---
No client certificate CA names sent
---
SSL handshake has read 5281 bytes and written 483 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: C288A79C66F2DDEB78C8FC2F1E3D1F7075FB925410B07D453F7F6AE1CEF85579
    Session-ID-ctx: 
    Master-Key: 07ACEA56F6AF64643A9C9FF150B2421AD275CC215DF142ACC7B61138E4D2A214F70B448856F8036C2D36ECA64C2EC7AA
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    <GEKÜRZT>

    Start Time: 1642163974
    Timeout   : 300 (sec)
    Verify return code: 10 (certificate has expired)
---
closed

Alles anzeigen

Beiträge von Poff

Froxlor: Signaturfehler bei apt-get Update

Froxlor: Signaturfehler bei apt-get Update