[tor-relays] upgrade problem

[Roman Mamedov]

On Thu, 04 Nov 2021 21:55:02 +0000
potlatch via tor-relays <tor-relays at lists.torproject.org> wrote:

> Wondering if my tor.list has a typo since I can't upgrade Tor 0.4.5.9.  I get error:
> Err:1 https://deb.torproject.org/torproject.org stretch/main amd64 tor-geoipdb all 0.4.5.10-1~d9.stretch+1
>   server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
> I have debian 9 installed.  Can someone turn on the light for me?


Hello,

It is this issue:
https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

For a workaround, run:
  
  dpkg-reconfigure ca-certificates

Answer whatever you like to the first question (about new certificates), then
on the second screen find "mozilla/DST_Root_CA_X3.crt", unmark it by pressing
Space and hit Enter to save.

-- 
With respect,
Roman