[tor-relays] Updating from Ubuntu 20.04 using apt-secure

[John Csuti]

Peter,

Thanks for the response that did the trick and got the system updated 
fully.

Thanks,
John Csuti
+1 (216) 633-1279

On 2021-10-11 03:41 AM, Peter Gerber wrote:

> Hi,
> 
> unfortunately, there is some software that wasn't well prepared for the
> expiration of the Let's Encrypt root certificate [1 [1]]. Ubuntu ships 
> a
> fix/workaround [2 [2]] for the issue. Just update Ubuntu first, then 
> try to
> update Tor again.
> 
> Peter
> 
> [1]: 
> https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
> [2]:
> https://changelogs.ubuntu.com/changelogs/pool/main/c/ca-certificates/ca-certificates_20210119~20.04.2/changelog
> 
> John Csuti via tor-relays:
> 
>> Hello all,
>> 
>> I recently went to update and upgrade my system and found that the 
>> certificate for deb.torproject.org is expired and no longer trusted? 
>> Is anyone else having this issue and is there a way to fix this. I 
>> also added the repo to a fresh install of ubuntu 20.04 and got the 
>> same error.
>> 
>> Error
>> Err:5 https://deb.torproject.org/torproject.org focal Release
>> Certificate verification failed: The certificate is NOT trusted. The 
>> certificate chain uses expired certificate. Could not handshake: Error 
>> in the certificate verification. [IP: 95.216.163.36 443]
>> 
>> Thanks,
>> John Csuti
>> +1 (216) 633-1279
> 
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Links:
------
[1] 
https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
[2] 
https://changelogs.ubuntu.com/changelogs/pool/main/c/ca-certificates/ca-certificates_20210119~20.04.2/changelog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20211011/d5529b5c/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x148EEF26.asc
Type: application/pgp-keys
Size: 3078 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20211011/d5529b5c/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20211011/d5529b5c/attachment-0001.sig>