Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expired or Invalid Certs OR missing resource #576

Open
bearrito opened this issue Dec 26, 2022 · 1 comment
Open

Expired or Invalid Certs OR missing resource #576

bearrito opened this issue Dec 26, 2022 · 1 comment

Comments

@bearrito
Copy link

Seems related to containers/podman.io#296

But that was related to the signing key and this seems related to certs.
This is on: Ubuntu 20.04

Ign:7 https://download.opensuse.org/repositories/devel:/kubic:/libcontainers/stable/xUbuntu_20.04  InRelease
Err:8 https://download.opensuse.org/repositories/devel:/kubic:/libcontainers/stable/xUbuntu_20.04  Release
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 195.135.221.134 443]
Reading package lists... Done                            
E: The repository 'https://download.opensuse.org/repositories/devel:/kubic:/libcontainers/stable/xUbuntu_20.04  Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Here is the output from my apt-key list

pub   rsa2048 2018-08-03 [SC] [expires: 2025-02-14]
      2472 D6D0 D2F6 6AF8 7ABA  8DA3 4D64 3903 7506 0AA4
uid           [ unknown] devel:kubic OBS Project <devel:kubic@build.opensuse.org>

If you visit in a browser you''ll get

Websites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for 195.135.221.134. The certificate is only valid for the following names: *.opensuse.org, opensuse.org
 
Error code: SSL_ERROR_BAD_CERT_DOMAIN

HOWEVER

I also see the following when visiting https://download.opensuse.org/repositories/devel:/kubic:/libcontainers/stable/xUbuntu_20.04

Resource is no longer available!

The requested URL is no longer available on this server and there is no forwarding address. If you followed a link from a foreign page, please contact the author of this page.

If you think this is a server error, please contact the [webmaster](mailto:webmaster@opensuse.org).

Maybe a caching server issue ??

@lod
Copy link

lod commented Mar 2, 2023

Kubic no longer supports builds for Ubuntu 20.04, or anything older.
The old files are no longer available either.

I've created an MR to remove the references to that repository.

https://github.com/containers/podman.io/pull/590

There are comments at https://build.opensuse.org/package/show/devel:kubic:libcontainers:unstable/podman indicating that this is intentional, in addition to the obvious missing repository.

There is also discussions on other online forums suggesting that podman requires a newer version of go than supported by Ubuntu 20.04, and the effort required to remedy that is more than anyone is willing to provide.

The current best options seems to be the dannf/podman ppa.

sudo add-apt-repository ppa:dannf/podman
sudo apt update

However I don't think it should be in the official docs, it doesn't look well supported.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants