Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm attempting to make a private apt repo. Its going to be served over https and its located at It is also going to be using basic auth, which I setup as deb dev non-free as indicated here. When I attempt to update the apt cache I get:

Err dev/non-free amd64 Packages                          
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

When I connect using curl (curl from the same machine, curl states that SSL certificate verify ok. I've also tested using Qualys SSL Labs and it doesn't find any problems. What do I need to do in order for apt to validate my certificate?

share|improve this question
up vote 0 down vote accepted

It turns out that I had the intermediate certificates out of order. Web browsers and ssllabs were fine with that but, it appears that apt cares about the ordering of the intermediate certificates.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.