Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I'm attempting to make a private apt repo. Its going to be served over https and its located at https://repo.signalvine.com. It is also going to be using basic auth, which I setup as deb https://username:password@repo.signalvine.com/ dev non-free as indicated here. When I attempt to update the apt cache I get:

Err https://repo.signalvine.com dev/non-free amd64 Packages                          
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

When I connect using curl (curl https://repo.signalvine.com) from the same machine, curl states that SSL certificate verify ok. I've also tested repo.signalvine.com using Qualys SSL Labs and it doesn't find any problems. What do I need to do in order for apt to validate my certificate?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

It turns out that I had the intermediate certificates out of order. Web browsers and ssllabs were fine with that but, it appears that apt cares about the ordering of the intermediate certificates.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.