The problem
When I do an update of apt repository, I have an issue about "Certificate verification failed" for HTTPS repository. For example:
Err:4 https://mirror.transip.net/ubuntu/ubuntu bionic Release
Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 149.210.210.109 443]
Err:10 https://mirror.vorboss.net/ubuntu-archive bionic Release
Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 5.10.147.2 443]
Reading package lists... Done
W: https://mirror.transip.net/ubuntu/ubuntu/dists/bionic/InRelease: No system certificates available. Try installing ca-certificates.
This problem arrives with all repositories (all the repo I tried).
Of course, I update the ca-certificates but it looks like apt doesn't read certificate from /etc/ssl/certs
# update-ca-certificates --fresh
Clearing symlinks in /etc/ssl/certs...
done.
Updating certificates in /etc/ssl/certs...
133 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Can you have an idea to resolve the problem ?
Thanks in advance !
Tests
I tested if the certificates were well installed. So I done call the curl and openssl to test the HTTPS repository
# curl https://mirror.transip.net/ubuntu/ubuntu/dists/bionic/Release
Acquire-By-Hash: yes
# openssl s_client -CAfile /etc/ssl/certs/ca-certificates.crt -connect mirror.transip.net:443 < /dev/null
SSL handshake has read 6107 bytes and written 446 bytes
Verification: OK
With these 2 tests we can see the certificates are ok
Info
My OS is Ubuntu 18.04.4 LTS (Bionic Beaver)