When I do an update of apt repository, I have an issue about "Certificate verification failed" for HTTPS repository. For example:
Err:4 https://mirror.transip.net/ubuntu/ubuntu bionic Release Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 184.108.40.206 443] Err:10 https://mirror.vorboss.net/ubuntu-archive bionic Release Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 220.127.116.11 443] Reading package lists... Done W: https://mirror.transip.net/ubuntu/ubuntu/dists/bionic/InRelease: No system certificates available. Try installing ca-certificates.
This problem arrives with all repositories (all the repo I tried).
Of course, I update the ca-certificates but it looks like apt doesn't read certificate from /etc/ssl/certs
# update-ca-certificates --fresh Clearing symlinks in /etc/ssl/certs... done. Updating certificates in /etc/ssl/certs... 133 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done.
Can you have an idea to resolve the problem ?
Thanks in advance !
I tested if the certificates were well installed. So I done call the curl and openssl to test the HTTPS repository
# curl https://mirror.transip.net/ubuntu/ubuntu/dists/bionic/Release Acquire-By-Hash: yes
# openssl s_client -CAfile /etc/ssl/certs/ca-certificates.crt -connect mirror.transip.net:443 < /dev/null SSL handshake has read 6107 bytes and written 446 bytes Verification: OK
With these 2 tests we can see the certificates are ok
My OS is Ubuntu 18.04.4 LTS (Bionic Beaver)