7

Hu guys! For years I solved every problem that I've had with ubuntu with google, forums and IRC, but I found one that I can't pass through. I'm with problems with ca-certificates, every site that I try to access ask me for a confirmation of the certification and my update is not working 100% too. I really apreciate any help.

jyulliano@Salamander:~$ sudo rm -rf /etc/ssl/certs/*
jyulliano@Salamander:~$ sudo update-ca-certificates Updating certificates in /etc/ssl/certs... 152 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....done.
jyulliano@Salamander:~$ sudo apt-get update
[...]                                
Err private-ppa.launchpad.net precise/main amd64 Packages              
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt    CRLfile: none
Err private-ppa.launchpad.net precise/main i386 Packages
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
Ign private-ppa.launchpad.net precise/main Translation-en_US
Ign private-ppa.launchpad.net precise/main Translation-en
Fetched 1,118 kB in 44s (24.9 kB/s)

E: Some index files failed to download. They have been ignored, or old ones used instead.
13

You removed all certificates yourself when you ran sudo rm -rf /etc/ssl/certs/*. That broke your system. One thing you can do to fix this is to reinstall the package they come from:

sudo apt-get install --reinstall ca-certificates

This should be relatively safe. If that doesn't work, you may need to purge the package out and reinstall it but don't attempt this if you currently have broken packages.

sudo apt-get -f install
# stop if you saw any errors

sudo dpkg --purge --force-depends ca-certificates
sudo apt-get -f install
  • Thank you for your answer mirabilios! I don't know what happened, I didn't anything else to try to solve the problem, but few days later my connections back to work as usual. May it was a problem in server that was fixed, I don't know. But, thank you for try to help! – user248189 Mar 2 '14 at 3:38
  • @Oli --reinstall only works for things that are not dpkg conffiles. But (I just looked on 14.04) ca-certificates indeed does not ship those files as dpkg conffiles, so your edit is probably safe. (Maintainer scripts and debconf caching might still interfere, but probably not in this example.) So, thanks. – mirabilos Jan 7 '15 at 14:24
  • Additionally, the /etc/ssl/certs is collated using the update-ca-certificates command. I would expect updates to ca-certificates to trigger this but you might have to run it afterwards manually. – Oli Jan 7 '15 at 14:29
  • @Oli from reading the postinst it should be triggered. – mirabilos Jan 7 '15 at 14:32
  • sudo apt-get install --reinstall ca-certificates did the deed. Thank you very much! – alsami Oct 7 '18 at 8:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.