Package: apt Version: 1.0.9.3 Severity: important On jessie, apt fails to authenticate https://buildd.debian.org against its own certificate:
| root@mipsel-aql-02:~# cat /etc/apt/apt.conf.d/puppet-https-buildd | Acquire::https::buildd.debian.org::CaInfo "/etc/ssl/servicecerts/buildd.debian.org.crt"; | | root@mipsel-aql-02:~# apt-get update | Get:1 http://ftp.uk.debian.org jessie InRelease [191 kB] | Ign http://db.debian.org jessie InRelease | Get:2 http://security.debian.org jessie/updates InRelease [84.1 kB] | Ign http://db.debian.org debian-all InRelease | Get:3 http://db.debian.org jessie Release.gpg [490 B] | Ign https://buildd.debian.org wheezy InRelease | Ign https://buildd.debian.org wheezy Release.gpg | Get:4 http://db.debian.org debian-all Release.gpg [490 B] | Get:5 http://ftp.uk.debian.org jessie-updates InRelease [117 kB] | Get:6 http://db.debian.org jessie Release [18.7 kB] | Get:7 http://db.debian.org debian-all Release [18.7 kB] | Ign https://buildd.debian.org wheezy Release | Get:8 http://ftp.uk.debian.org jessie/main mipsel Packages [8856 kB] | Get:9 http://security.debian.org jessie/updates/main mipsel Packages [20 B] | Get:10 http://db.debian.org jessie/main mipsel Packages [1006 B] | Get:11 http://security.debian.org jessie/updates/contrib mipsel Packages [20 B] | Get:12 http://db.debian.org debian-all/main mipsel Packages [19.4 kB] | Get:13 http://security.debian.org jessie/updates/non-free mipsel Packages [20 B] | Get:14 http://security.debian.org jessie/updates/contrib Translation-en [14 B] | Get:15 http://security.debian.org jessie/updates/main Translation-en [14 B] | Get:16 http://security.debian.org jessie/updates/non-free Translation-en [14 B] | Err https://buildd.debian.org wheezy/main mipsel Packages | server certificate verification failed. CAfile: /etc/ssl/servicecerts/buildd.debian.org.crt CRLfile: none | Ign http://db.debian.org jessie/main Translation-en | Ign http://db.debian.org debian-all/main Translation-en | Ign https://buildd.debian.org wheezy/main Translation-en | Get:17 http://ftp.uk.debian.org jessie/contrib mipsel Packages [43.9 kB] | Get:18 http://ftp.uk.debian.org jessie/non-free mipsel Packages [72.6 kB] | Get:19 http://ftp.uk.debian.org jessie/contrib Translation-en [38.9 kB] | Get:20 http://ftp.uk.debian.org jessie/main Translation-en [4626 kB] | Get:21 http://ftp.uk.debian.org jessie/non-free Translation-en [73.0 kB] | Get:22 http://ftp.uk.debian.org jessie-updates/main mipsel Packages [20 B] | Get:23 http://ftp.uk.debian.org jessie-updates/contrib mipsel Packages [20 B] | Get:24 http://ftp.uk.debian.org jessie-updates/non-free mipsel Packages [20 B] | Get:25 http://ftp.uk.debian.org jessie-updates/contrib Translation-en [14 B] | Get:26 http://ftp.uk.debian.org jessie-updates/main Translation-en [14 B] | Get:27 http://ftp.uk.debian.org jessie-updates/non-free Translation-en [14 B] | Fetched 14.2 MB in 14s (1005 kB/s) | W: Failed to fetch https://buildd.debian.org/apt/dists/wheezy/main/binary-mipsel/Packages server certificate verification failed. CAfile: /etc/ssl/servicecerts/buildd.debian.org.crt CRLfile: none | | E: Some index files failed to download. They have been ignored, or old ones used instead. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
