Control: reassign -1 ruby-httpclient
Control: forcemerge 995448 -1

On Thu, 07 Oct 2021 09:48:19 -0400 Joseph Nahmias wrote:

[...]
> Hello,

Hi!

> 
> When trying to run apt dist-upgrade with apt-listbugs installed, I now see 
> the following error:
> 
> [snip]
> Do you want to continue? [Y/n]
> Retrieving bug reports... 0% Fail
> Error retrieving bug reports from the server with the following error message:
> E: SSL_connect returned=1 errno=0 state=error: certificate verify failed 
> (certificate has expired)

This seems to be exactly the same issue that was reported in #995448,
which is marked as affecting package apt-listbugs.

I am reassigning and merging.
Please note that this should close your bug report, since the other
report is already closed.


[...]
> I am able to access bugs.debian.org from this machine without any SSL errors,
> so I presume the issue is somewhere in the SSL verification code used by
> apt-listbugs. Feel free to clone/reassign/block as appropriate.

Are you using a proxy? apt-cacher-ng, by chance?
If so, you can temporarily work around the issue as explained in
<https://bugs.debian.org/995448#47>
until you are able to upgrade ruby-httpclient to a fixed version.

However, I see that you are using oldstable: I don't know whether a
fixed version of ruby-httpclient will ever be backported to oldstable.
Maybe it can enter oldstable as a security update... I am not sure
whether it will be considered as a security issue worth a DSA, though...

Bye.

-- 
 http://www.inventati.org/frx/
 There's not a second to spare! To the laboratory!
..................................................... Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE

Attachment: pgpd2y8aAX2eH.pgp
Description: PGP signature

Reply via email to