Hi!
The SysV init script should not be used on a system that is running
systemd. It is there to be used on non-systemd Debian installations
only (kfreebsd, hurd). If you have enabled this on a systemd based
system, please disable it.
On systemd based systems the proper way is to use the fetch-crl systemd
timer unit. This is activated using:
systemctl enable fetch-crl.timer
systemctl start fetch-crl.timer
There is also a fetch-crl systemd service unit. This is only intended
to be run when the timer unit is triggered, and can not be enabled on
its own - the unit files does not have an install section by design.
The issue with missing certificates would better be addressed by
updating the igtf-policy packages (if you are using them).
Unfortunately, due to the freeze for the upcoming release, this package
is not up to date in Debian and still contains references to an old
discontinued CA that was removed from later upstream releases.
If the discontinued CA (INFN-CA-2015) causes issued for you, you can
reconfigure igtf-policy-classic to exclude it.
See /usr/share/doc/igtf-policy-classic/README.Debian
Let me know if this addresses your issues.
Mattias Ellert
tor 2021-07-15 klockan 13:22 +0200 skrev Carl-Fredrik Enell:
> Package: fetch-crl
> Version: 3.0.19-2
> Severity: important
>
> Dear Maintainer,
>
>
> * I tried to uninstall and reinstall fetch-crl because of error
> * messages regarding a non-existing certificate.
>
> * Packet configuration fails on update-rc.d: No default runlevel.
> This is expected on a systemd based release as far as I can
> understand.
> init-system-helpers is installed.
>
> * I would expect fetch-crl to run from cron or a systemd timer, not
> * to install anything in rcN.d.
>
> Best regards,
> Carl-Fredrik Enell
>
>
> -- System Information:
> Debian Release: 10.10
> APT prefers stable
> APT policy: (990, 'stable'), (500, 'stable-updates'), (500,
> 'proposed-updates')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 5.10.0-0.bpo.7-amd64 (SMP w/64 CPU cores)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
> LANGUAGE=en_US:en (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
>
> Versions of packages fetch-crl depends on:
> ii init-system-helpers 1.56+nmu1
> ii libwww-perl 6.36-2
> ii lsb-base 10.2019051400
> ii openssl 1.1.1d-0+deb10u6
> ii perl 5.28.1-6+deb10u1
>
> fetch-crl recommends no packages.
>
> fetch-crl suggests no packages.
>
> -- no debconf information
smime.p7s
Description: S/MIME cryptographic signature
