** Description changed: This is a recurrence of LP: #2164983, which was fixed on 2026-09-02. appstream.ubuntu.com (185.125.188.36) is again serving an expired TLS certificate, so GNOME Software (50.0, resolute) cannot load any deb-app screenshots. Every download from https://appstream.ubuntu.com/media/... fails with "Unacceptable TLS certificate". Served certificate: - subject: CN=appstream.ubuntu.com - issuer: C=US, O=Let's Encrypt, CN=YR2 - notBefore: Jul 17 11:13:33 2026 GMT - notAfter: Oct 15 11:13:32 2026 GMT + subject: CN=appstream.ubuntu.com + issuer: C=US, O=Let's Encrypt, CN=YR2 + notBefore: Jul 17 11:13:33 2026 GMT + notAfter: Oct 15 11:13:32 2026 GMT To reproduce: - echo | openssl s_client -connect appstream.ubuntu.com:443 \ - -servername appstream.ubuntu.com 2>/dev/null | openssl x509 -noout -dates - curl -I https://appstream.ubuntu.com/ # -> "certificate has expired" + echo | openssl s_client -connect appstream.ubuntu.com:443 \ + -servername appstream.ubuntu.com 2>/dev/null | openssl x509 -noout -dates + curl -I https://appstream.ubuntu.com/ # -> "certificate has expired" Root cause (suspected): the certificate deployed for the fix of LP: #2164983 was issued on Jul 17 and was never renewed. Let's Encrypt - certificates last 90 days, so it looks like the certificate was replaced - once by hand but automatic renewal (certbot/ACME or similar) on this host - is still not working. Unless renewal is fixed, this will happen again - every ~90 days. + certificates last 90 days, so automatic renewal may not be set up on this + host. If so, this will likely happen again every ~90 days. Example log line (journalctl --user): - gnome-software[5140]: Failed to download screenshot - 'https://appstream.ubuntu.com/media/resolute/dev/bragefuglseth/Fretboard/ - .../[email protected]': Unacceptable TLS certificate + gnome-software[5140]: Failed to download screenshot + 'https://appstream.ubuntu.com/media/resolute/dev/bragefuglseth/Fretboard/ + .../[email protected]': Unacceptable TLS certificate + + Thanks to @nteodosio and @finnrg for the quick fix last time.
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2172257 Title: appstream.ubuntu.com certificate expired again (regression of LP: #2164983) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/appstream/+bug/2172257/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
