zmatt icon

DST Root CA X3 expiration fix

zmatt | PRO | 12/12/21 09:44:41 AM UTC | 0 ⭐ | 1430 👁️ | Never ⏰ | []
Bash |

640 B

|

None

|

0 👍

/

0 👎

### PROBLEM ###
# debian@beaglebone:~$ sudo /opt/scripts/tools/update_kernel.sh 
# [sudo] password for debian: 
# info: checking archive
# ERROR: The certificate of ‘rcn-ee.com’ is not trusted.
# ERROR: The certificate of ‘rcn-ee.com’ has expired.
 
 
#### ROOT CAUSE ###
# https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
 
 
### SOLUTION 1: remove the expired root certificate ###
sudo sed -i -e 's:^mozilla/DST_Root_CA_X3:!&:' /etc/ca-certificates.conf
sudo update-ca-certificates
 
 
### SOLUTION 2: update the misbehaving SSL libraries ###
sudo apt update
sudo apt install --upgrade --yes libssl1.1 libgnutls30
 

Comments