Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

[SOLVED] Certificates not trusted when install/update

New to Debian (Or Linux in general)? Ask your questions here!
Post Reply
Message
Author
User avatar
Cr4sh
Posts: 19
Joined: 2022-01-22 19:22
Been thanked: 1 time

[SOLVED] Certificates not trusted when install/update

#1 Post by Cr4sh »

Hi, I just installed Debian 11 and got some rpoblem to install packages or making updates

Code: Select all

Err:1 https://ftp.us.debian.org/debian bullseye/main amd64 libid3tag0 amd64 0.15.1b-14
  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
Err:2 https://ftp.us.debian.org/debian bullseye/main amd64 libimlib2 amd64 1.7.1-2
  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
Err:3 https://ftp.us.debian.org/debian bullseye/main amd64 yudit-common all 3.0.7-3
  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
Err:4 https://ftp.us.debian.org/debian bullseye/main amd64 feh amd64 3.6.3-1
  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
Err:5 https://ftp.us.debian.org/debian bullseye/main amd64 fluxbox amd64 1.3.5-2+b2
  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
Err:6 https://ftp.us.debian.org/debian bullseye/main amd64 fonts-terminus-otb all 4.48-3
  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
Err:7 https://ftp.us.debian.org/debian bullseye/main amd64 libturbojpeg0 amd64 1:2.0.6-4
  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
Err:8 https://ftp.us.debian.org/debian bullseye/main amd64 libjpeg-turbo-progs amd64 1:2.0.6-4
  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
Err:9 https://ftp.us.debian.org/debian bullseye/main amd64 xfonts-terminus all 4.48-3
  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
E: Failed to fetch https://ftp.us.debian.org/debian/pool/main/libi/libid3tag/libid3tag0_0.15.1b-14_amd64.deb  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
E: Failed to fetch https://ftp.us.debian.org/debian/pool/main/i/imlib2/libimlib2_1.7.1-2_amd64.deb  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
E: Failed to fetch https://ftp.us.debian.org/debian/pool/main/y/yudit/yudit-common_3.0.7-3_all.deb  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
E: Failed to fetch https://ftp.us.debian.org/debian/pool/main/f/feh/feh_3.6.3-1_amd64.deb  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
E: Failed to fetch https://ftp.us.debian.org/debian/pool/main/f/fluxbox/fluxbox_1.3.5-2%2bb2_amd64.deb  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
E: Failed to fetch https://ftp.us.debian.org/debian/pool/main/x/xfonts-terminus/fonts-terminus-otb_4.48-3_all.deb  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
E: Failed to fetch https://ftp.us.debian.org/debian/pool/main/libj/libjpeg-turbo/libturbojpeg0_2.0.6-4_amd64.deb  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
E: Failed to fetch https://ftp.us.debian.org/debian/pool/main/libj/libjpeg-turbo/libjpeg-turbo-progs_2.0.6-4_amd64.deb  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
E: Failed to fetch https://ftp.us.debian.org/debian/pool/main/x/xfonts-terminus/xfonts-terminus_4.48-3_all.deb  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2600:3404:200:237::2 443]
I tried different ways but no one works for me.
this my sources.list

Code: Select all

deb [trusted=yes] https://ftp.us.debian.org/debian/ bullseye main non-free contrib
deb-src [trusted=yes] https://ftp.us.debian.org/debian/ bullseye main non-free contrib

deb [trusted=yes] https://ftp.us.debian.org/debian/ bullseye-security main contrib non-free
deb-src [trusted=yes] https://ftp.us.debian.org/debian/ bullseye-security main contrib non-free

# bullseye-updates, to get updates before a point release is made;
# see https://www.debian.org/doc/manuals/debian-reference/ch02.en.html#_updates_and_backports
deb [trusted=yes] https://ftp.us.debian.org/debian/ bullseye-updates main contrib non-free
deb-src [trusted=yes] https://ftp.us.debian.org/debian/ bullseye-updates main contrib non-free
Thanks in advance to whom will help
Last edited by Cr4sh on 2022-01-22 22:06, edited 1 time in total.

User avatar
FreewheelinFrank
Global Moderator
Global Moderator
Posts: 2082
Joined: 2010-06-07 16:59
Has thanked: 38 times
Been thanked: 225 times

Re: Certificates not trusted when install/update

#2 Post by FreewheelinFrank »

Why are you trying to bypass security? You don't want to do that.

line should be:

Code: Select all

deb http://ftp.us.debian.org/debian/ bullseye main contrib non-free
Or

Code: Select all

deb http://deb.debian.org/debian/ bullseye main contrib non-free
Which will choose the fastest repository automatically.

Note http not https - Security is by key.
By default, Debian systems come preconfigured with the Debian archive key in the keyring.
https://wiki.debian.org/SecureApt

oh, and you can probably comment out the src lines unless you really want the source code.

Code: Select all

deb http://deb.debian.org/debian/ bullseye main contrib non-free
#deb-src http://deb.debian.org/debian/ bullseye main contrib non-free
Last edited by FreewheelinFrank on 2022-01-22 21:12, edited 2 times in total.

kedaha
Posts: 3521
Joined: 2008-05-24 12:26
Has thanked: 33 times
Been thanked: 77 times

Re: Certificates not trusted when install/update

#3 Post by kedaha »

Hey! Note it is not testing but bullseye!
DebianStable

Code: Select all

$ vrms

No non-free or contrib packages installed on debian!  rms would be proud.

User avatar
FreewheelinFrank
Global Moderator
Global Moderator
Posts: 2082
Joined: 2010-06-07 16:59
Has thanked: 38 times
Been thanked: 225 times

Re: Certificates not trusted when install/update

#4 Post by FreewheelinFrank »

kedaha wrote: 2022-01-22 21:08 Hey! Note it is not testing but bullseye!
Oopsie!

Debian sources list generator still has Bullseye as Testing.

Thanks! Will edit.

q-it-13
Posts: 2
Joined: 2022-10-25 15:12

Re: [SOLVED] Certificates not trusted when install/update

#5 Post by q-it-13 »

Hi, I up this topic because I have the same problem on my debian11, I have to go through a firewall that only accepts https to update my server and so I have the error message :

W: Impossible de récupérer https://deb.debian.org/debian/dists/bullseye/InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Erreur de vérification du certificat. [IP : 199.232.82.132 443]
W: Impossible de récupérer https://deb.debian.org/debian/dists/bul ... /InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Erreur de vérification du certificat. [IP : 199.232.82.132 443]
W: Impossible de récupérer https://security.debian.org/debian-secu ... /InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Erreur de vérification du certificat. [IP : 151.101.2.132 443]
W: Impossible de récupérer https://deb.debian.org/debian/dists/bul ... /InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Erreur de vérification du certificat. [IP : 199.232.82.132 443]

How can I update the certificate ?
I tried [trusted=yes] after deb but with no success. If you have an idee thank you !

Post Reply