[ 
https://issues.apache.org/jira/browse/CASSANDRA-19481?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17828297#comment-17828297
 ] 

Brandon Williams commented on CASSANDRA-19481:
----------------------------------------------

bq. You are using a different repo url

Nope:

{noformat}
# cat /etc/apt/sources.list.d/cassandra.sources.list 
deb https://debian.cassandra.apache.org 311x main
{noformat}

I think the Release error is a red herring, because you still have a 
certificate problem.  Before the cert error the repo URLs will be the CNAMEs:

{noformat}
# apt update
Hit:1 http://deb.debian.org/debian bullseye InRelease
Hit:2 http://deb.debian.org/debian-security bullseye-security InRelease
Hit:3 http://deb.debian.org/debian bullseye-updates InRelease  
Err:4 https://debian.cassandra.apache.org 311x InRelease      
  Certificate verification failed: The certificate is NOT trusted. The 
certificate issuer is unknown.  Could not handshake: Error in the certificate 
verification. [IP: 35.172.124.167 443]
Reading package lists... Done                                 
Building dependency tree... Done
Reading state information... Done
7 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: https://debian.cassandra.apache.org/dists/311x/InRelease: No system 
certificates available. Try installing ca-certificates.
W: Failed to fetch https://debian.cassandra.apache.org/dists/311x/InRelease  
Certificate verification failed: The certificate is NOT trusted. The 
certificate issuer is unknown.  Could not handshake: Error in the certificate 
verification. [IP: 35.172.124.167 443]
W: Some index files failed to download. They have been ignored, or old ones 
used instead.
{noformat}

I broke that installation on purpose for illustration.  With the certificate 
problem solved, it resolve to the jfrog addresses:

{noformat}
# apt update
Hit:1 http://deb.debian.org/debian bullseye InRelease
Hit:2 http://deb.debian.org/debian-security bullseye-security InRelease
Hit:3 http://deb.debian.org/debian bullseye-updates InRelease 
Get:4 https://apache.jfrog.io/artifactory/cassandra-deb 311x InRelease [3903 B]
{noformat}

Where you can see there is indeed a Release file, which we can further check:

{noformat}
$ wget https://debian.cassandra.apache.org/dists/311x/Release
--2024-03-19 06:59:12--  https://debian.cassandra.apache.org/dists/311x/Release
Resolving debian.cassandra.apache.org (debian.cassandra.apache.org)... 
35.172.124.167
Connecting to debian.cassandra.apache.org 
(debian.cassandra.apache.org)|35.172.124.167|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://apache.jfrog.io/artifactory/cassandra-deb/dists/311x/Release 
[following]
--2024-03-19 06:59:12--  
https://apache.jfrog.io/artifactory/cassandra-deb/dists/311x/Release
Resolving apache.jfrog.io (apache.jfrog.io)... 44.226.59.123, 100.21.156.46, 
54.185.186.5
Connecting to apache.jfrog.io (apache.jfrog.io)|44.226.59.123|:443... connected.
HTTP request sent, awaiting response... 200 
Length: 3021 (3.0K) [application/octet-stream]
Saving to: ‘Release’
{noformat}

and see the redirect in action, but the file does exist and can be retrieved 
successfully.

> The repository 'https://debian.cassandra.apache.org 311x Release' does not 
> have a Release file.
> -----------------------------------------------------------------------------------------------
>
>                 Key: CASSANDRA-19481
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-19481
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Packaging
>            Reporter: Martin Schröder
>            Assignee: Brandon Williams
>            Priority: Normal
>
> The debian repo for 311 can't be used anymore; apt update fails with
> {color:#000000}Ign:10 
> [https://debian.cassandra.apache.org|https://debian.cassandra.apache.org/] 
> 311x InRelease {color}
> Err:12 
> [https://debian.cassandra.apache.org|https://debian.cassandra.apache.org/] 
> 311x Release 
>  server certificate verification failed. CAfile: 
> /etc/ssl/certs/ca-certificates.crt CRLfile: none 
> Reading package lists... Done{color:#b26818} {color}{color:#000000} {color}
> E: The repository 'https://debian.cassandra.apache.org 311x Release' does not 
> have a Release file. 
> N: Updating from such a repository can't be done securely, and is therefore 
> disabled by default. 
> N: See apt-secure(8) manpage for repository creation and user configuration 
> details.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org

Reply via email to