-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Sun, Feb 10, 2019 at 06:23:37PM +0100, Dupéron Georges wrote: > It seems that the SSL certificate for the qubes-templates-itl-testing repo > has expired. > > sudo qubes-dom0-update --enablerepo=qubes-templates-itl-testing > qubes-template-debian-9-minimal > [...] > DNF will only download packages for the transaction. > Downloading Packages: > [MIRROR] qubes-template-debian-9-minimal-4.0.1-201901271906.noarch.rpm: > Curl error (60): Peer certificate cannot be authenticated with given CA > certificates for > https://mirrors.dgplug.org/qubes/repo/yum/r4.0/templates-itl-testing/rpm/qubes-template-debian-9-minimal-4.0.1-201901271906.noarch.rpm > [SSL certificate problem: certificate has expired] > > GPG signature of the packages is checked by dom0 anyway, so they can be > downloaded using an insecure connection, right?
Yes, this does not affect integrity of the packages. > Should the httpS be removed in /etc/yum.repos.d/qubes-templates.repo, or > can the certificate be updated? This is just one of the mirrors, yum/dnf should fallback to another one automatically, doesn't it for you? Regardless of the above, I've notified mirror operator. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlxgkxgACgkQ24/THMrX 1yyjLAf9G+ECqEhEd6pTsXrfhi91l+B5ULITYEcNxH5aoeS6xv+JZ+qu/WsyStfU +qV6oPaoG1fxhPGZ0wcbkiCrg9CXa5jQbpuP3WPDLeohTEwL1vI3PcIBUjyqFFXu cTUAu8Y7QLQ9BfA28e+EiMUMXyP0fq7a9EJiBh1Oa8CLkP/BRKdRLXt6794xzYaT UgCGtos3rXFMVQcntCAPG0lMgAp8Yj83XaOerCvEvj8SyQRuVAjzHq3GH7FXJVRK K8pylk49T3Od7xzgwEXFSnL8LeqneIzsHXVp9eN+O2AjKACXe1pc9qb5hyZxZwFN ACFnppacVKyQFz3wRPxNmcttLv5vdQ== =sPIL -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190210210944.GB9610%40mail-itl. For more options, visit https://groups.google.com/d/optout.
