Hello,

One of the mirrors [1] got a new SSL certificate from Sectigo (ex-
Comodo) 3 days ago. As wget can't find its root certificate, it now
refuses to connect to the mirror by HTTPS, and Mirmon flags this URL as
"no time".

The root certificate can be found in the Firefox settings. It only needs
to be made available to wget. To save you a minute or so, I attach
SectigoPublicServerAuthenticationRootR46.crt, exported from Firefox 128.
To save you a few more seconds, here is how I added it to Debian 11, and
finally downloaded the timestamp with wget:

$ sudo cp ~/SectigoPublicServerAuthenticationRootR46.crt /usr/local/share/ca-certificates/
$ sudo update-ca-certificates

There are 3 other Sectigo root certificates, which could be treated the
same way.

Thanks in advance!

All the best,
Thérèse

[1] https://mirror.ufs.ac.za/gnu/

Attachment: SectigoPublicServerAuthenticationRootR46.crt
Description: application/pkix-cert

Reply via email to