Le 16/01/2026 à 14:36, Luke Yasuda a écrit :
Uh, I'm putting a bandaid on this.
I added the two HARICA certs (one RSA and one ECDSA) to download0, which
runs mirmon. The certs were yanked from ca-certificates_20250419_all.deb
download0 runs Trisquel 7, which was declared EOL in Oct 2014, packages
frozen in early 2013, and I can see that the "ca-certificates" package
was taken from Debian 9 in 2020. Newer "ca-certificates" packages since
2021 requires openssl (>= 1.1.1) but
openssl_1.0.2g-1ubuntu4.13~14.04~ppa1 was installed.
Some day we have to rip the bandaid off.
Thanks, Luke!
FYI, I'm running (old-old) Debian 11, which AFAIK corresponds to
Ubuntu 20/21 or Trisquel 10, and its CA certificates still don't include
HARICA 2021. So next time you upgrade download0, you will need to skip
at least 3 versions.
