Public bug reported: This is a recurrence of LP: #2164983, which was fixed on 2026-09-02.
appstream.ubuntu.com (185.125.188.36) is again serving an expired TLS certificate, so GNOME Software (50.0, resolute) cannot load any deb-app screenshots. Every download from https://appstream.ubuntu.com/media/... fails with "Unacceptable TLS certificate". Served certificate: subject: CN=appstream.ubuntu.com issuer: C=US, O=Let's Encrypt, CN=YR2 notBefore: Jul 17 11:13:33 2026 GMT notAfter: Oct 15 11:13:32 2026 GMT To reproduce: echo | openssl s_client -connect appstream.ubuntu.com:443 \ -servername appstream.ubuntu.com 2>/dev/null | openssl x509 -noout -dates curl -I https://appstream.ubuntu.com/ # -> "certificate has expired" Root cause (suspected): the certificate deployed for the fix of LP: #2164983 was issued on Jul 17 and was never renewed. Let's Encrypt certificates last 90 days, so automatic renewal may not be set up on this host. If so, this will likely happen again every ~90 days. Example log line (journalctl --user): gnome-software[5140]: Failed to download screenshot 'https://appstream.ubuntu.com/media/resolute/dev/bragefuglseth/Fretboard/ .../[email protected]': Unacceptable TLS certificate Thanks to @nteodosio and @finnrg for the quick fix last time. ** Affects: appstream (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2172257 Title: appstream.ubuntu.com certificate expired again (regression of LP: #2164983) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/appstream/+bug/2172257/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
