Differences

This shows you the differences between two versions of the page.

--- wiki:update_packages_debian_certificate_expired [2021/12/14 15:17] – created antisa
+++ wiki:update_packages_debian_certificate_expired [2021/12/14 15:23] (current) – add image antisa
@@ Line 10: / Line 10: @@
 ...
 </code>
+First try upgrading the //ca-certificates// package. If that doesn't work continue with below.
 Test the site on [[https://www.ssllabs.com/ssltest/analyze.html?d=pkg.jenkins.io&s=2a04%3a4e42%3a0%3a0%3a0%3a0%3a0%3a645&latest|ssl labs]]. You should see that there are 2 certificate chain paths, one of which is expired.
+{{:wiki:screenshots:ssl_labs_2path_chain_expired.png|}}
 Comment out the offending certificate in ///etc/ca-certificates.conf// by appending a "!" in front of mozilla/DST_Root_CA_X3.crt  .