User Tools

Site Tools


wiki:update_packages_debian_certificate_expired

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

wiki:update_packages_debian_certificate_expired [2021/12/14 16:17] – created antisawiki:update_packages_debian_certificate_expired [2021/12/14 16:23] (current) – add image antisa
Line 10: Line 10:
 ... ...
 </code> </code>
 +
 +First try upgrading the //ca-certificates// package. If that doesn't work continue with below.
  
 Test the site on [[https://www.ssllabs.com/ssltest/analyze.html?d=pkg.jenkins.io&s=2a04%3a4e42%3a0%3a0%3a0%3a0%3a0%3a645&latest|ssl labs]]. You should see that there are 2 certificate chain paths, one of which is expired. Test the site on [[https://www.ssllabs.com/ssltest/analyze.html?d=pkg.jenkins.io&s=2a04%3a4e42%3a0%3a0%3a0%3a0%3a0%3a645&latest|ssl labs]]. You should see that there are 2 certificate chain paths, one of which is expired.
 +
 +{{:wiki:screenshots:ssl_labs_2path_chain_expired.png|}}
  
 Comment out the offending certificate in ///etc/ca-certificates.conf// by appending a "!" in front of mozilla/DST_Root_CA_X3.crt  . Comment out the offending certificate in ///etc/ca-certificates.conf// by appending a "!" in front of mozilla/DST_Root_CA_X3.crt  .
wiki/update_packages_debian_certificate_expired.1639495058.txt.gz · Last modified: 2021/12/14 16:17 by antisa

Except where otherwise noted, content on this wiki is licensed under the following license: CC0 1.0 Universal
CC0 1.0 Universal Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki