wget says The certificate has expired

This forum is for discussion about general software issues.

Re: wget says The certificate has expired

Postby graysky » Sat Sep 03, 2022 5:24 pm

A fix is under evaluation. It's the 64-bit time_t/year 2038 thing for 32-bit architectures. gnutls can be rebuilt either to disable y2038 mitigations and use 32-bit time or to start using 64bit time, either of which fixes this, but the full ramifications of going either way are not known at this time.
graysky
Developer
 
Posts: 1728
Joined: Sun Jun 26, 2011 6:56 am
Location: /run/user/1000

Re: wget says The certificate has expired

Postby graysky » Sat Sep 03, 2022 5:25 pm

Mod note: merged threads
graysky
Developer
 
Posts: 1728
Joined: Sun Jun 26, 2011 6:56 am
Location: /run/user/1000

Re: wget says The certificate has expired

Postby debo » Fri Oct 14, 2022 2:25 am

Has this been reported to the gnutls project? It seems pretty serious. I downgraded gnutls to version 3.7.6 for now.

Note that it breaks the gpg dirmngr.
debo
 
Posts: 13
Joined: Fri Dec 24, 2021 4:00 pm

Re: wget says The certificate has expired

Postby sonic » Tue Nov 15, 2022 8:47 am

I can't build docker images based on alpine. It hangs and eventually times out with a TLS error at this step:
$this->bbcode_second_pass_code('', '
RUN apk add --no-cache ca-certificates tzdata
---> Running in 6e7cf298fe52
fetch https://dl-cdn.alpinelinux.org/alpine/v3.15/main/armv7/APKINDEX.tar.gz
')

Running wget with the url on the host gives

$this->bbcode_second_pass_code('', '
--2022-11-15 09:31:52-- https://dl-cdn.alpinelinux.org/alpine/v3.15/main/armv7/APKINDEX.tar.gz
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving dl-cdn.alpinelinux.org (dl-cdn.alpinelinux.org)... 151.101.2.133, 151.101.66.133, 151.101.130.133, ...
Connecting to dl-cdn.alpinelinux.org (dl-cdn.alpinelinux.org)|151.101.2.133|:443... connected.
The certificate has not yet been activated
')

It works when I downgrade wget to 1.21.1. The problem in the docker still persists though :(

Is this related or is the problem in the alpine image a separate issue?
sonic
 
Posts: 4
Joined: Mon Nov 26, 2012 10:40 pm

Re: wget says The certificate has expired

Postby VincentDcmps » Sat Dec 10, 2022 1:42 pm

I same issue here on wget and docker do we have an status for this issue since november?
VincentDcmps
 
Posts: 2
Joined: Fri Mar 11, 2022 12:29 pm

Re: wget says The certificate has expired

Postby infrareddude » Sun Dec 11, 2022 5:53 am

Any updates on this issue?
infrareddude
 
Posts: 5
Joined: Fri Sep 02, 2022 11:22 pm

Re: wget says The certificate has expired

Postby Pad » Mon Dec 19, 2022 4:13 pm

graysky, any updates on the topic?

How can we rebuild gnutls with those workarounds in the meantime?
Pad
 
Posts: 2
Joined: Sun Apr 02, 2017 9:28 am

Re: wget says The certificate has expired

Postby debo » Mon Dec 19, 2022 11:50 pm

People are still having problems with this? It resolved for me a while back. The symptom I had noticed was that archlinux-keyring-wkd-sync.service, which is trigger by a timer, was failing due to the gpg dirmngr not functioning.
debo
 
Posts: 13
Joined: Fri Dec 24, 2021 4:00 pm

Re: wget says The certificate has expired

Postby pejobo » Sat Jan 21, 2023 5:43 pm

$this->bbcode_second_pass_quote('', 'P')eople are still having problems with this?


At least I have. When checking installed packages related I notice that I've got ca-certificates-cacert from AUR installed (cannot recall the moment I installed this :( ). When checking the package ca-certificates from Core this says it replaces the -cacert variant?! Changing the package (and calling update-ca-trust afterwards) does not change anything, still the certificate couldn't be verified..

$this->bbcode_second_pass_code('', '
# pacman -Q | grep cert
ca-certificates 20220905-1
ca-certificates-mozilla 3.87-1
ca-certificates-utils 20220905-1
')
pejobo
 
Posts: 50
Joined: Tue Apr 07, 2015 5:42 pm

Re: wget says The certificate has expired

Postby debo » Sat Jan 21, 2023 8:31 pm

I upgraded this system yesterday. It is running linux-rpi 5.15.89-1 (armv7h). Which arch are you using?
debo
 
Posts: 13
Joined: Fri Dec 24, 2021 4:00 pm

PreviousNext

Return to General

Who is online

Users browsing this forum: No registered users and 6 guests