Linux

let's encrypt過期啦 - Linux

Jack avatarJack · 2021-10-01

Table of Contents


TL;DR;

$ sudo sed -i 's/mozilla\/DST_Root_CA_X3.crt/!mozilla\/DST_Root_CA_X3.crt/g' /etc/ca-certificates.conf
$ sudo update-ca-certificates

https://medium.com/geekculture/will-you-be-impacted-by-letsencrypt-dst-root-ca-x3-expiration-d54a018df257

https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

server certs要把舊的x3刪掉了

要不然server side 驗證應該都失敗啦


--
Linux

All Comments

Sandy avatarSandy2021-10-02
哪個發行版的 ca-certificates 套件那麼雷
Zenobia avatarZenobia2021-10-03
通常這可以透過套件更新解決吧
Kristin avatarKristin2021-10-04
沒再更新的舊裝置吧
據說一堆android手機都遇到了
Jack avatarJack2021-10-05
OpenBSD也有遇到 很多mirror都受影響
Annie avatarAnnie2021-10-06
原來 PCMan Windows 9.5.0 Beta 也被影響到了
Zora avatarZora2021-10-07
我的mac10.14也遇到
curl -v https://dl.4kdownload.com
Adele avatarAdele2021-10-08
curl -v https://www.coconut-flavour.com
Gilbert avatarGilbert2021-10-09
跟我說憑證有問題 但是我用瀏覽器卻沒問題
Freda avatarFreda2021-10-10
用curl說憑證有問題 用瀏覽器就正常
Liam avatarLiam2021-10-11
https://i.imgur.com/4hwA08e.png +1
但如果用得了 homebrew 裝 curl 可能還是有救?
Franklin avatarFranklin2021-10-12
curl預設不是吃/etc/ssl下的ca嗎
Aaliyah avatarAaliyah2021-10-13
啊，搞混了orz
Oliver avatarOliver2021-10-14
請問如果是用MAC要怎麼處理憑證過期
Zenobia avatarZenobia2021-10-15
沒辦法啊 為了穩定不敢設 unstable 來用 只能手動解決
Aaliyah avatarAaliyah2021-10-16
brew install curl openssl ca-certificates可能可以解