archive.raspberrypi.org / Certificate verification failed

Hello, today I try to update and upgrade my Dietpi installation and I have errors with certificates:

sudo apt update
Stary:1 http://raspbian.raspberrypi.org/raspbian buster InRelease
Ign:2 https://archive.raspberrypi.org/debian buster InRelease                                                
Błąd:3 https://archive.raspberrypi.org/debian buster Release                                                 
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 93.93.135.118 443]
Ign:4 https://download.webmin.com/download/repository sarge InRelease
Stary:5 https://download.webmin.com/download/repository sarge Release
Czytanie list pakietów... Gotowe                      
E: The repository 'https://archive.raspberrypi.org/debian buster Release' no longer has a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.



sudo apt upgrade
Czytanie list pakietów... Gotowe
Budowanie drzewa zależności       
Odczyt informacji o stanie... Gotowe
Obliczanie aktualizacji... Gotowe
Następujące pakiety zostaną zaktualizowane:
  libraspberrypi-bin libraspberrypi0 raspberrypi-bootloader raspberrypi-kernel raspberrypi-sys-mods rpi-eeprom rpi-eeprom-images
7 aktualizowanych, 0 nowo instalowanych, 0 usuwanych i 0 nieaktualizowanych.
Konieczne pobranie 78,0 MB archiwów.
Po tej operacji zostanie zwolnione 8 984 kB miejsca na dysku.
Kontynuować? [T/n] t
Błąd:1 https://archive.raspberrypi.org/debian buster/main armhf raspberrypi-kernel armhf 1.20200512-2
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:2 https://archive.raspberrypi.org/debian buster/main armhf libraspberrypi-bin armhf 1.20200512-2
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:3 https://archive.raspberrypi.org/debian buster/main armhf libraspberrypi0 armhf 1.20200512-2
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:4 https://archive.raspberrypi.org/debian buster/main armhf raspberrypi-bootloader armhf 1.20200512-2
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:5 https://archive.raspberrypi.org/debian buster/main armhf raspberrypi-sys-mods armhf 20200514
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:6 https://archive.raspberrypi.org/debian buster/main armhf rpi-eeprom-images all 7.1-1
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:7 https://archive.raspberrypi.org/debian buster/main armhf rpi-eeprom all 7.1-1
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/raspberrypi-firmware/raspberrypi-kernel_1.20200512-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/raspberrypi-firmware/libraspberrypi-bin_1.20200512-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/raspberrypi-firmware/libraspberrypi0_1.20200512-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/raspberrypi-firmware/raspberrypi-bootloader_1.20200512-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/raspberrypi-sys-mods/raspberrypi-sys-mods_20200514_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/rpi-eeprom/rpi-eeprom-images_7.1-1_all.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/rpi-eeprom/rpi-eeprom_7.1-1_all.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać niektórych archiwów, proszę spróbować uruchomić apt-get update lub użyć opcji --fix-missing.

I try --fix-missing, dpkg-reconfigure ca-certificates but that don’t help.

Regards Przemek

Hi,

this is an external error outside DietPi control. See GitHub https://github.com/MichaIng/DietPi/issues/3575

as a temp workaround you can do nano /etc/apt/sources.list.d/raspi.list and change from https to http

Hi, thanks for answer. So I can just wait until they fix it?

yes, just enjoiy the day and wait for the fix on rasberrypi.org side

Great, Thank You very much.

Hello,

I’m new to raspberry pi an dietpi so probably its just a stupid error but i don’t know how to proceed
i have download the file several times tried different sd cards but a always get the same error.

maybe someone can point me in the wright direction.
thank you!
This is the error i always get.




\

Details:

  • Date | Sat 30 May 16:52:20 BST 2020
  • Bug report | N/A
  • DietPi version | v6.28.0 (MichaIng/master)
  • Image creator | DietPi Core Team
  • Pre-image | Raspbian Lite
  • SBC device | RPi 4 Model B (armv7l) (ID=4)
  • Kernel version | Linux DietPi 4.19.75-v7l+ #1270 SMP Tue Sep 24 18:51:41 BST 2019 armv7l GNU/Linux
  • Distro | buster (ID=5)
  • Command | G_AGUP
  • Exit code | 100
  • Software title | DietPi-Update

Steps to reproduce:

Expected behaviour:

Actual behaviour:

Extra details:

Additional logs:

Ign:1 > https://archive.raspberrypi.org/debian > buster InRelease
Err:2 > https://archive.raspberrypi.org/debian > buster Release
Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 46.235.227.39 443]
Get:3 > http://raspbian.raspberrypi.org/raspbian > buster InRelease [15.0 kB]
Get:4 > http://raspbian.raspberrypi.org/raspbian > buster/rpi armhf Packages [1,360 B]
Get:5 > http://raspbian.raspberrypi.org/raspbian > buster/non-free armhf Packages [103 kB]
Get:6 > http://raspbian.raspberrypi.org/raspbian > buster/contrib armhf Packages [58.7 kB]
Get:7 > http://raspbian.raspberrypi.org/raspbian > buster/main armhf Packages [13.0 MB]
Reading package lists...
E: The repository '> https://archive.raspberrypi.org/debian > buster Release' does not have a Release file.

Looks like the time on Raspberry is not correct and therefore considers the certificates expired.
Verify with

date

and correct with

sudo date -s '2020-05-30 18:30:20'

This is an external issue and we need to wait for the fix at raspberrypi.org

https://www.raspberrypi.org/forums/viewtopic.php?f=29&t=275648

For the time being as workaround, just exit the setup, do nano /etc/apt/sources.list.d/raspi.list and change from https to http and restart the setup using /DietPi/dietpi/login

trendy nope it’s an external issue. Just check the link I shared

Hello,

It’s Working again.

Thanks

yes it’s fixed at archive.raspberrypi.org side

Joulinar yes one of the very rare cases! Good catch!