archive.raspberrypi.org / Certificate verification failed

Troubleshooting
1

Hello, today I try to update and upgrade my Dietpi installation and I have errors with certificates:

sudo apt update
Stary:1 http://raspbian.raspberrypi.org/raspbian buster InRelease
Ign:2 https://archive.raspberrypi.org/debian buster InRelease                                                
Błąd:3 https://archive.raspberrypi.org/debian buster Release                                                 
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 93.93.135.118 443]
Ign:4 https://download.webmin.com/download/repository sarge InRelease
Stary:5 https://download.webmin.com/download/repository sarge Release
Czytanie list pakietów... Gotowe                      
E: The repository 'https://archive.raspberrypi.org/debian buster Release' no longer has a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.




sudo apt upgrade
Czytanie list pakietów... Gotowe
Budowanie drzewa zależności       
Odczyt informacji o stanie... Gotowe
Obliczanie aktualizacji... Gotowe
Następujące pakiety zostaną zaktualizowane:
  libraspberrypi-bin libraspberrypi0 raspberrypi-bootloader raspberrypi-kernel raspberrypi-sys-mods rpi-eeprom rpi-eeprom-images
7 aktualizowanych, 0 nowo instalowanych, 0 usuwanych i 0 nieaktualizowanych.
Konieczne pobranie 78,0 MB archiwów.
Po tej operacji zostanie zwolnione 8 984 kB miejsca na dysku.
Kontynuować? [T/n] t
Błąd:1 https://archive.raspberrypi.org/debian buster/main armhf raspberrypi-kernel armhf 1.20200512-2
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:2 https://archive.raspberrypi.org/debian buster/main armhf libraspberrypi-bin armhf 1.20200512-2
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:3 https://archive.raspberrypi.org/debian buster/main armhf libraspberrypi0 armhf 1.20200512-2
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:4 https://archive.raspberrypi.org/debian buster/main armhf raspberrypi-bootloader armhf 1.20200512-2
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:5 https://archive.raspberrypi.org/debian buster/main armhf raspberrypi-sys-mods armhf 20200514
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:6 https://archive.raspberrypi.org/debian buster/main armhf rpi-eeprom-images all 7.1-1
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
Błąd:7 https://archive.raspberrypi.org/debian buster/main armhf rpi-eeprom all 7.1-1
  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/raspberrypi-firmware/raspberrypi-kernel_1.20200512-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/raspberrypi-firmware/libraspberrypi-bin_1.20200512-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/raspberrypi-firmware/libraspberrypi0_1.20200512-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/raspberrypi-firmware/raspberrypi-bootloader_1.20200512-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/raspberrypi-sys-mods/raspberrypi-sys-mods_20200514_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/rpi-eeprom/rpi-eeprom-images_7.1-1_all.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać https://archive.raspberrypi.org/debian/pool/main/r/rpi-eeprom/rpi-eeprom_7.1-1_all.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
E: Nie udało się pobrać niektórych archiwów, proszę spróbować uruchomić apt-get update lub użyć opcji --fix-missing.

I try --fix-missing, dpkg-reconfigure ca-certificates but that don’t help.

Regards Przemek

2

Hi,

this is an external error outside DietPi control. See GitHub https://github.com/MichaIng/DietPi/issues/3575

as a temp workaround you can do nano /etc/apt/sources.list.d/raspi.list and change from https to http

3

Hi, thanks for answer. So I can just wait until they fix it?

4

yes, just enjoiy the day and wait for the fix on rasberrypi.org side

5

Great, Thank You very much.

6

Hello,

I’m new to raspberry pi an dietpi so probably its just a stupid error but i don’t know how to proceed
i have download the file several times tried different sd cards but a always get the same error.

maybe someone can point me in the wright direction.
thank you!
This is the error i always get.

  • DietPi has encounted an error, and, is unable to continue -
  • Please create a ticket: > Issues · MichaIng/DietPi · GitHub > -
  • Copy and paste the BLUE lines below, into the ticket -


\

Details:

  • Date | Sat 30 May 16:52:20 BST 2020
  • Bug report | N/A
  • DietPi version | v6.28.0 (MichaIng/master)
  • Image creator | DietPi Core Team
  • Pre-image | Raspbian Lite
  • SBC device | RPi 4 Model B (armv7l) (ID=4)
  • Kernel version | Linux DietPi 4.19.75-v7l+ #1270 SMP Tue Sep 24 18:51:41 BST 2019 armv7l GNU/Linux
  • Distro | buster (ID=5)
  • Command | G_AGUP
  • Exit code | 100
  • Software title | DietPi-Update

Steps to reproduce:

  1. …
  2. …

Expected behaviour:

  • …

Actual behaviour:

  • …

Extra details:

  • …

Additional logs:

Ign:1 > https://archive.raspberrypi.org/debian > buster InRelease
Err:2 > https://archive.raspberrypi.org/debian > buster Release
Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 46.235.227.39 443]
Get:3 > http://raspbian.raspberrypi.org/raspbian > buster InRelease [15.0 kB]
Get:4 > http://raspbian.raspberrypi.org/raspbian > buster/rpi armhf Packages [1,360 B]
Get:5 > http://raspbian.raspberrypi.org/raspbian > buster/non-free armhf Packages [103 kB]
Get:6 > http://raspbian.raspberrypi.org/raspbian > buster/contrib armhf Packages [58.7 kB]
Get:7 > http://raspbian.raspberrypi.org/raspbian > buster/main armhf Packages [13.0 MB]
Reading package lists...
E: The repository '> https://archive.raspberrypi.org/debian > buster Release' does not have a Release file.
7

Looks like the time on Raspberry is not correct and therefore considers the certificates expired.
Verify with

date

and correct with

sudo date -s '2020-05-30 18:30:20'
8

This is an external issue and we need to wait for the fix at raspberrypi.org

https://www.raspberrypi.org/forums/viewtopic.php?f=29&t=275648

For the time being as workaround, just exit the setup, do nano /etc/apt/sources.list.d/raspi.list and change from https to http and restart the setup using /DietPi/dietpi/login

trendy nope it’s an external issue. Just check the link I shared

9

Hello,

It’s Working again.

Thanks

10

yes it’s fixed at archive.raspberrypi.org side

11

Joulinar yes one of the very rare cases! Good catch!