Odroid Xu4 Apt-get update error SSL...

root@DietPi:~# apt-get update
Get:1 http://oph.mdrjr.net/meveric all InRelease [405 B]
Err:1 http://oph.mdrjr.net/meveric all InRelease
Clearsigned file isn’t valid, got ‘NOSPLIT’ (does the network require authentication?)
Get:2 http://fuzon.co.uk/meveric all InRelease [405 B]
Err:2 http://fuzon.co.uk/meveric all InRelease
Clearsigned file isn’t valid, got ‘NOSPLIT’ (does the network require authentication?)
Get:3 http://fuzon.co.uk/meveric stretch InRelease [405 B]
Err:3 http://fuzon.co.uk/meveric stretch InRelease
Clearsigned file isn’t valid, got ‘NOSPLIT’ (does the network require authentication?)
Ign:4 https://downloads.plex.tv/repo/deb public InRelease
Hit:5 https://downloads.plex.tv/repo/deb public Release
Ign:6 https://deb.debian.org/debian stretch InRelease
Ign:7 https://download.webmin.com/download/repository sarge InRelease
Ign:9 https://packages.sury.org/php stretch InRelease
Ign:10 https://deb.debian.org/debian stretch-updates InRelease
Err:11 https://download.webmin.com/download/repository sarge Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name ‘download.webmin.com
Err:12 https://packages.sury.org/php stretch Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name ‘packages.sury.org
Ign:13 https://deb.debian.org/debian-security stretch/updates InRelease
Ign:14 https://deb.debian.org/debian stretch-backports InRelease
Err:15 https://deb.debian.org/debian stretch Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name ‘deb.debian.org
Err:16 https://deb.debian.org/debian stretch-updates Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name ‘deb.debian.org
Err:17 https://deb.debian.org/debian-security stretch/updates Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name ‘deb.debian.org
Err:18 https://deb.debian.org/debian stretch-backports Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name ‘deb.debian.org
Reading package lists… Done
E: The repository ‘https://download.webmin.com/download/repository sarge Release’ does no longer have a Release file.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository ‘https://packages.sury.org/php stretch Release’ does no longer have a Release file.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository ‘https://deb.debian.org/debian stretch Release’ does no longer have a Release file.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository ‘https://deb.debian.org/debian stretch-updates Release’ does no longer have a Release file.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository ‘https://deb.debian.org/debian-security stretch/updates Release’ does no longer have a Release file.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository ‘https://deb.debian.org/debian stretch-backports Release’ does no longer have a Release file.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.


Any idea why this happens to me?

Hi,

seems you always get the following certificate name back jako2009.dynu.net but it dosn’t mach to the website you are trying to open

SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'download.webmin.com'

for sure this doesn’t match and a SSL error is the logical consequence. But this is out of our support as DietPi did not mange one of targeted websites

is jako2009.dynu.net somehow known to you?

Yes this is the dyndns I use to get access from outside home my Odroid.

Any idea why this happpens?

do you use any own DNS Server like PiHole?

You nailed, the problem was Pihole…

…after I disabled it worked like a charm…

Thanks!!! :slight_smile: :slight_smile: :slight_smile:

yap you would need to find out why PiHole was resolving all request to your own privat DDNS.

I have set on my router instead of the DNS the IP of the Odroid so every device on my network it is under PiHole…

…maybe this is why…

I am not that expert in networks or linux…

well I don’t think that this has something to do with it. I guess that’s more a setting in PiHole that all DNS request are answered with same address of your DDNS. You cold perform a nslookup to see what the answer of your DNS Server/Pihole would be if you try to resolve a DNS name.

Hi sorry for taking so long to reply,

when I do a nslookup with pihole on,

the reply es like this:

nslookup es.wikipedia.org
Server:         127.0.0.1
Address:        127.0.0.1#53

Name:   es.wikipedia.org
Address: 192.168.1.25

If I disable pihole I get this:

nslookup es.wikipedia.org
Server:         127.0.0.1
Address:        127.0.0.1#53

Non-authoritative answer:
es.wikipedia.org        canonical name = dyna.wikimedia.org.
Name:   dyna.wikimedia.org
Address: 91.198.174.192

I don’t know if I did something wrong setting up pihole, but I followed the guide for dietpi.

Something is wrong with the Pihole.
Configure your router to use a different nameserver for the hosts of the lan.
Reset pihole to defaults.
Configure Pihole and test it with one host only.
When you are satisfied with it, switch back the settings in router to use Pihole.

trendy
this only helps if the router is playing DHCP server as well.

joaquinain
what is this IP 192.168.1.25 about? is this your internet router? Which Upstream DNS server you configured in PiHole? Can you check pihole -t. It should display Pihole log and you can watch what PiHole is doing on your DNS request. Probably logging would need to be activated >> pihole logging on

Which is the default for all home and soho routers

well I need to use PiHole as DHCP Server because my Router (ISP device) did not support changing local DNS Server. :wink: