SSL certificate error when running apt update

Creating a bug report/issue

Yes I have searched the existing open and closed issues

Required Information

  • DietPi version | cat /boot/dietpi/.version

G_DIETPI_VERSION_CORE=9
G_DIETPI_VERSION_SUB=17
G_DIETPI_VERSION_RC=2
G_GITBRANCH=‘master’
G_GITOWNER=‘MichaIng’
G_LIVE_PATCH_STATUS[0]=‘not applicable’

  • Distro version | echo $G_DISTRO_NAME $G_RASPBIAN

trixie

  • Kernel version | uname --all

Linux eadu 6.12.43+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.43-1 (2025-08-27) x86_64 GNU/Linux

  • Architecture | dpkg --print-architecture

amd64

  • SBC model | echo $G_HW_MODEL_NAME or (EG: RPi3)

Virtual Machine (x86_64)

  • Power supply used | (EG: 5V 1A RAVpower)

N/A

  • SD card used | (EG: SanDisk ultra)

N/A

Additional Information (if applicable)

  • Software title | (EG: Nextcloud)
  • Was the software title installed freshly or updated/migrated?
  • Can this issue be replicated on a fresh installation of DietPi?
    ← If you sent a “dietpi-bugreport”, please paste the ID here →
  • Bug report ID | echo $G_HW_UUID

Steps to reproduce

  1. Run apt update

Expected behaviour

  • No error / warning

Actual behaviour


apt update
Hit:1 <URL> trixie InRelease
Hit:2 <URL> trixie-updates InRelease
Hit:3 <URL> trixie-security InRelease
Hit:4 <URL> trixie-backports InRelease
Hit:5 <URL> trixie InRelease
Ign:6 <URL> ./ InRelease
Ign:6 <URL> ./ InRelease
Ign:6 <URL> ./ InRelease
Err:6 <URL> ./ InRelease
SSL connection failed: error:0A000086:SSL routines::certificate verify failed / Success \[IP: 74.208.78.84 443\]
3 packages can be upgraded. Run ‘apt list --upgradable’ to see them.
Warning: Failed to fetch https://debian.pkg.swee.codes/./InRelease  SSL connection failed: error:0A000086:SSL routines::certificate verify failed / Success \[IP: 74.208.78.84 443\]
Warning: Some index files failed to download. They have been ignored, or old ones used instead.

Extra details


* cat sources.list
  deb index of SLASH debian trixie main contrib non-free non-free-firmware
  deb index of SLASH debian trixie-updates main contrib non-free non-free-firmware
  deb <URL> trixie-security main contrib non-free non-free-firmware
  deb <URL> trixie-backports main contrib non-free non-free-firmware
* ll /etc/apt/sources.list.d/
  total 8.0K
  -rw-r–r-- 1 root root 39 Aug 28 10:39 dietpi.list
  -rw-r–r-- 1 root root 37 Aug 28 10:39 swee.list
* cat /etc/apt/sources.list.d/swee.list
  deb https://debian.pkg.swee.codes ./
* cat /etc/apt/sources.list.d/dietpi.list
  deb dietpi DOT com SLASH apt trixie main

looks like you added a 3rd party repository manually to your system. You would need to check if the certificate would need to be updated.

Thank you.
This swee thing looked weird indeed, and I don’t remember adding it.
Thought it had been added by latest dietpi release, but seems it’s not the case.
I have to check my configuration for any suspicious tool now.

It was fortune-mod package, I didn’t notice that it had added a repo, my bad.

1 Like

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.