Odroid Xu4 Apt-get update error SSL... Topic is solved

[joaquinain]

root@DietPi:~# apt-get update
Get:1 http://oph.mdrjr.net/meveric all InRelease [405 B]
Err:1 http://oph.mdrjr.net/meveric all InRelease
Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
Get:2 http://fuzon.co.uk/meveric all InRelease [405 B]
Err:2 http://fuzon.co.uk/meveric all InRelease
Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
Get:3 http://fuzon.co.uk/meveric stretch InRelease [405 B]
Err:3 http://fuzon.co.uk/meveric stretch InRelease
Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
Ign:4 https://downloads.plex.tv/repo/deb public InRelease
Hit:5 https://downloads.plex.tv/repo/deb public Release
Ign:6 https://deb.debian.org/debian stretch InRelease
Ign:7 https://download.webmin.com/download/repository sarge InRelease
Ign:9 https://packages.sury.org/php stretch InRelease
Ign:10 https://deb.debian.org/debian stretch-updates InRelease
Err:11 https://download.webmin.com/download/repository sarge Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'download.webmin.com'
Err:12 https://packages.sury.org/php stretch Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'packages.sury.org'
Ign:13 https://deb.debian.org/debian-security stretch/updates InRelease
Ign:14 https://deb.debian.org/debian stretch-backports InRelease
Err:15 https://deb.debian.org/debian stretch Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'deb.debian.org'
Err:16 https://deb.debian.org/debian stretch-updates Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'deb.debian.org'
Err:17 https://deb.debian.org/debian-security stretch/updates Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'deb.debian.org'
Err:18 https://deb.debian.org/debian stretch-backports Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'deb.debian.org'
Reading package lists... Done
E: The repository 'https://download.webmin.com/download/repository sarge Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository 'https://packages.sury.org/php stretch Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository 'https://deb.debian.org/debian stretch Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository 'https://deb.debian.org/debian stretch-updates Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository 'https://deb.debian.org/debian-security stretch/updates Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository 'https://deb.debian.org/debian stretch-backports Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.


Any idea why this happens to me?

[Joulinar]

Hi,

seems you always get the following certificate name back jako2009.dynu.net but it dosn't mach to the website you are trying to open

Code: Select all

SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'download.webmin.com'

for sure this doesn't match and a SSL error is the logical consequence. But this is out of our support as DietPi did not mange one of targeted websites

is jako2009.dynu.net somehow known to you?

[joaquinain]

Hi,

seems you always get the following certificate name back jako2009.dynu.net but it dosn't mach to the website you are trying to open

Code: Select all

SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'download.webmin.com'

for sure is doesn't match and a SSL error is the logical consequence. But this is out of our support as DietPi did not mange one of targeted websites

is jako2009.dynu.net somehow know to you?

Yes this is the dyndns I use to get access from outside home my Odroid.

Any idea why this happpens?

[Joulinar]

do you use any own DNS Server like PiHole?

[joaquinain]

do you use any own DNS Server like PiHole?

You nailed, the problem was Pihole...

...after I disabled it worked like a charm...

Thanks!!!

[Joulinar]

yap you would need to find out why PiHole was resolving all request to your own privat DDNS.

[joaquinain]

yap you would need to find out why PiHole was resolving all request to your own privat DDNS.

I have set on my router instead of the DNS the IP of the Odroid so every device on my network it is under PiHole...

...maybe this is why...

I am not that expert in networks or linux...

[Joulinar]

well I don't think that this has something to do with it. I guess that's more a setting in PiHole that all DNS request are answered with same address of your DDNS. You cold perform a nslookup to see what the answer of your DNS Server/Pihole would be if you try to resolve a DNS name.

[joaquinain]

well I don't think that this has something to do with it. I guess that's more a setting in PiHole that all DNS request are answered with same address of your DDNS. You cold perform a nslookup to see what the answer of your DNS Server/Pihole would be if you try to resolve a DNS name.

Hi sorry for taking so long to reply,

when I do a nslookup with pihole on,

the reply es like this:

Code: Select all

nslookup es.wikipedia.org
Server:         127.0.0.1
Address:        127.0.0.1#53

Name:   es.wikipedia.org
Address: 192.168.1.25

If I disable pihole I get this:

Code: Select all

nslookup es.wikipedia.org
Server:         127.0.0.1
Address:        127.0.0.1#53

Non-authoritative answer:
es.wikipedia.org        canonical name = dyna.wikimedia.org.
Name:   dyna.wikimedia.org
Address: 91.198.174.192

I don't know if I did something wrong setting up pihole, but I followed the guide for dietpi.

[trendy]

Something is wrong with the Pihole.
Configure your router to use a different nameserver for the hosts of the lan.
Reset pihole to defaults.
Configure Pihole and test it with one host only.
When you are satisfied with it, switch back the settings in router to use Pihole.