Odroid Xu4 Apt-get update error SSL... Topic is solved

Having issues with your DietPi installation, or, found a bug? Post it here.
joaquinain
Posts: 9
Joined: Thu Jun 27, 2019 6:28 pm

Odroid Xu4 Apt-get update error SSL...

Post by joaquinain »

root@DietPi:~# apt-get update
Get:1 http://oph.mdrjr.net/meveric all InRelease [405 B]
Err:1 http://oph.mdrjr.net/meveric all InRelease
Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
Get:2 http://fuzon.co.uk/meveric all InRelease [405 B]
Err:2 http://fuzon.co.uk/meveric all InRelease
Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
Get:3 http://fuzon.co.uk/meveric stretch InRelease [405 B]
Err:3 http://fuzon.co.uk/meveric stretch InRelease
Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
Ign:4 https://downloads.plex.tv/repo/deb public InRelease
Hit:5 https://downloads.plex.tv/repo/deb public Release
Ign:6 https://deb.debian.org/debian stretch InRelease
Ign:7 https://download.webmin.com/download/repository sarge InRelease
Ign:9 https://packages.sury.org/php stretch InRelease
Ign:10 https://deb.debian.org/debian stretch-updates InRelease
Err:11 https://download.webmin.com/download/repository sarge Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'download.webmin.com'
Err:12 https://packages.sury.org/php stretch Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'packages.sury.org'
Ign:13 https://deb.debian.org/debian-security stretch/updates InRelease
Ign:14 https://deb.debian.org/debian stretch-backports InRelease
Err:15 https://deb.debian.org/debian stretch Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'deb.debian.org'
Err:16 https://deb.debian.org/debian stretch-updates Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'deb.debian.org'
Err:17 https://deb.debian.org/debian-security stretch/updates Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'deb.debian.org'
Err:18 https://deb.debian.org/debian stretch-backports Release
SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'deb.debian.org'
Reading package lists... Done
E: The repository 'https://download.webmin.com/download/repository sarge Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository 'https://packages.sury.org/php stretch Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository 'https://deb.debian.org/debian stretch Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository 'https://deb.debian.org/debian stretch-updates Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository 'https://deb.debian.org/debian-security stretch/updates Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: The repository 'https://deb.debian.org/debian stretch-backports Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.


Any idea why this happens to me?
User avatar
Joulinar
Posts: 2584
Joined: Sat Nov 16, 2019 12:49 am

Re: Odroid Xu4 Apt-get update error SSL...

Post by Joulinar »

Hi,

seems you always get the following certificate name back jako2009.dynu.net but it dosn't mach to the website you are trying to open

Code: Select all

SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'download.webmin.com'
for sure this doesn't match and a SSL error is the logical consequence. But this is out of our support as DietPi did not mange one of targeted websites

is jako2009.dynu.net somehow known to you?
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
joaquinain
Posts: 9
Joined: Thu Jun 27, 2019 6:28 pm

Re: Odroid Xu4 Apt-get update error SSL...

Post by joaquinain »

Joulinar wrote: Tue Mar 24, 2020 6:01 pm Hi,

seems you always get the following certificate name back jako2009.dynu.net but it dosn't mach to the website you are trying to open

Code: Select all

SSL: certificate subject name (jako2009.dynu.net) does not match target host name 'download.webmin.com'
for sure is doesn't match and a SSL error is the logical consequence. But this is out of our support as DietPi did not mange one of targeted websites

is jako2009.dynu.net somehow know to you?
Yes this is the dyndns I use to get access from outside home my Odroid.

Any idea why this happpens?
User avatar
Joulinar
Posts: 2584
Joined: Sat Nov 16, 2019 12:49 am

Re: Odroid Xu4 Apt-get update error SSL...

Post by Joulinar »

do you use any own DNS Server like PiHole?
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
joaquinain
Posts: 9
Joined: Thu Jun 27, 2019 6:28 pm

Re: Odroid Xu4 Apt-get update error SSL...

Post by joaquinain »

Joulinar wrote: Tue Mar 24, 2020 6:15 pm do you use any own DNS Server like PiHole?
You nailed, the problem was Pihole...

...after I disabled it worked like a charm...

Thanks!!! :) :) :)
User avatar
Joulinar
Posts: 2584
Joined: Sat Nov 16, 2019 12:49 am

Re: Odroid Xu4 Apt-get update error SSL...

Post by Joulinar »

yap you would need to find out why PiHole was resolving all request to your own privat DDNS.
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
joaquinain
Posts: 9
Joined: Thu Jun 27, 2019 6:28 pm

Re: Odroid Xu4 Apt-get update error SSL...

Post by joaquinain »

Joulinar wrote: Tue Mar 24, 2020 6:26 pm yap you would need to find out why PiHole was resolving all request to your own privat DDNS.
I have set on my router instead of the DNS the IP of the Odroid so every device on my network it is under PiHole...

...maybe this is why...

I am not that expert in networks or linux...
User avatar
Joulinar
Posts: 2584
Joined: Sat Nov 16, 2019 12:49 am

Re: Odroid Xu4 Apt-get update error SSL...

Post by Joulinar »

well I don't think that this has something to do with it. I guess that's more a setting in PiHole that all DNS request are answered with same address of your DDNS. You cold perform a nslookup to see what the answer of your DNS Server/Pihole would be if you try to resolve a DNS name.
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
joaquinain
Posts: 9
Joined: Thu Jun 27, 2019 6:28 pm

Re: Odroid Xu4 Apt-get update error SSL...

Post by joaquinain »

Joulinar wrote: Tue Mar 24, 2020 6:43 pm well I don't think that this has something to do with it. I guess that's more a setting in PiHole that all DNS request are answered with same address of your DDNS. You cold perform a nslookup to see what the answer of your DNS Server/Pihole would be if you try to resolve a DNS name.
Hi sorry for taking so long to reply,

when I do a nslookup with pihole on,

the reply es like this:

Code: Select all

nslookup es.wikipedia.org
Server:         127.0.0.1
Address:        127.0.0.1#53

Name:   es.wikipedia.org
Address: 192.168.1.25
If I disable pihole I get this:

Code: Select all

nslookup es.wikipedia.org
Server:         127.0.0.1
Address:        127.0.0.1#53

Non-authoritative answer:
es.wikipedia.org        canonical name = dyna.wikimedia.org.
Name:   dyna.wikimedia.org
Address: 91.198.174.192
I don't know if I did something wrong setting up pihole, but I followed the guide for dietpi.
User avatar
trendy
Posts: 155
Joined: Tue Feb 25, 2020 2:54 pm

Re: Odroid Xu4 Apt-get update error SSL...

Post by trendy »

Something is wrong with the Pihole.
Configure your router to use a different nameserver for the hosts of the lan.
Reset pihole to defaults.
Configure Pihole and test it with one host only.
When you are satisfied with it, switch back the settings in router to use Pihole.
Post Reply