Can't dietpi-update or even apt update Topic is solved

Having issues with your DietPi installation or found a bug? Post it here.
Post Reply
Toscho
Posts: 3
Joined: Fri Feb 05, 2021 9:31 am

Can't dietpi-update or even apt update

Post by Toscho »

I can't update my Pi3 running dietpi 6.33.3.

Running dietpi-update results in

Code: Select all

 INFO ] DietPi-Update | Checking mirror: https://raw.githubusercontent.com/MichaIng/DietPi/master/dietpi/server_version-6
curl: (60) SSL certificate problem: unable to get local issuer certificate
and

Code: Select all

[ INFO ] DietPi-Update | Checking mirror: https://dietpi.com/downloads/dietpi-update_mirror/master/server_version-6
curl: (60) SSL certificate problem: unable to get local issuer certificate
If I run apt update, I get:

Code: Select all

Err:4 https://archive.raspberrypi.org/debian buster Release 
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 176.126.240.167 443]
If I ping archive.raspberrypi.org from my laptop, it yields the IP 46.235.227.39 instead of 176.126.240.167 .

So what can I do here?
User avatar
Joulinar
Posts: 3688
Joined: Sat Nov 16, 2019 12:49 am

Re: Can't dietpi-update or even apt update

Post by Joulinar »

Hi,

are you behind a proxy or firewall that could block SSL handling?


Btw: archive.raspberrypi.org is a DNS pointing to a larger group of servers. means it's ok to have different IP's listed

https://mxtoolbox.com/SuperTool.aspx?ac ... n=toolpage
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
Toscho
Posts: 3
Joined: Fri Feb 05, 2021 9:31 am

Re: Can't dietpi-update or even apt update

Post by Toscho »

No, there is no Firewall blocking SSL Handling. The raspi itself is offering SSL for https, imaps and smtps.

OK, so the different IPs mean nothing. Then it looks as though some package is damaged, which is difficult to repair as apt itself is not working properly.
Toscho
Posts: 3
Joined: Fri Feb 05, 2021 9:31 am

Re: Can't dietpi-update or even apt update

Post by Toscho »

OK, so I found the issue. Somehow the installed ca-certificates were damaged. Apt told me to install ca-certificates, which was already installed. Dumb as I am, I first trusted this message. Now I reinstalled the package and everythings works normal.
User avatar
Joulinar
Posts: 3688
Joined: Sat Nov 16, 2019 12:49 am

Re: Can't dietpi-update or even apt update

Post by Joulinar »

indeed having a damaged ca-certificates package is a good reason for not being able to verify certificates.
Pls let us know if a solution is working. This could help others if they hit by similar situation. Your DietPi Team
Post Reply