[horde] Upgrade failing

[SZÉPE Viktor]

Idézem/Quoting Jens Wahnes <wahnes at uni-koeln.de>:

> Hanns Mattes wrote:
>> pear upgrade -a -B -c horde is failing with "Error getting channel info
>> from pear.horde.org: Connection to `ssl://pear.horde.org:443' failed:"
>>
>> Any help appreciated.
>
> Like Viktor pointed out, you'll need to check your system's crypto  
> settings to find out why it won't connect to "pear.horde.org". The  
> pear.horde.org server uses a certificate issued by Let's Encrypt, so  
> you'll have to make sure that you use a fairly recent set of trusted  
> CA certificates. There was an update to the chain of trust for Let's  
> Encrypt certificates at the end of September 2021. Check if there  
> are updates for "CA" packages for your operating system.

Let's Encrypt certificates were cross signed: signed by two CA-s. One  
of them expired.

openssl x509 -in /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt  
-noout -text

> Not After : Sep 30 14:01:15 2021 GMT

Insert an exclamation mark at the beginning of line  
mozilla/DST_Root_CA_X3.crt in /etc/ca-certificates.conf
then run update-ca-certificates to take effect.



SZÉPE Viktor, webes alkalmazás üzemeltetés / Running your application
https://github.com/szepeviktor/debian-server-tools/blob/master/CV.md
~~~
ügyelet 🌶️ hotline: +36-20-4242498  sms at szepe.net  skype: szepe.viktor
Budapest, III. kerület




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6112 bytes
Desc: S/MIME Signature
URL: <https://lists.horde.org/archives/horde/attachments/20220302/619ad90d/attachment.bin>