Re: Emacs mirror on Emba stalled

[Michael Albinus]

Lars Ingebrigtsen <larsi@gnus.org> writes:

Hi Lars,

>> mirroring the Emacs git repo seems to be stalled on emba. Running
>> /root/mirror-emacs.sh manually results in
>>
>> <13>Oct  2 03:33:17 mirror-emacs.sh: Fetching origin
>> <13>Oct  2 03:33:17 mirror-emacs.sh: fatal: unable to access 
>> 'https://git.savannah.gnu.org/git/emacs.git/': server certificate 
>> verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
>> <13>Oct  2 03:33:17 mirror-emacs.sh: error: Could not fetch origin
>>
>> Could somebody pls have a look on this? I have no idea how to fix this.
>
> Could this be related to half the internet erroring out yesterday
> because of the Let's Encrypt root certificate timing out?

Likely. Somehow, I didn't notice that "The Internet" was down
yesterday. Looks like I use only the other half of it.

> One of a million threads about it:
>
> https://stackoverflow.com/questions/69404785/rails-ssl-certificate-error-on-valid-certificate
>
> Perhaps somebody's tried to fix it and removed too many certificates?

Not on emba.gnu.org:

--8<---------------cut here---------------start------------->8---
root@emba:~# ll /etc/ssl/certs/ca-certificates.crt
-rw-r--r-- 1 root root 196K Feb  3  2021 /etc/ssl/certs/ca-certificates.crt
--8<---------------cut here---------------end--------------->8---

I've commented out mozilla/DST_Root_CA_X3.crt in
/etc/ca-certificates.conf, reran "sudo update-ca-certificates", and now
everything is back to normal.

Thanks you for the hint!

Best regards, Michael.