bonjour
depuis deux jours sur un serveur KS impossible d'acceder au depot packages.sury.org
j'ai ce msg d'erreur
Ign:18 https://packages.sury.org/php stretch/main Translation-en
Lecture des listes de paquets… Fait
W: The repository 'https://packages.sury.org/php stretch Release' does not have a Release file.
j'ai reinstallé ca-certificates, apt-transport-https, etc…les clefs pgp sont bonnes et les certificats a jour
meme si je change les depots debian je ne peux y acceder.
https://deb.debian.org/debian (c'est la nouvelle adresse par défaut)
meme erreur
merci d'avance pour votre aide
Bonjour,
Voilà de que j'ai et cela fonctionne bien
deb https://packages.sury.org/php/ stretch main
merci pour votre reponse
j'ai exactement le meme depot mais
apt-get update me renvoie une erreur
> Ign:8 httpackages.sury.org/php stretch/main amd64 Packages
> Ign:10 htpackages.sury.org/php stretch/main Translation-en
> Ign:11 hpackages.sury.org/php stretch/main Translation-fr
> Ign:6 httpackages.sury.org/php stretch/main all Packages
> Err:8 htpackages.sury.org/php stretch/main amd64 Packages
> server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
> Ign:10 htt/packages.sury.org/php stretch/main Translation-en
> Ign:11 http/packages.sury.org/php stretch/main Translation-fr
> Fetched 93.6 kB in 1s (51.4 kB/s)
> Reading package lists… Done
> W: The repository 'htt/packages.sury.org/php stretch Release' does not have a Release file.
> N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
> N: See apt-secure(8) manpage for repository creation and user configuration details.
> E: Failed to fetch htt/packages.sury.org/php/dists/stretch/main/binary-amd64/Packages server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
> E: Some index files failed to download. They have been ignored, or old ones used instead.
et maintenant toutes autres adresses de depot me renvoie cette erreur
htt/packages.sury.org
Tu es sur de tes fichiers sources.list ?
Tu peux les donner ?
Il y a ça aussi
> server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
desolé pour les adresses j'ai du les tronquer car je ne peux mettre plus de 2 adresses ds le message
fichier php.list
` deb https://packages.sury.org/php/ stretch main`
fichier ca-certificates
root@:/etc/apt/sources.list.d# apt show ca-certificates
Package: ca-certificates
Version: 20200601~deb9u1
Priority: optional
Section: misc
Maintainer: Michael Shuler pbandjelly.org>
Installed-Size: 389 kB
Depends: openssl (>= 1.0.0), debconf (>= 0.5) | debconf-2.0
Breaks: ca-certificates-java (<< 20121112+nmu1)
Enhances: openssl
Tag: protocol::ssl, role::app-data, security::authentication
Download-Size: 160 kB
APT-Manual-Installed: yes
APT-Sources: http://httpredir.debian.org/debian stretch/main amd64 Packages
Description: Common CA certificates
Contains the certificate authorities shipped with Mozilla's browser to allow
SSL-based applications to check for the authenticity of SSL connections.
/etc/ssl/certs/ca-certificates.crt
nano /etc/ssl/certs/ca-certificates.crt me renvoie:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Il semble y avoir un problème avec le certif / apt-transport-https
Jamais rencontré ce cas de figure 
`curl https://packages.sury.org/php/apt.gpg | apt-key add -`
Ça donne quoi ?
curl https://packages.sury.org/php/apt.gpg | apt-key add -
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 1769 100 1769 0 0 21227 0 --:--:-- --:--:-- --:--:-- 21313
OK
et maintenant
`apt update`
aptitude update
Hit http://nginx.org/packages/debian stretch InRelease
Ign http://httpredir.debian.org/debian stretch InRelease
Hit http://httpredir.debian.org/debian stretch-updates InRelease
Hit http://httpredir.debian.org/debian stretch Release
Ign https://packages.sury.org/php stretch InRelease
Err https://packages.sury.org/php stretch Release
server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
E: The repository 'https://packages.sury.org/php stretch Release' does not have a Release file.
E: Failed to download some files
W: Failed to fetch https://packages.sury.org/php/dists/stretch/Release: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
E: Some index files failed to download. They have been ignored, or old ones used instead.
j'ai aussi changé les droits sur ca-certificates.crt
chmod 777 pr etre sur…bizarrement il etait 644
j'ai aussi changé les droits sur ca-certificates.crt
chmod 777 pr etre sur....bizarrement il etait 644
C'est pareil chez moi, tu devrai les remettre comme ils étaient
A ce stade j'essaierai de remplacer le certificat avec peut être
`apt install --reinstall ca-certificates`
apt install --reinstall ca-certificates
fait et ca aussi apt install --reinstall apt-transport-https
mais pareil reponse a apt update
Hit:1 http://nginx.org/packages/debian stretch InRelease
Ign:2 http://httpredir.debian.org/debian stretch InRelease
Hit:3 http://httpredir.debian.org/debian stretch-updates InRelease
Hit:4 http://httpredir.debian.org/debian stretch Release
Ign:5 https://packages.sury.org/php stretch InRelease
Err:6 https://packages.sury.org/php stretch Release
server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
Reading package lists... Done
E: The repository 'https://packages.sury.org/php stretch Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
merci de ton aide
bizarrement pour openssl il ne veut pas le reinstaller
apt install --reinstall openssl
Reading package lists… Done
Building dependency tree
Reading state information… Done
Reinstallation of openssl is not possible, it cannot be downloaded.
The following package was automatically installed and is no longer required:
linux-image-3.16.0-4-amd64
Use 'apt autoremove' to remove it.
0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
root@:/etc/ssl/certs# openssl version
OpenSSL 1.1.1g 21 Apr 2020
root@:/etc/ssl/certs# apt-cache policy openssl
openssl:
Installed: 1.1.1g-1+0~20200421.17+debian9~1.gbpf6902f
Candidate: 1.1.1g-1+0~20200421.17+debian9~1.gbpf6902f
Version table:
*** 1.1.1g-1+0~20200421.17+debian9~1.gbpf6902f 100
100 /var/lib/dpkg/status
1.1.0l-1~deb9u1 500
500 http://httpredir.debian.org/debian stretch/main amd64 Packages
peut etre bloquer par le serveur
La Stretch qui est dessus à été installé ou c'est une dist-upgrade d'une Jessie ?
Avec le debug on va peut être percuter, que donne :
`apt -o Debug::pkgProblemResolver=true -o Debug::Acquire::https=true update`
Edit : tu as bien remis les droits ?
`chmod 644 /etc/ssl/certs/ca-certificates.crt`
chmod 644 /etc/ssl/certs/ca-certificates.crt
oui c'est bon
je pense que c'est une dist-upgrade d'une jessie
apt -o Debug::pkgProblemResolver=true -o Debug::Acquire::https=true update
0% [Working]* Trying 2606:4700:3032::681f:5fa9...
* TCP_NODELAY set
Hit:1 http://nginx.org/packages/debian stretch InRelease
0% [1 InRelease gpgv 2866 B] [Connecting to httpredir.debian.org]* Connected to packages.sury.org (2606:4700:3032::681f:5fa9) port 443 (#0)
* found 128 certificates in /etc/ssl/certs/ca-certificates.crt
* found 515 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
Ign:2 http://httpredir.debian.org/debian stretch InRelease
0% [1 InRelease gpgv 2866 B]* SSL connection using TLS1.2 / ECDHE_ECDSA_CHACHA20_POLY1305
* server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
* Curl_http_done: called premature == 1
* stopped the pause stream!
* Closing connection 0
Hit:3 http://httpredir.debian.org/debian stretch-updates InRelease
Ign:4 https://packages.sury.org/php stretch InRelease
0% [1 InRelease gpgv 2866 B] [Waiting for headers]* Hostname packages.sury.org was found in DNS cache
* Trying 2606:4700:3032::681f:5fa9...
* TCP_NODELAY set
Hit:5 http://httpredir.debian.org/debian stretch Release
0% [1 InRelease gpgv 2866 B]* Connected to packages.sury.org (2606:4700:3032::681f:5fa9) port 443 (#1)
* found 128 certificates in /etc/ssl/certs/ca-certificates.crt
0% [3 InRelease gpgv 93.6 kB]* found 515 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / ECDHE_ECDSA_CHACHA20_POLY1305
* server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
* Curl_http_done: called premature == 1
* stopped the pause stream!
* Closing connection 1
Err:6 https://packages.sury.org/php stretch Release
server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
Reading package lists... Done
E: The repository 'https://packages.sury.org/php stretch Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
La différence avec chez moi c'est que tu requêtes en IP V6
Chez moi ça donne ça
`Connected to packages.sury.org (104.31.94.169) port 443 (#0)`
Ça pourrait être un problème de cache DSN aussi.
Je sèche un peu …
Bonjour,
vous avez essayé en désactivant IPv6 temporairement ?
Sinon c'est pas un problème de cache DNS vu les erreur mais plutôt une erreur de communication avec les dépôts.
Cordialement, janus57
La personne utilise quel offre ?
Cordialement,
Le fondateur de KADH
Contactez-moi en cas de problème technique au : support@kadh.fr
merci pour votre aide
je vais tester en desactivant l'ipv6
concernant l'offre c'est un serveur kimsufi KS-3C - i3-2130 - 8GB - 1x2To