Issue with deb.devuan.org?

Marjorie · 2020-04-01 16:13:13

At present I can't seem to access deb.devuan.org to refresh my synaptic cache.

And trying to access the site using Firefox-esr I get a certificate error, saying that the certificate is only good for sledjhamr.org.

Acessing devuan.org and beta.devuan.org on Firefox-esr is fine.

Is the problem at my end or wiith deb.devuan.org?

Last edited by Marjorie (2020-04-01 16:13:42)

xinomilo · 2020-04-01 16:32:27

you are probably using it with https://. switch back to http://deb.devuan.org , or use a specific https mirror

Marjorie · 2020-04-01 16:37:28

Hi,

No I'm not using https://.

The repository list is unchanged from when it was working yesterday.

I realise that I can switch to another mirror, and may do that now, but I thought I ought to flag up the issue, since this is the recommended mirror.

And that doesn't explain the web certificate issue.

Last edited by Marjorie (2020-04-01 16:39:07)

xinomilo · 2020-04-01 16:49:27

i can open http://deb.devuan.org with firefox-esr without errors/certs. only https presents errors which is normal. (maybe a https-anywhere plugin or something else like web cache/other? )
did you try to ping/dig deb.devuan.org from a terminal?
as root : apt update ?

Last edited by xinomilo (2020-04-01 16:50:32)

Marjorie · 2020-04-01 16:57:41

OK, it's working again now, using synaptic.

However still getting the SSL server certificate error however (it's a free Lets Encrypt Cert).
Is it just one of the sysops setting it up wrong, and reusing another certificate?

Last edited by Marjorie (2020-04-01 16:58:04)

rolfie · 2020-04-01 17:15:16

No issues, neither apt update, synaptics nor access to the websites via firefox-esr using http.

rolfie

Last edited by rolfie (2020-04-01 18:00:30)

Marjorie · 2020-04-01 17:56:29

When I switch Https Everywhere off I can see the Index page on http:/deb.devuan.org.

Still odd about the SSL Server Certificate being wrong though (of course http doesn't have a certificate).

i assume my original problem was because there was a short outage, which is now fixed.

onefang · 2020-04-02 01:26:56

I'm both the owner of sledjhamr.org and one of the Devuan mirror system admins.

The name deb.devuan.org is a DNS round robin, which means that when you try to access it you will be sent to one of the mirrors that are part of it. None of those mirrors have a HTTPS certificate that matches "deb.devuan.org", but likely have their own HTTPS certificate, due to the security issues involved in letting lots of people have a copy of a security certificate. So all use of deb.devuan.org must be done via HTTP, as using HTTPS will result in the errors you have seen.

If you do wish to use HTTPS, you should instead directly use one of the mirrors that supports HTTPS. https://pkgmaster.devuan.org/mirror_list.txt lists all the mirrors, and what protocols they support.

I am also the author of apt-panopticon, a script that regularly checks the health of the entire Devuan mirror system. The results of that script are currently available on two servers. https://borta.devuan.dev/apt-panopticon … t-web.html which checks the mirrors once an hour, though is currently having timeout problems which are being investigated. https://sledjhamr.org/apt-panopticon/re … t-web.html which checks every ten minutes.

With large parts of the world working from home as part of COVID-19 lockdowns, the Internet is being used more than is usual. So there tends to be more random network issues. Any particular network issue might be at your end, at the other end, or somewhere in between.

It's good to see your issue fixed itself.

Marjorie · 2020-04-02 12:46:03

Onefang, thanks for the excellent clarification.

Sometime I just get a bit paranoid and maybe I should switch to a https mirror.

I used to use the more specific, if still http, gb.deb.devuan.org until that was deprecated and we were recommended to use deb.devuan.org.

Maybe a disclaimer in the documentation about its load-sharing round-robin nature would help.

Last edited by Marjorie (2020-04-02 12:46:51)

golinux · 2020-04-02 13:30:33

Marjorie wrote:

Onefang, thanks for the excellent clarification.
Sometime I just get a bit paranoid and maybe I should switch to a https mirror.
I used to use the more specific, if still http, gb.deb.devuan.org until that was deprecated and we were recommended to use deb.devuan.org.
Maybe a disclaimer in the documentation about its load-sharing round-robin nature would help.

Documentation covering all those points is (and has been) on the website, in the installer and now also stickied here:

Index
» Documentation
» Devuan package mirrors, deb.devuan.org, HTTPS, and mirror monitoring

Marjorie · 2020-04-02 14:08:27

Thanks GoLinux and OneFang, Excellent.

I just need to RTFM in future.

The officially official Devuan Forum!

#1 2020-04-01 16:13:13

Issue with deb.devuan.org?

#2 2020-04-01 16:32:27

Re: Issue with deb.devuan.org?

#3 2020-04-01 16:37:28

Re: Issue with deb.devuan.org?

#4 2020-04-01 16:49:27

Re: Issue with deb.devuan.org?

#5 2020-04-01 16:57:41

Re: Issue with deb.devuan.org?

#6 2020-04-01 17:15:16

Re: Issue with deb.devuan.org?

#7 2020-04-01 17:56:29

Re: Issue with deb.devuan.org?

#8 2020-04-02 01:26:56

Re: Issue with deb.devuan.org?

#9 2020-04-02 12:46:03

Re: Issue with deb.devuan.org?

#10 2020-04-02 13:30:33

Re: Issue with deb.devuan.org?

#11 2020-04-02 14:08:27

Re: Issue with deb.devuan.org?

Board footer