Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can not install Docker on Ubuntu 16.04 (Xenial) due to server verification #23315

Closed
jianghaitao opened this Issue Jun 6, 2016 · 13 comments

Comments

Projects
None yet
9 participants
@jianghaitao
Copy link

commented Jun 6, 2016

I was following the instruction on https://docs.docker.com/engine/installation/linux/ubuntulinux/ for Ubuntu 16.04. After add entry to /etc/apt/sources.list.d/docker.list and run apt-get update, I got

W: The repository 'https://apt.dockerproject.org/repo ubuntu-xenial Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch https://apt.dockerproject.org/repo/dists/ubuntu-xenial/main/binary-amd64/Packages  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
E: Some index files failed to download. They have been ignored, or old ones used instead.

The installation is behind a firewall and I have the http_proxy and https_proxy set, and I can reach out to the Internet.

# ls -l /etc/ssl/certs/ca-certificates.crt 
-rw-r--r-- 1 root root 274340 Jun  6 17:12 /etc/ssl/certs/ca-certificates.crt

Any help is highly appreciated.

@thaJeztah

This comment has been minimized.

Copy link
Member

commented Jun 6, 2016

The certificates were recently replaced with new ones, because they were about to expire, could it be that a proxy server pinned the old certificate, and therefore refuses the new one?

@jianghaitao

This comment has been minimized.

Copy link
Author

commented Jun 6, 2016

Possibly. How do I check and update? Thanks.

@thaJeztah

This comment has been minimized.

Copy link
Member

commented Jun 6, 2016

Good question. I was just thinking out loud, because I know the certificates were recently updated (in case it helped you further), but I don't know how to help you further than that 😊

@jianghaitao

This comment has been minimized.

Copy link
Author

commented Jun 6, 2016

@thaJeztah thanks. Just for the record, I have run following before hitting the issue

# apt-get install -y -q apt-transport-https ca-certificates
Reading package lists...
Building dependency tree...
Reading state information...
ca-certificates is already the newest version (20160104ubuntu1).
apt-transport-https is already the newest version (1.2.12~ubuntu16.04.1).
0 upgraded, 0 newly installed, 0 to remove and 14 not upgraded.
@thaJeztah

This comment has been minimized.

Copy link
Member

commented Jun 6, 2016

Is this a corporate proxy you're behind? It's possible that there's a "man in the middle" proxy that replaces certificates. This answer may give some info http://stackoverflow.com/a/21181447/1811501

@HackToday

This comment has been minimized.

Copy link
Contributor

commented Jun 8, 2016

I am thinking even we behind firewall or proxy, the install would still be OK. But not sure if different proxy mechanism could cause different issue, like this one. so glad to know any clue for that

@richteelbah

This comment has been minimized.

Copy link

commented Jun 21, 2016

Thanks, I switched to my mobile hotspot and tried again and was able to get past the error. For me, the issue was apparently a corporate proxy server.

@Starkmann

This comment has been minimized.

Copy link

commented Mar 1, 2017

On my machine 16.04 ubuntu is was able ti fix this issue with:
sudo apt-get install --reinstall ca-certificates

@caffeineaddiction

This comment has been minimized.

Copy link

commented Oct 31, 2017

On my machine I was able to fix this issue with:
sudo apt-get install apt-transport-https

@thaJeztah

This comment has been minimized.

Copy link
Member

commented Oct 31, 2017

I haven't heard others report this, and it doesn't look like a bug, so closing this issue

@thaJeztah thaJeztah closed this Oct 31, 2017

@alijawadfahs

This comment has been minimized.

Copy link

commented Mar 9, 2018

as simple as it may sound but also check the time, for me the NTP was not configured and the time wrong and the certificates were not trusted.

@jrzhao

This comment has been minimized.

Copy link

commented Mar 22, 2018

hit the same issue on ubuntu 16 when launching apt-get update:
Failed to fetch https://apt.dockerproject.org/repo/dists/ubuntu-xenial/main/binary-amd64/Packages server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none E: Some index files failed to download. They have been ignored, or old ones used instead.

tried all the workaround above -- not work either. Any other good idea is appreciated.

@mohantysubhendu

This comment has been minimized.

Copy link

commented Aug 24, 2018

@jrzhao did you get the solution ?
I am also unable to fix the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.