Certificate verification failed: The certificate is NOT trusted.

[vermaden]

Hi,

I just wanted to upgrade the 'chroot' and got this issue.

laptop % doas ./linux-browser-installer chroot upgrade
/bin/bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
Hit:1 http://archive.ubuntu.com/ubuntu focal InRelease
Ign:2 https://dl.google.com/linux/chrome/deb stable InRelease
Hit:3 http://archive.ubuntu.com/ubuntu focal-updates InRelease
Hit:4 http://archive.ubuntu.com/ubuntu focal-security InRelease
Err:5 https://dl.google.com/linux/chrome/deb stable Release
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 142.251.36.46 443]
Reading package lists... Done                  
W: https://dl.google.com/linux/chrome/deb/dists/stable/InRelease: No system certificates available. Try installing ca-certificates.
W: https://dl.google.com/linux/chrome/deb/dists/stable/Release: No system certificates available. Try installing ca-certificates.
E: The repository 'https://dl.google.com/linux/chrome/deb stable Release' no longer has a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
laptop % 

My fix that solved the problem:

1. Go here and copy link for the most up to date package:

• http://security.ubuntu.com/ubuntu/pool/main/c/ca-certificates/?C=M;O=D

2. Issue these commands:

laptop % doas chroot /compat/ubuntu /bin/bash
chroot # wget --no-check-certificate http://security.ubuntu.com/ubuntu/pool/main/c/ca-certificates/ca-certificates_20230311ubuntu0.23.04.1_all.deb
chroot # dpkg -r --force-depends ca-certificates
chroot # dpkg -i ca-certificates_20230311ubuntu0.23.04.1_all.deb 
chroot # apt update

3. Run upgrade as usual.

laptop % doas ./linux-browser-installer chroot upgrade

Not sure if it a bug - but reporting here the solution that may help someone.

Regards,
vermaden

[mrclksr]

Hi @vermaden,

this should be fixed since 00ad913. Did you pull the latest commit(s)?

[vermaden]

Hi,

I used the git clone https://github.com/mrclksr/linux-browser-installer.git version from the time just before the issue :)

We can close the issue if its already fixed of course.

Regards,
vermaden

[mrclksr]

Hi,

I used the git clone https://github.com/mrclksr/linux-browser-installer.git version from the time just before the issue :)

We can close the issue if its already fixed of course.

Regards, vermaden

Ah, okay :) I'm glad it's not a new problem.