FS#4209 - opkg invalid SSL certificate issue on FriendlyARM NanoPi R4S 4GB EXT4 snapshot r18404-236c3ea730

[openwrt-bot]

rexbinary:

opkg will not update or install packages after installing FriendlyARM NanoPi R4S 4GB EXT4 snapshot r18404-236c3ea730. The included SSL certificate is invalid. See output below:

root@OpenWrt:~# opkg update
Downloading https://downloads.openwrt.org/snapshots/targets/rockchip/armv8/packages/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/snapshots/targets/rockchip/armv8/packages/Packages.gz

Downloading https://downloads.openwrt.org/snapshots/packages/aarch64_generic/base/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/snapshots/packages/aarch64_generic/base/Packages.gz

Downloading https://downloads.openwrt.org/snapshots/targets/rockchip/armv8/kmods/5.10.87-1-78061f7b1147755d248e0158e056315e/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/snapshots/targets/rockchip/armv8/kmods/5.10.87-1-78061f7b1147755d248e0158e056315e/Packages.gz

Downloading https://downloads.openwrt.org/snapshots/packages/aarch64_generic/luci/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/snapshots/packages/aarch64_generic/luci/Packages.gz

Downloading https://downloads.openwrt.org/snapshots/packages/aarch64_generic/packages/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/snapshots/packages/aarch64_generic/packages/Packages.gz

Downloading https://downloads.openwrt.org/snapshots/packages/aarch64_generic/routing/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/snapshots/packages/aarch64_generic/routing/Packages.gz

Downloading https://downloads.openwrt.org/snapshots/packages/aarch64_generic/telephony/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/snapshots/packages/aarch64_generic/telephony/Packages.gz

Collected errors:

• opkg_download: Failed to download https://downloads.openwrt.org/snapshots/targets/rockchip/armv8/packages/Packages.gz, wget returned 5.
• opkg_download: Failed to download https://downloads.openwrt.org/snapshots/packages/aarch64_generic/base/Packages.gz, wget returned 5.
• opkg_download: Failed to download https://downloads.openwrt.org/snapshots/targets/rockchip/armv8/kmods/5.10.87-1-78061f7b1147755d248e0158e056315e/Packages.gz, wget returned 5.
• opkg_download: Failed to download https://downloads.openwrt.org/snapshots/packages/aarch64_generic/luci/Packages.gz, wget returned 5.
• opkg_download: Failed to download https://downloads.openwrt.org/snapshots/packages/aarch64_generic/packages/Packages.gz, wget returned 5.
• opkg_download: Failed to download https://downloads.openwrt.org/snapshots/packages/aarch64_generic/routing/Packages.gz, wget returned 5.
• opkg_download: Failed to download https://downloads.openwrt.org/snapshots/packages/aarch64_generic/telephony/Packages.gz, wget returned 5.

root@OpenWrt:~# wget https://downloads.openwrt.org/snapshots/packages/aarch64_generic/routing/Packages.gz
Downloading 'https://downloads.openwrt.org/snapshots/packages/aarch64_generic/routing/Packages.gz'
Connecting to 168.119.138.211:443
Connection error: Invalid SSL certificate

[openwrt-bot]

svlobanov:

Could you please provide more details? Which wget? (Busybox or full). Which ssl library is used?
Are you able to download from another https sites?

[openwrt-bot]

rexbinary:

Hi, as far as which wget and ssl library it would be it is whatever was included with the snapshot since I was unable to download or install any packages. Yes, all the openwrt packages would download from a different device, but I did not test downloading non openwrt https files from the device.

This was an issue on a number of daily snapshots. I gave up for a bit, but it seems to be resolved starting with the snapshot for 12/30/21. I haven't installed a snapshot since 1/1/21, but it was working fine. We can probably close this unless anyone else is reporting a similar issue.

Thanks!