On Thu, 04 Nov 2021 21:55:02 +0000 potlatch via tor-relays tor-relays@lists.torproject.org wrote:
Wondering if my tor.list has a typo since I can't upgrade Tor 0.4.5.9. I get error: Err:1 https://deb.torproject.org/torproject.org stretch/main amd64 tor-geoipdb all 0.4.5.10-1~d9.stretch+1 server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none I have debian 9 installed. Can someone turn on the light for me?
Hello,
It is this issue: https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
For a workaround, run:
dpkg-reconfigure ca-certificates
Answer whatever you like to the first question (about new certificates), then on the second screen find "mozilla/DST_Root_CA_X3.crt", unmark it by pressing Space and hit Enter to save.