On Thu, 04 Nov 2021 21:55:02 +0000 potlatch via tor-relays tor-relays@lists.torproject.org wrote:

Wondering if my tor.list has a typo since I can't upgrade Tor 0.4.5.9.  I get error: Err:1 https://deb.torproject.org/torproject.org stretch/main amd64 tor-geoipdb all 0.4.5.10-1~d9.stretch+1   server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none I have debian 9 installed.  Can someone turn on the light for me?

Hello,

It is this issue: https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

For a workaround, run:

dpkg-reconfigure ca-certificates

Answer whatever you like to the first question (about new certificates), then on the second screen find "mozilla/DST_Root_CA_X3.crt", unmark it by pressing Space and hit Enter to save.