Installing Debian repository throws certificate verify error

This forum is for all inquiries relating to the installation of OpenVPN from source and with binaries.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
Post Reply
FrankAmsterdam
OpenVpn Newbie
Posts: 2
Joined: Thu Mar 12, 2015 10:28 am

Installing Debian repository throws certificate verify error

Post by FrankAmsterdam » Thu Mar 12, 2015 10:39 am

I try to install the Debian/Ubuntu repository, but it fails. I'm using this manual on https://community.openvpn.net/openvpn/w ... twareRepos. I want to install OpenVPN Community Edition as a client on Ubuntu 14.04 LTS.

Command:

Code: Select all

wget -O - https://swupdate.openvpn.net/repos/repo-public.gpg|apt-key add -
Error:

Code: Select all

--2015-03-12 11:04:50--  https://swupdate.openvpn.net/repos/repo-public.gpg
Resolving swupdate.openvpn.net (swupdate.openvpn.net)... 173.192.224.173, 96.44.184.130
Connecting to swupdate.openvpn.net (swupdate.openvpn.net)|173.192.224.173|:443... connected.
ERROR: cannot verify swupdate.openvpn.net's certificate, issued by ‘/C=US/ST=Arizona/L=Scottsdale/O=Starfield Technologies, Inc./OU=http://certs.starfieldtech.com/repository//CN=Starfield Secure Certificate Authority - G2’:
  Issued certificate has expired.
To connect to swupdate.openvpn.net insecurely, use `--no-check-certificate'.
I don't know how to use the "--no-check-certificate" when installing. Could someone help me out?

User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: Installing Debian repository throws certificate verify e

Post by Traffic » Fri Mar 13, 2015 11:54 am

The administrators of the repos have been informed (hopefully) the certificate will be updated soon.

FrankAmsterdam
OpenVpn Newbie
Posts: 2
Joined: Thu Mar 12, 2015 10:28 am

Re: Installing Debian repository throws certificate verify e

Post by FrankAmsterdam » Fri Mar 13, 2015 6:19 pm

Thank you for the update. Yeah, it's better to do it the official way through a proper working repository. I'll wait patiently.

Is it done already? :roll:

Post Reply