Hi there,

I have an issue with my Froxlor Installation.

My current version is 0.10.22-1. First I noticed on the admin panel that the version check fails with "Version-check currently unavailable, please try again later"

After that, I tried to upgrade froxlor by "apt-get update" / "apt-get upgrade". I got the following error from the froxlor packages:

Err:8 https://debian.froxlor.org stretch/main amd64 Packages
   server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
[...]
W: The repository 'https://debian.froxlor.org stretch Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.

As you can see, I have a certification error and the strange message that there is no release file for Froxlor stretch.

The following I have tried without success:

1. Reinstalling the Froxlor Public key with 

apt-key adv --keyserver pgp.mit.edu --recv-key FD88018B6F2D5390D051343FF6B4A8704F9E9BBC

2. Reinstalled all CA-Certificates with

sudo apt-get install --reinstall ca-certificates

3. Ensured, that all required packages are installed (e.g. apt-transport-https)

4. Checked the Froxlor certificate with

openssl s_client -connect debian.froxlor.org:https

Result:

CONNECTED(00000003)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = debian.froxlor.org
verify return:1
---
Certificate chain
 0 s:CN = debian.froxlor.org
   i:C = US, O = Let's Encrypt, CN = R3
 1 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
 2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   i:O = Digital Signature Trust Co., CN = DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIGQjCCBS [..deleted lines..] Jpw==
-----END CERTIFICATE-----

Can anybody help me?

Thank you in advance,

Christian

Do you still receive the

server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

message when trying to update the repos?

4 minutes ago, cheinz71 said:

My current version is 0.10.22-1. First I noticed on the admin panel that the version check fails with "Version-check currently unavailable, please try again later"

that must've been temporary, see https://version.froxlor.org/0.10.22/pretty (froxlor reads the input from this url without the /pretty part)

Or possibly the same ssl issue here (as the certificates are all let's encrypt)

Hi Doop,

I do not have any repository. It's a V-Server from netcup which comes with Froxlor out-of-the-box.

The last system update failed with froxlor and I had to change the URL in the froxlor.list , which is now

deb https://debian.froxlor.org stretch main

I posted my question in the netcup Forum and got a lot of help but nothing worked. 

I never touched the froxlor installation on my server and used the web frontend, also for updates. I did the system update/upgrade procedure regularly but the last one was about 1/6 year ago, embarrassingly.

 

Well, you can just login as admin and click on "autoupdate" on the leftside menu? It's no problem at all, the updates are all backward-compatible. 

 

No, using the leftside menu brings the error: Version-check currently unavailable, please try again later

I also assume the certificate error is the root cause.

yes it really seems so. Well then for now, manual update -> https://github.com/Froxlor/Froxlor/wiki/Updating-Froxlor

But consider upgrading your debian distro soon 

Thank you, I will give it a try. However, the distro update makes sense 😉

if you need any suppport there...just let me know - I've done that a few times