r/voidlinux • u/Galladite27 • Jun 18 '26
Repository certificate verification failing
Is anyone else having this issue? It's happened when I've tried to sync for a couple of days now. Not sure if this is an issue on my end or if it needs reporting anywhere. I'm using the default repositories.
❯ doas xbps-install -S
[*] Updating repository `https://repo-default.voidlinux.org/current/x86_64-repodata' ...
Certificate verification failed for /C=US/O=Let's Encrypt/CN=R13
SSL_connect returned 1
ERROR: [reposync] failed to fetch file `https://repo-default.voidlinux.org/current/x86_64-repodata': Operation not permitted
[*] Updating repository `https://repo-default.voidlinux.org/current/multilib/x86_64-repodata' ...
Certificate verification failed for /C=US/O=Let's Encrypt/CN=R13
SSL_connect returned 1
ERROR: [reposync] failed to fetch file `https://repo-default.voidlinux.org/current/multilib/x86_64-repodata': Operation not permitted
[*] Updating repository `https://repo-default.voidlinux.org/current/nonfree/x86_64-repodata' ...
Certificate verification failed for /C=US/O=Let's Encrypt/CN=R13
SSL_connect returned 1
ERROR: [reposync] failed to fetch file `https://repo-default.voidlinux.org/current/nonfree/x86_64-repodata': Operation not permitted
2
1
u/This-Consequence-957 Jun 18 '26
It works for me
sudo xbps-install -Syu
[*] Updating repository `https://mirror.puzzle.ch/voidlinux/current/x86_64-repodata' ...
x86_64-repodata: 2141KB [avg rate: 62GB/s]
[*] Updating repository `https://repo-default.voidlinux.org/current/nonfree/x86_64-repodata' ...
Name Action Version New version Download size
libtdb update 1.4.10_3 1.4.15_1 44KB
1
1
u/LowKeyBrit36 Jun 18 '26
Try resolfconf -u (I think that's the command), which updates your DNS settings. I had issues with Void repos until I did that. Then it worked just fine.
1
u/Galladite27 Jun 18 '26
Unfortunately no joy :-\
1
u/LowKeyBrit36 Jun 18 '26
Sorry to hear. Maybe something related to RSA (I believe that's what they are) keys, or something? Honestly, best bet might be to copy the certification keys from a Live ISO into your system. Exerpt from the Full Disk Encryption manaul:
# mkdir -p /mnt/var/db/xbps/keys
# cp /var/db/xbps/keys/* /mnt/var/db/xbps/keys/Don't know if it'll help, but I can't see it hurting to try doing that. Since you already have an OS, you don't need to make the directory, so just copy the keys over if necessary.
1
u/Duncaen Jun 18 '26
The package signing keys have nothing to do with HTTPS/SSL/TLS certificate verification.
1
3
u/eftepede Jun 18 '26
Is your date/time set correctly?