Certificate Issues on Ubuntu 22.04 with 24.x

[Joachim Meyer]

Hi all,

a few days ago (maybe weeks by now), I started having issues with apt on
Ubuntu 22.04 complaining about failed certificate verification for the
HTCondor 24.x repos.

As far as I can tell the key hasn't changed - setting up the repo with
fetching the key also doesn't change anything.

Err:23 https://research.cs.wisc.edu/htcondor/repo/ubuntu/24.x jammy/main
amd64 condor amd64 24.12.21-1+ubu22
  Certificate verification failed: The certificate is NOT trusted. The
certificate issuer is unknown.  Could not handshake: Error in the
certificate verification. [IP: 128.105.7.77 443]

Has anything changed on the repo side?

Best,
- Joachim Meyer

[Tim Theisen]

Hello Joachim,

Nothing has changed recently with the repositories. However, I do have a
couple of suggestions.

Back in September, we moved our repositories to a new server. There is a
redirect in place and the seems to work seamlessly. The new URL for the
repository is:

    https://htcss-downloads.chtc.wisc.edu/repo/ubuntu/24.x/

Previously, the key file added such that the HTCondor key was globally
accessible to apt. However, that was deemed a security issue. At some
point, Ubuntu started to require that one specifies which key goes to
which repository. We do that in the repository definition file:

https://htcss-downloads.chtc.wisc.edu/repo/ubuntu/htcondor-24.x-jammy.list

# HTCondor repository for the 24.x feature versions
deb [signed-by=/etc/apt/keyrings/htcondor.asc]
https://htcss-downloads.chtc.wisc.edu/repo/ubuntu/24.x jammy main

Let me know if any of this helps.

...Tim

--
Tim Theisen (he, him, his)
Release Manager
Center for High Throughput Computing
University of Wisconsin - Madison
3695 Morgridge Hall
1205 University Ave
Madison, WI 53706

[Joachim Meyer]

Hi Tim,

thanks! I guess, I was still using the old URL, directly using the new one works flawlessly.
Not sure where this is failing..

Best,
- Joachim

 06.07.26 um 15:05 schrieb Tim Theisen:

--

Joachim Meyer
HPC-Koordination & Support

Universität des Saarlandes FR Informatik | HPC

Postanschrift: Postfach 15 11 50 | 66041 Saarbrücken

Besucheranschrift: Campus E1 3 | Raum 4.03 66123 Saarbrücken

T: +49 681 302-57522 jme...@cs.uni-saarland.de www.uni-saarland.de