Configuration error: [SSL: CERTIFICATE_VERIFY_FAILED]

UCS - Univention Corporate Server
#1

Hello,

i installed a new ucs 4.3.3. After installing these APPs:
Kopano, Kopano Webapp, Z-Push, Benno-Mailarchiv, Nextcloud and the last OnlyOffice

i cant install more APPs. If i whant to install the APPs through shell, i get this:

root@sv01:~# univention-upgrade

Starting univention-upgrade. Current UCS version is 4.3-3 errata410

Checking for local repository:                          none
The connection to the repository server failed: Configuration error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661). Please check the repository configuration and the network connection.

I tested it with apt to:

root@sv01:~# apt update
File: /etc/apt/sources.list.d/15_ucs-online-version.list
# An error occurred during the repository check. The error message:
Paketlisten werden gelesen... Fertig
E: Problem executing scripts APT::Update::Pre-Invoke 'grep -Fqs '# An error occurred during the repository check.' /etc/apt/sources.list.d/15_ucs-online-version.list && ucr commit /etc/apt/sources.list.d/15_ucs-online-version.list ; ! grep -F '# An error occurred during the repository check.' /etc/apt/sources.list.d/15_ucs-online-version.list'
E: Sub-process returned an error code

How could i fix this?

Thanks

Volker

1 Like
#2

Hi,

it might be an issue with your license- have you installed your license file?

Otherwise try to re-create it manually:
ucr commit /etc/apt/sources.list.d/*

Gretings

/CV

#3

I found the Solution

type in shell

update-ca-certificates

after that, the problems are gone

1 Like
#4

Same issue. Same solution. Thx

#5

Hi There,
same issue but update-ca-certificates does NOT solve my problem…
I’m trying to upgrade a memberserver from 4.4.2. to 4.4.3…

Starting univention-upgrade. Current UCS version is 4.4-2 errata404

Checking for local repository: none
Checking for package updates: none
Checking for app updates: none
Checking for release updates: The connection to the repository server failed: Configuration error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661). Please check the repository configuration and the network connection.

I set ucr set repository/online/server=updates.software-univention.de
I unset the ports ucr unset repository/online/port

I can resolve the host updates.software-univention.de to 176.9.114.147

But still the same ssl error…

Anny hints to what else i can do?
Thx

1 Like
#6

Solution:
Ok… i just copied alls sslcerts from /etc/ssl/certs/* from my PDC to my Memberserver an rerun
update-ca-certs
That added 153 new certs and after that univention-upgrade worked again.

NO idea though, why some ca_certs seemed to have gone missing on my memberserver… :frowning:
Cheers

#7 
Error: Update aborted due to configuration error: Configuration error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)

Same on master 4.4.9-1362

Mastodon