<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Fira Mono";
panose-1:2 11 5 9 5 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
font-size:10.0pt;
font-family:"Courier New";
mso-fareast-language:EN-GB;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";
mso-fareast-language:EN-GB;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="en-RO" link="#0563C1" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello Jafar,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">It worked after updating the CA certificates.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Eduard<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">Jafar Al-Gharaibeh <jafar@atcorp.com><br>
<b>Date: </b>Wednesday, 6 October 2021 at 22:35<br>
<b>To: </b>Eduard Margulescu <eduard.margulescu@bigstep.com>, dev@lists.frrouting.org <dev@lists.frrouting.org><br>
<b>Subject: </b>Re: [dev] Certificate error deb.frrouting.org</span><span style="font-size:12.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</div>
<p>Hi,<o:p></o:p></p>
<p> We use Let's Encrypt certificates, and as far as I can see, things are good in the deployed certificates.
<o:p></o:p></p>
<p> Issued On Wednesday, September 8, 2021 at 12:52:30 PM<br>
Expires On Tuesday, December 7, 2021 at 11:52:29 AM<o:p></o:p></p>
<p> It is likely that the ca certificates need updating at your end:<o:p></o:p></p>
<p> sudo apt install ca-certificates<o:p></o:p></p>
<p> you can use the tool update-ca-certificates that comes with the package above to update your CAs.<o:p></o:p></p>
<p>Regards,<o:p></o:p></p>
<p>Jafar<o:p></o:p></p>
<div>
<p class="MsoNormal">On 10/4/21 4:23 AM, Eduard Margulescu wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span lang="EN-US">Hello team,</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">I want to install FRR on an Ubuntu 18.04 server and I receive this error when I try to use this procedure (<a href="https://deb.frrouting.org/">https://deb.frrouting.org/</a>) :</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"> </span><o:p></o:p></p>
<div style="border:solid black 1.0pt;padding:5.0pt 5.0pt 5.0pt 5.0pt">
<pre style="background:#EEEEEE"><i><span style="font-size:11.0pt;font-family:"Fira Mono";color:#777799"># add GPG key</span></i><o:p></o:p></pre>
<pre style="background:#EEEEEE"><span style="font-size:11.0pt;font-family:"Fira Mono";color:black">curl -s <a href="https://deb.frrouting.org/frr/keys.asc">https://deb.frrouting.org/frr/keys.asc</a> | sudo apt-key add -</span><o:p></o:p></pre>
<pre style="background:#EEEEEE"><span style="font-size:11.0pt;font-family:"Fira Mono";color:black"> </span><o:p></o:p></pre>
<pre style="background:#EEEEEE"><i><span style="font-size:11.0pt;font-family:"Fira Mono";color:#777799"># possible values for FRRVER: </span></i><i><span style="font-size:11.0pt;font-family:"Fira Mono";color:#007700">frr-6 frr-7 frr-8 frr-stable</span></i><o:p></o:p></pre>
<pre style="background:#EEEEEE"><i><span style="font-size:11.0pt;font-family:"Fira Mono";color:#777799"># frr-stable will be the latest official stable release</span></i><o:p></o:p></pre>
<pre style="background:#EEEEEE"><span style="font-size:11.0pt;font-family:"Fira Mono";color:black">FRRVER="</span><span style="font-size:11.0pt;font-family:"Fira Mono";color:#007700">frr-stable</span><span style="font-size:11.0pt;font-family:"Fira Mono";color:black">"</span><o:p></o:p></pre>
<pre style="background:#EEEEEE"><span style="font-size:11.0pt;font-family:"Fira Mono";color:black">echo deb <a href="https://deb.frrouting.org/frr">https://deb.frrouting.org/frr</a> $(lsb_release -s -c) $FRRVER | sudo tee -a /etc/apt/sources.list.d/frr.list</span><o:p></o:p></pre>
<pre style="background:#EEEEEE"><span style="font-size:11.0pt;font-family:"Fira Mono";color:black"> </span><o:p></o:p></pre>
<pre style="background:#EEEEEE"><i><span style="font-size:11.0pt;font-family:"Fira Mono";color:#777799"># update and install FRR</span></i><o:p></o:p></pre>
<pre style="background:#EEEEEE"><span style="font-size:11.0pt;font-family:"Fira Mono";color:black">sudo apt update && sudo apt install frr frr-pythontools</span><o:p></o:p></pre>
</div>
<p class="MsoNormal"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">root@ukr1:~# curl -s <a href="https://deb.frrouting.org/frr/keys.asc">
https://deb.frrouting.org/frr/keys.asc</a> | sudo apt-key add -</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">OK</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">root@ukr1:~# FRRVER="frr-stable"</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">root@ukr1:~# echo deb <a href="https://deb.frrouting.org/frr">
https://deb.frrouting.org/frr</a> $(lsb_release -s -c) $FRRVER | sudo tee -a /etc/apt/sources.list.d/frr.list</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">deb <a href="https://deb.frrouting.org/frr">
https://deb.frrouting.org/frr</a> bionic frr-stable</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">root@ukr1:~# sudo apt update && sudo apt install frr frr-pythontools</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Get:1 <a href="http://security.ubuntu.com/ubuntu">
http://security.ubuntu.com/ubuntu</a> bionic-security InRelease [88.7 kB]</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Hit:2 <a href="http://us.archive.ubuntu.com/ubuntu">
http://us.archive.ubuntu.com/ubuntu</a> bionic InRelease</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Ign:3 <a href="https://deb.frrouting.org/frr">
https://deb.frrouting.org/frr</a> bionic InRelease</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Get:4 <a href="http://us.archive.ubuntu.com/ubuntu">
http://us.archive.ubuntu.com/ubuntu</a> bionic-updates InRelease [88.7 kB]</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="background:yellow;mso-highlight:yellow">Err:5
<a href="https://deb.frrouting.org/frr">https://deb.frrouting.org/frr</a> bionic Release</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="background:yellow;mso-highlight:yellow"> Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification.
[IP: 194.147.138.41 443]</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Get:6 <a href="http://us.archive.ubuntu.com/ubuntu">
http://us.archive.ubuntu.com/ubuntu</a> bionic-backports InRelease [74.6 kB]</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Reading package lists... Done</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="background:yellow;mso-highlight:yellow">E: The repository '<a href="https://deb.frrouting.org/frr">https://deb.frrouting.org/frr</a> bionic Release' does not have a Release file.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="background:yellow;mso-highlight:yellow">N: Updating from such a repository can't be done securely, and is therefore disabled by default.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">N: See apt-secure(8) manpage for repository creation and user configuration details.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Is there something you can fix ?</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Thanks,</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US">Eduard</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><br>
<br>
<o:p></o:p></span></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>dev mailing list<o:p></o:p></pre>
<pre><a href="mailto:dev@lists.frrouting.org">dev@lists.frrouting.org</a><o:p></o:p></pre>
<pre><a href="https://lists.frrouting.org/listinfo/dev">https://lists.frrouting.org/listinfo/dev</a><o:p></o:p></pre>
</blockquote>
</div>
</body>
</html>