是ca证书验证问题吗？我该如何解决这个问题？

问题描述 投票：0回答：1

在我的公司，有几个实例是用于生产、测试和其他目的的后端。我也是公司的新员工。最近，所有实例突然无法使用 git 或 apt-get 接收任何更新。

  1. 当我使用
    git fetch --all
    时，结果是：
fatal: unable to access 'https://gitlab.com/christopherchu96/hyper-app-server.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

看到帖子后，我再次使用

git config --global http.sslverify false
和
git fetch all
。结果是：

fatal: unable to access 'https://[...].git/': The requested URL returned error: 403
error: Could not fetch origin

这很奇怪，因为我不知道这是认证问题还是用户权限问题。或者最后只是一个认证问题。

  1. 有人建议在这个
    链接
    中使用sudo apt-get update，当我使用
    sudo apt-get update
    时，出现很多错误：
Ign:1 http://dl.google.com/linux/chrome/deb stable InRelease
Ign:2 http://dl.google.com/linux/chrome/deb stable Release                                                               
Ign:3 http://dl.google.com/linux/chrome/deb stable/main amd64 Packages.diff/Index                                        
Ign:4 http://dl.google.com/linux/chrome/deb stable/main all Packages                                                     
Ign:5 http://dl.google.com/linux/chrome/deb stable/main Translation-en                                                   
Ign:6 http://dl.google.com/linux/chrome/deb stable/main amd64 Packages                                                   
Ign:4 http://dl.google.com/linux/chrome/deb stable/main all Packages                                                                     
...
...
...
Ign:155 https://esm.ubuntu.com/infra/ubuntu xenial-infra-security/main i386 Packages
Ign:147 https://esm.ubuntu.com/infra/ubuntu xenial-infra-security/main all Packages
Ign:149 https://esm.ubuntu.com/infra/ubuntu xenial-infra-security/main Translation-en
Ign:156 https://esm.ubuntu.com/infra/ubuntu xenial-infra-updates/main amd64 Packages
Ign:157 https://esm.ubuntu.com/infra/ubuntu xenial-infra-updates/main i386 Packages
Ign:152 https://esm.ubuntu.com/infra/ubuntu xenial-infra-updates/main all Packages
Ign:153 https://esm.ubuntu.com/infra/ubuntu xenial-infra-updates/main Translation-en
Err:154 https://esm.ubuntu.com/infra/ubuntu xenial-infra-security/main amd64 Packages
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
Ign:155 https://esm.ubuntu.com/infra/ubuntu xenial-infra-security/main i386 Packages
Err:156 https://esm.ubuntu.com/infra/ubuntu xenial-infra-updates/main amd64 Packages
  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
Ign:157 https://esm.ubuntu.com/infra/ubuntu xenial-infra-updates/main i386 Packages
Reading package lists... Done
W: The repository 'http://dl.google.com/linux/chrome/deb stable Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'http://hk.archive.ubuntu.com/ubuntu xenial Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'http://hk.archive.ubuntu.com/ubuntu xenial-updates Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'https://download.docker.com/linux/ubuntu xenial Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'http://hk.archive.ubuntu.com/ubuntu xenial-backports Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'http://security.ubuntu.com/ubuntu xenial-security Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'http://ppa.launchpad.net/certbot/certbot/ubuntu xenial Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'http://ppa.launchpad.net/deadsnakes/ppa/ubuntu xenial Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'https://esm.ubuntu.com/infra/ubuntu xenial-infra-security Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'https://esm.ubuntu.com/infra/ubuntu xenial-infra-updates Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages  403  Forbidden [IP: 142.251.220.78 80]
E: Failed to fetch http://hk.archive.ubuntu.com/ubuntu/dists/xenial-backports/restricted/binary-amd64/Packages  403  Forbidden [IP: 45.125.0.6 80]
E: Failed to fetch http://hk.archive.ubuntu.com/ubuntu/dists/xenial/main/binary-amd64/Packages  403  Forbidden [IP: 45.125.0.6 80]
E: Failed to fetch https://download.docker.com/linux/ubuntu/dists/xenial/stable/binary-amd64/Packages  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
E: Failed to fetch http://hk.archive.ubuntu.com/ubuntu/dists/xenial-updates/main/binary-amd64/Packages  403  Forbidden [IP: 45.125.0.6 80]
E: Failed to fetch http://security.ubuntu.com/ubuntu/dists/xenial-security/main/binary-amd64/Packages  403  Forbidden [IP: 91.189.91.82 80]
E: Failed to fetch http://ppa.launchpad.net/deadsnakes/ppa/ubuntu/dists/xenial/main/binary-amd64/Packages  403  Forbidden [IP: 185.125.190.80 80]
E: Failed to fetch http://ppa.launchpad.net/certbot/certbot/ubuntu/dists/xenial/main/binary-amd64/Packages  403  Forbidden [IP: 185.125.190.80 80]
E: Failed to fetch https://esm.ubuntu.com/infra/ubuntu/dists/xenial-infra-security/main/binary-amd64/Packages  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
E: Failed to fetch https://esm.ubuntu.com/infra/ubuntu/dists/xenial-infra-updates/main/binary-amd64/Packages  server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
E: Some index files failed to download. They have been ignored, or old ones used instead.
  1. 也无法 ping 和卷曲任何东西。

如果有人能为我提供一些提示/解决方案，我真的很感激，因为我已经研究这些问题好几天了！磁盘是Ubuntu 16.04.7 LTS，我们团队使用了Let's Encrypt作为证书，非常感谢。

  1. 设置 

    git config --global http.sslverify false
    中的 git 部分：此链接

  2. sudo apt-get update
    中提到： 这个链接

linux git server ssl-certificate ubuntu-16.04
1个回答
0
投票

防火墙似乎有问题。也许FW破解了加密来检查数据包。检查后，数据包将使用新的内部证书再次加密。如果系统上未安装此程序，则会出现错误。

测试：

ssh -vvv [User]@[URL]

解决方法：

  • 在Linux下安装证书。
最新问题
© www.soinside.com 2019 - 2024. All rights reserved.