Question About PureOS Apt Sources

General Privacy & Security
1

The first time that I put my Librem 5 USA (Liberty) online, the first action I did was to open Terminal app to run:

sudo apt-get update

But the first time that I ran the command, it gave a ton of errors indicating that Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 49.13.57.135 443]

Then, I ran the command a second time and it worked fine.

Is this any kind of security issue or is this expected? Was my device just slow to refresh a certificate cache?

2 Likes
2

Two possibilities I can think of:

  1. one server had out of date certificates

  2. your phone had not yet synchronized its clock so ssl validation failed as a result

4 Likes
3

I decided that I think the problem was probably the clock not yet being synchronized like you said, so I have not bothered to investigate this issue further. Thanks!

2 Likes