package: apt-transport-https version: 1.0.9.3 severity: grave justification: installing apt-transport-https should be enough to access https repos
One a fresh chroot, apt-get update failed on a https repo even when apt-transport-https was installed. It was working after ca-certificates package was installed. root@savannah:/# echo deb https://people.debian.org/~praveen/diaspora-unreleased unstable main >>/etc/apt/sources.list root@savannah:/# apt-get update Ign https://people.debian.org unstable InRelease Ign https://people.debian.org unstable Release.gpg Ign https://people.debian.org unstable Release Get:1 http://ftp.de.debian.org jessie InRelease [191 kB] Err https://people.debian.org unstable/main amd64 Packages Ign https://people.debian.org unstable/main Translation-en Get:2 http://ftp.de.debian.org jessie/main amd64 Packages/DiffIndex [7876 B] Get:3 http://ftp.de.debian.org jessie/main Translation-en/DiffIndex [7876 B] Get:4 http://ftp.de.debian.org jessie/main amd64 2014-12-03-0244.11.pdiff [14.4 kB] Get:5 http://ftp.de.debian.org jessie/main amd64 2014-12-03-0244.11.pdiff [14.4 kB] Fetched 221 kB in 20s (10.6 kB/s) W: Failed to fetch https://people.debian.org/~praveen/diaspora-unreleased/dists/unstable/main/binary-amd64/Packages E: Some index files failed to download. They have been ignored, or old ones used instead. root@savannah:/# apt-get update Ign https://people.debian.org unstable InRelease Hit http://ftp.de.debian.org jessie InRelease Ign https://people.debian.org unstable Release.gpg Get:1 http://ftp.de.debian.org jessie/main amd64 Packages/DiffIndex [7876 B] Ign https://people.debian.org unstable Release Get:2 http://ftp.de.debian.org jessie/main Translation-en/DiffIndex [7876 B] Err https://people.debian.org unstable/main amd64 Packages Ign https://people.debian.org unstable/main Translation-en Fetched 15.8 kB in 6s (2588 B/s) W: Failed to fetch https://people.debian.org/~praveen/diaspora-unreleased/dists/unstable/main/binary-amd64/Packages E: Some index files failed to download. They have been ignored, or old ones used instead. root@savannah:/# At the minimum error message should say the signature could not be verified like wget wget http://people.debian.org/~praveen/diaspora-unreleased/dists/unstable/main/binary-amd64/Packages converted 'http://people.debian.org/~praveen/diaspora-unreleased/dists/unstable/main/binary-amd64/Packages' (ANSI_X3.4-1968) -> 'http://people.debian.org/~praveen/diaspora-unreleased/dists/unstable/main/binary-amd64/Packages' (UTF-8) --2014-12-03 09:52:26-- http://people.debian.org/~praveen/diaspora-unreleased/dists/unstable/main/binary-amd64/Packages Resolving people.debian.org (people.debian.org)... 5.153.231.30, 2001:41c8:1000:21::21:30 Connecting to people.debian.org (people.debian.org)|5.153.231.30|:80... connected. HTTP request sent, awaiting response... 301 Moved Permanently Location: https://people.debian.org/~praveen/diaspora-unreleased/dists/unstable/main/binary-amd64/Packages [following] converted 'https://people.debian.org/~praveen/diaspora-unreleased/dists/unstable/main/binary-amd64/Packages' (ANSI_X3.4-1968) -> 'https://people.debian.org/~praveen/diaspora-unreleased/dists/unstable/main/binary-amd64/Packages' (UTF-8) --2014-12-03 09:52:27-- https://people.debian.org/~praveen/diaspora-unreleased/dists/unstable/main/binary-amd64/Packages Connecting to people.debian.org (people.debian.org)|5.153.231.30|:443... connected. ERROR: The certificate of 'people.debian.org' is not trusted. ERROR: The certificate of 'people.debian.org' hasn't got a known issuer.
signature.asc
Description: OpenPGP digital signature