* Berke Durak: > Debsecan stopped working. It fails as it is trying to access > > https://security-tracker.debian.org/tracker/debsecan/release/1/GENERIC > > or /sid, /jessie, etc. > > It displays the following error: > > % debsecan > error: while downloading > https://security-tracker.debian.org/tracker/debsecan/release/1/GENERIC: > error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed > (_ssl.c:590) > > The error message is a bit misleading
It is not, if the certificate verification fails, debsecan will never get to the point where it will download anything and could notice that the requested data is not available. > - accessing the URL via > another agent shows that while the SSL certificate is valid, the > server responds with > > Object not found > The requested debsecan object has not been found. This could have been caused by pasting the wrong URL (e.g., with a trailing colon). > This could be a server issue or a change in debsecan. Or something could intercept HTTPS traffic on your end, and the interception certificate was not loaded into the system trust store.
