Bureaucrats, dave_user, Administrators
743
edits
Changes
→Q: Buffer I/O Error when accessing USB devices
[[File:Generic-card-reader.jpg|none|thumb]]
=== Q: OE Sanity check failed with <code>Fetcher failure for URL: '<nowiki>https://eula-downloads.yoctoproject.org/index.php'</nowiki></code> ===
This usually happens from 1st October 2023 on Ubuntu 14.04 based MVM and the root cause is the DST Root CA X3 certificate expiration (see for example [https://superuser.com/questions/1679204/curl-on-ubuntu-14-all-lets-encrypt-certificates-are-expired-error-60 this superuser thread])
Without involving bitbake and Yocto, this can be easily reproduced with a <code>curl</code> command, here showed with it's error output:<syntaxhighlight lang="text">
bash# curl https://eula-downloads.yoctoproject.org/index.php
curl: (60) SSL certificate problem: certificate has expired
More details here: http://curl.haxx.se/docs/sslcerts.html
curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
</syntaxhighlight>
The easy way to fix this is to disable the expired certificate the the following command (please note that it must be run with <code>sudo</code>)<syntaxhighlight lang="bash">
sudo sed -i '/^mozilla\/DST_Root_CA_X3.crt$/ s/^/!/' /etc/ca-certificates.conf && sudo update-ca-certificates
</syntaxhighlight>
This is a persistent change on the MVM, so you'll need to perform it only once
After applying the fix, the <code>curl</code> command now succeed<syntaxhighlight lang="text">
bash# curl https://eula-downloads.yoctoproject.org/index.php
<html>
<head><title>301 Moved Permanently</title></head>
<body bgcolor="white">
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.14.2</center>
</body>
</html>
</syntaxhighlight>
