SSL certificate endeavouros.db alpix.eu has expired

General system EndeavourOS repo
1

I wanted to update my system and got the following error :

Fehler: Konnte Datei 'endeavouros.db' nicht von mirror.alpix.eu übertragen : SSL certificate problem: certificate has expired

As reflector-simple only updates the Arch repositories (not EndeavourOS repository) I excluded mirror.alpix.eu in /etc/pacman.d/endeavouros.mirrorlist for this update. This solved the problem. Maybe one of the team members can have a look.

For those who might experience the same problem.

1 Like
2

I had the same problem today when I updated my system but it was possible to update my system even with this error present.

1 Like
3

Yep, got the same by just running sudo pacman -Syu

image

1 Like
4

I could have done it too, but wanted to avoid it. I prefer things, related to package management, running smoothly, without errors.
:wink:

5

You could use eos-rankmirrors, to automatically remove mirrors that are not working, and sort them by speed.

3 Likes
6

Didn’t think of this one, to be honest.
:grinning:

1 Like
7

@yashrathi
Welcome to the forum, by the way.

1 Like
8

thank you, I am new though endeavouros community seems really friendly. Glad to be here.

9

Thanks for the notification, I have informed @Alpix about this.

4 Likes
10

after that I tried to change the mirrot list inside welcome but the mirrorlist is written to:
/etc/pacman.d/mirror.list
and
/etc/pacman.d/endeavouros-mirrorlist
still includes the broken mirror server

current /etc/pacman.d/endeavouros-mirrorlist

# Server list generated by rankmirrors on 2020-12-24
######################################################
####                                              ####
###        EndeavourOS Repository Mirrorlist       ###
####                                              ####
######################################################
#### Entry in file /etc/pacman.conf:
###     [endeavouros]
###     SigLevel = PackageRequired
###     Include = /etc/pacman.d/endeavouros-mirrorlist
######################################################
#Server = https://mirror.alpix.eu/endeavouros/repo/$repo/$arch
Server = https://ftp.acc.umu.se/mirror/endeavouros/repo/$repo/$arch
Server = https://raw.githubusercontent.com/endeavouros-team/repo/master/$repo/$arch
Server = https://mirrors.tuna.tsinghua.edu.cn/endeavouros/repo/$repo/$arch
Server = https://mirror.linux.pizza/endeavouros/repo/$repo/$arch

should I remove all the entries from /etc/pacman.d/endeavouros-mirrorlist so that /etc/pacman.d/mirror.list is used instead?
Or should I keep both:
/etc/pacman.d/endeavouros-mirrorlist
and
/etc/pacman.d/mirror.list
???

11

@Alpix is fixing the issue as we speak.

7 Likes
12

You should need both. One is for Arch repos and the other for EnOS’.
You could use eos-rankmirrors to rank the mirrors in /etc/pacman.d/endeavouros-mirrorlist.

1 Like
13

thank you!
ok after eos-rankmirrors it shows:

# EndeavourOS mirrorlist:
Server = https://mirror.erickochen.nl/endeavouros/repo/$repo/$arch
Server = https://mirror.moson.org/endeavouros/repo/$repo/$arch
Server = https://de.freedif.org/EndeavourOS/repo/$repo/$arch
Server = https://mirror.linux.pizza/endeavouros/repo/$repo/$arch
Server = https://ftp.acc.umu.se/mirror/endeavouros/repo/$repo/$arch
Server = https://endeavour.remi.lu/repo/$repo/$arch
Server = http://mirror.jingk.ai/endeavouros/repo/$repo/$arch
Server = https://ca.gate.endeavouros.com/endeavouros/repo/$repo/$arch
Server = https://mirror.jingk.ai/endeavouros/repo/$repo/$arch
Server = https://mirror.freedif.org/EndeavourOS/repo/$repo/$arch
14

By defaul, the mirrors are ranked by age, that is the most recent synchronized mirror first etc.

$ eos-rankmirrors --help
Usage: eos-rankmirrors [options]

Options:
  --sort <value>
             Primary key for sorting the mirrors.
             Supported key values:
                 age     (latest first)
                 rate    (fastest first)
             Default: age.

  --timeout <value>
  -t <value>
             Set the timeout value (in seconds) for checking a mirror.
             Default: 2.

  --no-save
  -n
             Don't save the generated mirrorlist.

  --verbose
             Show more detailed output.

  --help
  -h
             This help.
1 Like
15

which are the most secure (protected) & trusted servers, is there a list available?

16

I assume they all are :innocent:

2 Likes
17

Yeah, in hindsight I think I should have waited. I hope that this error didn’t screw with the update in some way.

18

The good thing is: You don’t need to trust any of the servers.
All packages are pgp signed and their signature is checked during package installation.
So, if there is some package that has been tampered with, it’ll fail to install.

3 Likes
19

I don’t think it will cause any harm. Would have been more risky, if it was related to the Arch repositories.

1 Like
20

luckily we have some more mirrors so pacman will simply take the next if one is failing, and updating will work also if you only have one mirror in the list (at least for the endeavouros repo)

3 Likes