[tor-relays] Updating from Ubuntu 20.04 using apt-secure

[Peter Gerber]

Hi,

unfortunately, there is some software that wasn't well prepared for the
expiration of the Let's Encrypt root certificate [1]. Ubuntu ships a
fix/workaround [2] for the issue. Just update Ubuntu first, then try to
update Tor again.

Peter

[1]: https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
[2]:
https://changelogs.ubuntu.com/changelogs/pool/main/c/ca-certificates/ca-certificates_20210119~20.04.2/changelog

John Csuti via tor-relays:
> Hello all,
> 
> I recently went to update and upgrade my system and found that the certificate for deb.torproject.org is expired and no longer trusted? Is anyone else having this issue and is there a way to fix this. I also added the repo to a fresh install of ubuntu 20.04 and got the same error.
> 
> Error
> Err:5 https://deb.torproject.org/torproject.org focal Release
> Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 95.216.163.36 443]
> 
> Thanks,
> John Csuti
> +1 (216) 633-1279