Cannot update templates "Error in the certificate verification"

User Support General
#1

Hi all. I’m unable to update any of my qubes templates after a fresh 4.1 install. The first thing I did was install mirage-firewall, so possibly that is the culprit (unsure), but when I initiate an update either via the qubes update gui or cli I get:

" E: Failed to fetch tor+https://deb.debian.org/debian/dists/bullseye/InRelease Certificate verification failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. Could not handshake: Error in the certificate verification. [IP"

This is across all templates as I mentioned.

I found discussion on the github that “sudo apt update ; sudo apt install ca-certificates” solved this for someone else, but it did not work for me.

I’ve searched the forum and seen a recent post mentioning this but I couldn’t see how the solution applied to me: Certificate verification failed

Searching the forum @adw found that it was the result of an expired certificate and created a github issue which marek fixed. Is this the case again? Debian 11 Update Issue - #13 by ephile

Thanks for the help

#2

You say your problem affect all templates? Fedora included?
What’s the error message in Fedora templates?
“not yet valid certificate” - suggest something amiss with your
time/date.
Check that.

This was specific to the contrib repository - it should not affect you,
and has indeed been fixed.

1 Like
#3

Thank you, Unman. An embarrassing oversight on my part.

I didn’t stop to consider the “not yet” part.

I really appreciate your efforts in the forum to engage with what I am sure are trivial & banal ‘new user’ issues and questions. Always learning from your posts & responses to issues.