[GH-ISSUE #1315] Expired Certificates for Debian Repository #932

New issue

Closed

opened 2026-05-07 00:28:53 +02:00 by BreizhHardware · 2 comments

BreizhHardware commented

2026-05-07 00:28:53 +02:00

Owner

Originally created by @ckujau on GitHub (Apr 21, 2025).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1315

🐞 Describe the bug
The TLS certificate(s) for heckel.io and the archive subdomain expired today, preventing secure access to the packages.

💻 Components impacted
ntfy server

💡 Screenshots and/or logs

$ sudo apt update
[...]
W: Failed to fetch https://archive.heckel.io/apt/dists/debian/InRelease  
   Certificate verification failed: The certificate is NOT trusted. 
   The certificate chain uses expired certificate.  Could not handshake: 
   Error in the certificate verification. [IP: 46.163.76.87 443]

$ curl -vkL https://archive.heckel.io/apt 2>&1 | grep -m1 -A2 subject:
*   subject: CN=heckel.io
*   start date: Tue, 21 Jan 2025 13:25:59 GMT
*   expire date: Mon, 21 Apr 2025 13:25:58 GMT

$  date -u
Mon Apr 21 18:26:19 UTC 2025

🔮 Additional context
This happend before in #1219

Originally created by @ckujau on GitHub (Apr 21, 2025). Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1315 :lady_beetle: **Describe the bug** The TLS certificate(s) for heckel.io and the archive subdomain expired today, preventing secure access to the packages. :computer: **Components impacted** ntfy server :bulb: **Screenshots and/or logs** ``` $ sudo apt update [...] W: Failed to fetch https://archive.heckel.io/apt/dists/debian/InRelease Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 46.163.76.87 443] $ curl -vkL https://archive.heckel.io/apt 2>&1 | grep -m1 -A2 subject: * subject: CN=heckel.io * start date: Tue, 21 Jan 2025 13:25:59 GMT * expire date: Mon, 21 Apr 2025 13:25:58 GMT $ date -u Mon Apr 21 18:26:19 UTC 2025 ``` :crystal_ball: **Additional context** This happend before in #1219