Install via repositories does not work on ubuntu impish (certificate issue)

Bugs and issues
#1

Hey there :wave:

I’m try to install insync on my new machine.
I’m getting errors when doing the apt update.

Here is my /etc/apt/sources.list.d/insync.list content:

deb https://apt.insync.io/ubuntu impish non-free contrib

Here is the log when doing an apt update:

Err:4 https://apt.insync.io/ubuntu impish InRelease
Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 52.217.195.225 443]
W: Failed to fetch https://apt.insync.io/ubuntu/dists/impish/InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 52.217.195.225 443]
W: Some index files failed to download. They have been ignored, or old ones used instead.

I also tried with hirsute or focal, and I have the same error.
When browsing to https://apt.insync.io/ubuntu/dists/impish/InRelease, some S3 certificate is served instead of a valid certificate for the domain. It may be a S3/CloudFront config missing of some sort.

#2

As a workaround, I created the following file : /etc/apt/apt.conf.d/insync.conf with the content:

Acquire::https::apt.insync.io::Verify-Peer “false”;

I was able to install insync after that, but I think that the certificate issue should be resolved :slight_smile:

1 Like
#3

Thank you very much for bringing this up, @Julien_WITTOUCK. I’ve forwarded the issue to our Linux team and await their advise. :slight_smile:

#4

Hi @Julien_WITTOUCK! In the APT sources file for the Insync repo, please replace https with http. Let me know how this goes!

#5

Hi !

It works with plain ‘http’.
I guess we can solve this issue.

Maybe you could add https support for enhanced security ?

#6

Let me raise that to our engineers for a possible improvement. :slight_smile: Thank you!