[Buildroot] [PATCH for-2021.08.x] support/docker: remove expired mozilla/DST_Root_CA_X3.crt

Romain Naour romain.naour at gmail.com
Wed Nov 17 21:33:48 UTC 2021


Since the 30th Sep 2021 the docker image used the gitlab-ci is not able
to download the toolchain archive from https://toolchains.bootlin.com due
to an expired certificate.

wget https://toolchains.bootlin.com/downloads/releases/toolchains/aarch64/tarballs/aarch64--glibc--bleeding-edge-2020.08-1.tar.bz2
Connecting to toolchains.bootlin.com (toolchains.bootlin.com)|51.254.149.199|:443... connected.
ERROR: The certificate of ‘toolchains.bootlin.com’ is not trusted.
ERROR: The certificate of ‘toolchains.bootlin.com’ has expired.

Remove expired mozilla/DST_Root_CA_X3.crt [1].

[1] https://stackoverflow.com/questions/69408776/how-to-force-older-debian-to-forget-about-dst-root-ca-x3-expiration-and-use-isrg

Signed-off-by: Romain Naour <romain.naour at gmail.com>
Cc: Yann E. MORIN <yann.morin.1998 at free.fr>
---
Backport this patch for 2021.08.x and 2021.02.x using buildroot/base:20200814.2228
---
 support/docker/Dockerfile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/support/docker/Dockerfile b/support/docker/Dockerfile
index a9bacca3a0..e65f840da8 100644
--- a/support/docker/Dockerfile
+++ b/support/docker/Dockerfile
@@ -47,6 +47,8 @@ RUN apt-get install -y --no-install-recommends \
         unzip \
         wget \
         && \
+    sed -i '/^mozilla\/DST_Root_CA_X3.crt$/ s/^/!/' /etc/ca-certificates.conf && \
+    update-ca-certificates && \
     apt-get -y autoremove && \
     apt-get -y clean
 
-- 
2.31.1




More information about the buildroot mailing list