Trying “apk update” using SSL fails today. It was working fine this weekend.

Checking the distribution site for Alpine Linux:

https://www.sslchecker.com/sslchecker?su=65558f917c4b529673ef0c275832158e

This shows certificate CN for “a.ssl.fastly.net”.

> apk update

fetch https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
SSL certificate subject doesn't match host dl-cdn.alpinelinux.org
ERROR: https://dl-cdn.alpinelinux.org/alpine/edge/main: Permission denied
WARNING: Ignoring APKINDEX.e37b76c2.tar.gz: No such file or directory
fetch https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
SSL certificate subject doesn't match host dl-cdn.alpinelinux.org
ERROR: https://dl-cdn.alpinelinux.org/alpine/edge/testing: Permission denied
WARNING: Ignoring APKINDEX.c0dba71d.tar.gz: No such file or directory
fetch https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
SSL certificate subject doesn't match host dl-cdn.alpinelinux.org
ERROR: https://dl-cdn.alpinelinux.org/alpine/edge/community: Permission denied
WARNING: Ignoring APKINDEX.d022dfc8.tar.gz: No such file or directory

> wget -v https://dl-cdn.alpinelinux.org/alpine/edge/community

--2017-10-31 16:47:56--  https://dl-cdn.alpinelinux.org/alpine/edge/community
Resolving dl-cdn.alpinelinux.org (dl-cdn.alpinelinux.org)... 151.101.112.249
Connecting to dl-cdn.alpinelinux.org (dl-cdn.alpinelinux.org)|151.101.112.249|:443... connected.
ERROR: no certificate subject alternative name matches
    requested host name ‘dl-cdn.alpinelinux.org’.
To connect to dl-cdn.alpinelinux.org insecurely, use `--no-check-certificate'.



> cat /etc/apk/repositories

https://dl-cdn.alpinelinux.org/alpine/edge/main
https://dl-cdn.alpinelinux.org/alpine/edge/testing
https://dl-cdn.alpinelinux.org/alpine/edge/community

(from redmine: issue id 8087, created on 2017-10-31, closed on 2018-01-25)