dl-cdn.alpinelinux.org https/SSL/certificate failure
Trying “apk update” using SSL fails today. It was working fine this weekend.
Checking the distribution site for Alpine Linux:
https://www.sslchecker.com/sslchecker?su=65558f917c4b529673ef0c275832158e
This shows certificate CN for “a.ssl.fastly.net”.
> apk update
fetch https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
SSL certificate subject doesn't match host dl-cdn.alpinelinux.org
ERROR: https://dl-cdn.alpinelinux.org/alpine/edge/main: Permission denied
WARNING: Ignoring APKINDEX.e37b76c2.tar.gz: No such file or directory
fetch https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
SSL certificate subject doesn't match host dl-cdn.alpinelinux.org
ERROR: https://dl-cdn.alpinelinux.org/alpine/edge/testing: Permission denied
WARNING: Ignoring APKINDEX.c0dba71d.tar.gz: No such file or directory
fetch https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
SSL certificate subject doesn't match host dl-cdn.alpinelinux.org
ERROR: https://dl-cdn.alpinelinux.org/alpine/edge/community: Permission denied
WARNING: Ignoring APKINDEX.d022dfc8.tar.gz: No such file or directory
> wget -v https://dl-cdn.alpinelinux.org/alpine/edge/community
--2017-10-31 16:47:56-- https://dl-cdn.alpinelinux.org/alpine/edge/community
Resolving dl-cdn.alpinelinux.org (dl-cdn.alpinelinux.org)... 151.101.112.249
Connecting to dl-cdn.alpinelinux.org (dl-cdn.alpinelinux.org)|151.101.112.249|:443... connected.
ERROR: no certificate subject alternative name matches
requested host name ‘dl-cdn.alpinelinux.org’.
To connect to dl-cdn.alpinelinux.org insecurely, use `--no-check-certificate'.
> cat /etc/apk/repositories
https://dl-cdn.alpinelinux.org/alpine/edge/main
https://dl-cdn.alpinelinux.org/alpine/edge/testing
https://dl-cdn.alpinelinux.org/alpine/edge/community
(from redmine: issue id 8087, created on 2017-10-31, closed on 2018-01-25)