Khadas Ubuntu repository broken

when trying to update the vim3 through terminal I recieve this error
Err:7 https://dl.khadas.com/repos/vim3 bionic Release
Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 54.197.197.165 443]

Khadas is aware of the expired cert. May be a few days before they get it renewed, because of Chinese national holiday.

1 Like

Sorry for the troubles, we will fix it when we back to our office Shenzhen :smile:

u can make hack like this

curl --insecure

The problem remains with VIM3_Ubuntu-gnome-focal_Linux-4.9_arm64_EMMC_V1.0.2-210207.raw.img.xz

what kind of problem ?

SOLVED

Khadas doesn’t publish their GPG key on the public servers, where this can be added with some special apt-get fiddling.

This means that the repository signing-key will need to be manually downloaded and added to the apt key-ring, stored in /etc/apt/trusted.gpg.

The syntax is simple, and it’s very easy to understand what this one-liner is doing:
~$ wget --quiet -O - https://dl.khadas.com/repos/fenix.key | sudo apt-key add -

This is all regular Debian stuff, going back to when signing was first added to apt.

No No No. If you use our released images, it should have no problem with the upgrade.

Right, understood. But when building a non-Fenix Debian system, like Armbian, builders will want the Khadas repository for board utilities, like the fan scripts, etc. The repository needs this manual import of the key to function.

I ran into this when building a non-Fenix, Debian Bullseye with the Manjaro kernel and debbootstrap, similar to how it’s done for Pinebook Pro!

OK. Understood.

You can get the key here:

https://dl.khadas.com/repos/fenix.key

Right. That’s where I get it in the bash command line, with wget!

1 Like