Raco pkg install error: certificate verify failed

Questions & Answers
1

Hello, thank for the new version of Racket. I just managed to compile
this new version and encountered a problem as I tried to install some
packages via the package manager in drracket but that attempt failed.
Than I tried to solve the problem by using raco manually in the
commandline. The result was the same. The installation of the package
failed:

axel@axels-tux2:~/racket-8.12/bin$ ./raco pkg install scribble-math
Resolving "scribble-math" via https://pkgs.racket-lang.org
ssl-connect: connect failed (error:1416F086:SSL
routines:tls_process_server_certificate:certificate verify failed)

Than I tried this with racket-8.11 and racket-8.9 with the same result.
Even an upgrade of the catalog was impossible due to the inability of
the racket-installation to verify the tls_process_server_certificate. I
am not a professional programmer but an enthusiastic user who happens to
like this variant of scheme but none the less I need a working
racket-installation so I need some help to fix this problem.

Thanks in advance for any helpful advice.

PS: I am working with Kubuntu - 20.04

1 Like
2

Hi @Axel

Can you confirm you can get to https://pkgs.racket-lang.org/ in the browser

Does it give any certificate errors?

Stephen

3

Hi @Stephen,

Thank you for your answer. I have no problems getting to the packages
website https://pkgs.racket-lang.org/. Everything's fine with the
certificate.

4

Generally this problem happens because you have an out-of-data set of root certificates on your system. Probably there are relevant updates for this.

5

How can I update the data set of root certificates? Meanwhile I discovered this problem with all my Racket-Installations on my laptop (I have installed racket 8.9, 8.11 and now 8.12). They all are home built and installed with prefix $HOME/racket-8.XX. Until now this problem only exists with racket-lang. I don't work with superuser rights because I am not so good in system administration. I hope there is no need for me install a complete new operating system on my laptop.
Thank you for your help so far.

6

I think, you can update the certificates with update-ca-certificates but
look around for info first.

https://www.cyberciti.biz/faq/update-ca-certificates-command-examples-in-linux-to-ssl-ca-certificates/

7

Hi @Axel

The Kubuntu community forum Community | Kubuntu should be able to help with updating certificates on Kubuntu 20.04

I did find the following page - but I am no expert so it is probably better to ask the community familiar with Kubuntu 20.04

image
image1712×2020 199 KB

at Release Kubuntu Manual 20.04 LTS · kubuntu-team/kubuntu-manual · GitHub
via Help and Support | Kubuntu

8

Hi @Jens Axel Søgaard,hi @Stephen De Gabrielle!

Thanks for your thoughts concerning my little problem with racket's ssl
certificate verifications. Through your hints I got a clue where to
search for the reason. I found it and was than able to solve the problem.

Racket now runs with all versions including 8.12! And so far I am quite
happy with 8.12.

2 Likes