freesh-archive-keyring_1.1 breaks apt update in Debian 12

Alexandre Oliva lxoliva at fsfla.org
Mon Dec 15 03:14:49 UTC 2025


On Dec 14, 2025, Jason Self <jself at gnu.org> wrote:

> Upon further investigation I found that the mirror:// method only works
> on http; it appears that fsfla.org has begun to redirect http traffic
> to https which caused the breakage.

Erhm.  My apologies.  That was my fault.

I extended the certificates for both fsfla.org and linux-libre.fsfla.org
on that day, to cover some additional aliases, noted that certbot
reported it had enabled the redirect, proceeded to reverse those
changes, succeeded at that for fsfla.org, but failed at that for
linux-libre.fsfla.org because the change had been different there and I
didn't expect nor notice the difference, and failed to test it.

So IIUC people should be able to update without local changes again, and
it doesn't hurt that they'll get the mirror+https URL.  It's probably
safer that way.

> I've pushed version 1.2 of the freesh-archive-keyring package which
> contains this change

Thanks!

-- 
Alexandre Oliva, happy hacker            https://blog.lx.oliva.nom.br/
Free Software Activist     FSFLA co-founder     GNU Toolchain Engineer
Learn the truth about Richard Stallman at https://stallmansupport.org/


More information about the linux-libre mailing list