Latest snapshot ca-bundle: 20230311-1 -> 20211016-1

Can anyone advise why the certificate authority bundle is being downgraded to 2021 from 2023?

I'm looking at r23175

It has been upgrade from 2021 to 2023. It has been part of the upgrade I performed today (with 5.15.114). Do you see 2021 ? I can confirm that I see 2023. I'm also on r23175 (x86/64).

The ca-certificates package is still the 2021 version in the 23.05 branch, while master and also 22.03 have been updated to the 2023 version.

If you are staying in the same branch, you should not see that kind on move. It might be happen if you move to OpenWrt 23.05.

But note that the re-written buildbot code has been somewhat buggy and has occasionally failed (also due to several recent changes in toolchain options etc. done in master after the 23.05 was safely branched off), and the effects have hit some architectures worse than others.

E.g. aarch64_cortex-a53 for mt7622 and ipq807x has been last time succesfully built 5 days ago, while the ca-certificates package was updated only 3 days ago, so there are no compiled version 2023 .ipks for download, yet. (just the previous year 2021 version).
But if you (or somebody else) has compiled a personal version from source code, that would have had the new version for the last 3 days.

3 Likes
BusyBox v1.36.1 (2023-05-28 18:22:23 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r23147-4b8b2f4f97
 -----------------------------------------------------
root@OpenWrt:~# auc
auc/0.3.2-1
Server:    https://sysupgrade.openwrt.org
Running:   SNAPSHOT r23147-4b8b2f4f97 on mediatek/mt7622 (netgear,wax206)
Available: SNAPSHOT r23175-446178dc36
Requesting package lists...
 kmod-crypto-gf128: 5.15.113-1 -> 5.15.114-1
 kmod-crypto-manager: 5.15.113-1 -> 5.15.114-1
 kmod-crypto-ctr: 5.15.113-1 -> 5.15.114-1
 kmod-nft-fib: 5.15.113-1 -> 5.15.114-1
 kmod-nfnetlink: 5.15.113-1 -> 5.15.114-1
 kmod-crypto-hash: 5.15.113-1 -> 5.15.114-1
 kmod-nf-reject6: 5.15.113-1 -> 5.15.114-1
 kmod-crypto-aead: 5.15.113-1 -> 5.15.114-1
 kmod-nf-flow: 5.15.113-1 -> 5.15.114-1
 kmod-lib-crc-ccitt: 5.15.113-1 -> 5.15.114-1
 kmod-pppoe: 5.15.113-1 -> 5.15.114-1
 kmod-pppox: 5.15.113-1 -> 5.15.114-1
 kmod-mt7622-firmware: 5.15.113+2023-05-13-969b7b5e-1 -> 5.15.114+2023-05-13-969b7b5e-1
 kmod-nf-reject: 5.15.113-1 -> 5.15.114-1
 base-files: 1531-r23147-4b8b2f4f97 -> 1531-r23175-446178dc36
 kmod-nf-nat: 5.15.113-1 -> 5.15.114-1
 kmod-crypto-crc32c: 5.15.113-1 -> 5.15.114-1
 kmod-mt7615e: 5.15.113+2023-05-13-969b7b5e-1 -> 5.15.114+2023-05-13-969b7b5e-1
 kmod-crypto-hmac: 5.15.113-1 -> 5.15.114-1
 kmod-mt7615-common: 5.15.113+2023-05-13-969b7b5e-1 -> 5.15.114+2023-05-13-969b7b5e-1
 kmod-crypto-acompress: 5.15.113-1 -> 5.15.114-1
 kmod-lib-crc32c: 5.15.113-1 -> 5.15.114-1
 kmod-crypto-sha512: 5.15.113-1 -> 5.15.114-1
 kmod-mt76-connac: 5.15.113+2023-05-13-969b7b5e-1 -> 5.15.114+2023-05-13-969b7b5e-1
 kmod-crypto-seqiv: 5.15.113-1 -> 5.15.114-1
 kmod-nft-nat: 5.15.113-1 -> 5.15.114-1
 kmod-thermal: 5.15.113-1 -> 5.15.114-1
 kmod-crypto-ghash: 5.15.113-1 -> 5.15.114-1
 kmod-hwmon-core: 5.15.113-1 -> 5.15.114-1
 kmod-mt7915e: 5.15.113+2023-05-13-969b7b5e-1 -> 5.15.114+2023-05-13-969b7b5e-1
 kmod-crypto-ccm: 5.15.113-1 -> 5.15.114-1
 kmod-nf-log: 5.15.113-1 -> 5.15.114-1
 kmod-leds-gpio: 5.15.113-1 -> 5.15.114-1
 kmod-gpio-button-hotplug: 5.15.113-3 -> 5.15.114-3
 kmod-nf-log6: 5.15.113-1 -> 5.15.114-1
 kmod-mac80211: 5.15.113+6.1.24-4 -> 5.15.114+6.1.24-4
 kmod-ppp: 5.15.113-1 -> 5.15.114-1
 kmod-nft-offload: 5.15.113-1 -> 5.15.114-1
 kmod-crypto-null: 5.15.113-1 -> 5.15.114-1
 kmod-nf-conntrack: 5.15.113-1 -> 5.15.114-1
 kmod-mt7915-firmware: 5.15.113+2023-05-13-969b7b5e-1 -> 5.15.114+2023-05-13-969b7b5e-1
 kmod-crypto-gcm: 5.15.113-1 -> 5.15.114-1
 **ca-bundle: 20230311-1 -> 20211016-1**
 kmod-crypto-cmac: 5.15.113-1 -> 5.15.114-1
 kmod-crypto-rng: 5.15.113-1 -> 5.15.114-1
 kmod-nf-conntrack6: 5.15.113-1 -> 5.15.114-1
 kmod-lib-lzo: 5.15.113-1 -> 5.15.114-1
 kmod-mt76-core: 5.15.113+2023-05-13-969b7b5e-1 -> 5.15.114+2023-05-13-969b7b5e-1
 kmod-nft-core: 5.15.113-1 -> 5.15.114-1
 kmod-slhc: 5.15.113-1 -> 5.15.114-1
 kmod-cfg80211: 5.15.113+6.1.24-4 -> 5.15.114+6.1.24-4
Are you sure you want to continue the upgrade process? [N/y]

Definitely seeing a downgrade on mt7622

1 Like