Opkg downloads failing - invalid SSL cert?

root@OpenWrt:~# wget https://downloads.openwrt.org/releases/23.05.3/targets/mvebu/cortexa9/p
ackages/Packages.gz
Downloading 'https://downloads.openwrt.org/releases/23.05.3/targets/mvebu/cortexa9/packages/Packages.gz'
Connecting to 151.101.2.132:443
Connection error: Invalid SSL certificate
Hostname	OpenWrt
Model	Linksys WRT1900ACS
Architecture	ARMv7 Processor rev 1 (v7l)
Target Platform	mvebu/cortexa9
Firmware Version	OpenWrt 23.05.3 r23809-234f1a2efa / LuCI openwrt-23.05 branch git-24.073.29889-cd7e519
Kernel Version	5.15.150

check the date on your router.

2 Likes

time zone was set to UTC and synced - i changed it to my local TZ and synced it, but that didn't solve the problem

1 Like

Post the output of date.

1 Like

Tue Jun 4 14:15:28 EDT 2024

which is correct

2 Likes

Are you having these same issues on a desktop browser when navigating to https://downloads.openwrt.org/releases/23.05.3/targets/mvebu/cortexa9/packages/Packages.gz?

If so, please copy/paste the Fingerprint/Serial Number of the certificate displayed provided to your browser.

no - also never had this problem with opkg before - this started after installing a banip update, though i don't think that was the cause

Thank you for informing us of this. It's still curious why you receive a certificate warning.

  • Have you tried disabling banip?
  • Are you running a VPN, Tor, or anything else other than default OpenWrt packages?

Also, please provide the output of:

ubus call system board

i removed banip temporarily (and rebooted) - no vpn or tor on router

i believe these are the only non-default packages and actually some of these may be default...

attendedsysupgrade-common
bcp38 (tested with this disabled)
luci-app-advanced-reboot
luci-app-attendedsysupgrade
luci-app-bcp38
luci-app-uhttpd
luci-theme-bootstrap
nano
openssh-sftp-server
uhttpd

i also just deleted/regenerated the cert for uHTTPd in LuCI (without rebooting) and that didn't work either

root@OpenWrt:~# ubus call system board
{
        "kernel": "5.15.150",
        "hostname": "OpenWrt",
        "system": "ARMv7 Processor rev 1 (v7l)",
        "model": "Linksys WRT1900ACS",
        "board_name": "linksys,wrt1900acs",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "23.05.3",
                "revision": "r23809-234f1a2efa",
                "target": "mvebu/cortexa9",
                "description": "OpenWrt 23.05.3 r23809-234f1a2efa"
        }
}

i still cannot find the problem - any help is appreciated

Try wget:ing the package gz, does it work ?

wget fails with error 5

i gave up trying to solve this and reinstalled - opkg works as expected now