From dcbd8a1f42b60f74b2d118b5d56c7d9bedabc84e Mon Sep 17 00:00:00 2001 From: Daniil Baturin Date: Sat, 5 Jun 2021 17:58:50 +0200 Subject: Update the Saltstack repo URL and disable HTTPS cert verification. Jessie lacks a CA or intermediate cert for the Amazon cert that Saltstack is now using, so build fails because the cert looks untrusted. Since APT will always verify GPG signatures, server authentication is redundant and disabling it doesn't create a security issue. --- scripts/live-build-config | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'scripts') diff --git a/scripts/live-build-config b/scripts/live-build-config index 4fedfeb1..aad076b0 100755 --- a/scripts/live-build-config +++ b/scripts/live-build-config @@ -58,7 +58,8 @@ lb config noauto \ --updates false \ --security true \ --apt-options "--yes -oAcquire::Check-Valid-Until=false -oDebug::BuildDeps=true -oDebug::pkgDepCache::AutoInstall=true \ - -oDebug::pkgDepCache::Marker=true -oDebug::pkgProblemResolver=true -oDebug::Acquire::gpgv=true" \ + -oDebug::pkgDepCache::Marker=true -oDebug::pkgProblemResolver=true -oDebug::Acquire::gpgv=true \ + -o Acquire::https::Verify-Peer=false" \ --apt-indices false "${@}" """ -- cgit v1.2.3