Não é possível atualizar automaticamente o Tails

Question

Eu inicializei o Tails 2.4 e fui saudado com:

Error while checking for upgrades

Executar atualização manualmente no terminal revela erros:

amnesia@amnesia:~$ tails-upgrade-frontend-wrapper
localuser:tails-upgrade-frontend being added to access control list
Prototype mismatch: sub Tails::MirrorPool::assert ($;$) vs none at /usr/share/perl5/Tails/MirrorPool.pm line 28.
Prototype mismatch: sub Tails::IUK::Frontend::assert ($;$) vs none at /usr/share/perl5/Tails/IUK/Frontend.pm line 42.
Error while checking for upgrades
<b><b>Could not determine whether an upgrade is available from our website.</b>

Check your network connection, and restart Tails to try upgrading again.

If the problem persists, go to file:///usr/share/doc/tails/website/doc/upgrade/error/check.en.html</b>

For debugging information, execute the following command: sudo tails-debugging-info

** (zenity:7650): WARNING **: Couldn't register with accessibility bus: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.
Gtk-Message: GtkDialog mapped without a transient parent. This is discouraged.
Error while checking for upgrades
<b><b>Could not determine whether an upgrade is available from our website.</b>

Check your network connection, and restart Tails to try upgrading again.

If the problem persists, go to file:///usr/share/doc/tails/website/doc/upgrade/error/check.en.html</b>

For debugging information, execute the following command: sudo tails-debugging-info
exit code: 2816

stdout:


stderr:
Could not download 'https://tails.boum.org/upgrade/v1/Tails/2.4/i386/stable/upgrades.yml', request failed (Peer certificate cannot be authenticated with given CA certificates): server certificate verification failed. CAfile: /usr/local/etc/ssl/certs/tails.boum.org-CA.pem CRLfile: none
 at /usr/bin/tails-iuk-get-upgrade-description-file line 21.
 at /usr/bin/tails-upgrade-frontend line 22.
localuser:tails-upgrade-frontend being removed from access control list

Como atualizar sem reinstalação manual completa?

    

Answer 1

O problema está nos certificados:

Could not download 'https://tails.boum.org/upgrade/v1/Tails/2.4/i386/stable/upgrades.yml',
request failed (Peer certificate cannot be authenticated with given CA certificates):
server certificate verification failed. CAfile: /usr/local/etc/ssl/certs/tails.boum.org-CA.pem 

O

link mudou para Vamos Criptografar autoridade de certificação e esses novos certificados estão faltando em versões menores que 2.7 .

Você pode consertá-lo fazendo o download de Lets encrypt certs:

1. vá para o link
2. abra um dos Certificados intermediários Ativos - > Vamos criptografar a autoridade X3 (IdenTrust cruzou a assinatura)
3. abra o tails.boum.org-CA.pem e sobrescreva seu conteúdo com o certificado Let's encrypt.

sudo nano /usr/local/etc/ssl/certs/tails.boum.org-CA.pem (Você precisará configurar a senha de administração antes)

Em seguida, execute novamente tails-upgrade-frontend-wrapper .

Repita até que o Tails 2.7 esteja instalado.