Public bug reported: Description: Ubuntu 24.04.4 LTS (Noble), ca-certificates 20240203 does not include the Let's Encrypt YR1 intermediate certificate (ISRG Root YR), which was introduced by Let's Encrypt in September 2025.
Symptoms: - git clone via HTTPS fails - openssl s_client returns: unable to get local issuer certificate - Verify return code: 20 Steps to reproduce: openssl s_client -connect gitlab.lab.gicloud.de:443 </dev/null Workaround: sudo curl -o /usr/local/share/ca-certificates/isrg-root-yr.crt \ https://letsencrypt.org/certs/isrgrootyr.pem sudo update-ca-certificates ** Affects: ca-certificates (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2156689 Title: ca-certificates 20240203 missing Let's Encrypt YR1 / ISRG Root YR To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/2156689/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
