TUNA 源Certificate verification failed: The certificate is NOT trusted异常解决

使用清华tuna源时，报错

Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification.

估计是TUNA的https证书机构系统验证不信任导致，翻了十几篇解决方案，有“apt install ca-certificates”【。。。apt已经报错了，这是要怎样】，有“add [trusted=yes] in the sources.list” 这个并不能绕过证书验证,存在bug无法覆盖signature check结果。

一劳永逸的办法就是直接跳过证书验证。步骤如下:

创建/etc/apt/apt.conf.d/99verify-peer.conf文件写入以下配置

vim /etc/apt/apt.conf.d/99verify-peer.conf
Acquire { https::Verify-Peer false }

apt update 无报错

参考

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872543
https://manpages.debian.org/testing/apt/apt-transport-https.1.en.html