git clone failed with "server certificate verification failed" on X-oracle

[Po-Hsu Lin]

This happened before (bug 1945937)

But now even with ca-certificate package up-to-date (20210119~16.04.1), we are still seeing this issue on X-oracle:
  Running 'git clone --depth=1 https://git.kernel.org/pub/scm/linux/kernel/git/dvhart/futextest.git'
  Cloning into 'futextest'...
  fatal: unable to access 'https://git.kernel.org/pub/scm/linux/kernel/git/dvhart/futextest.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

[Dimitri John Ledkov (xnox)]

in general, xenial systems can access that location:
# git ls-remote https://git.kernel.org/pub/scm/linux/kernel/git/dvhart/futextest.git
b26ae12ab49d75e11ec3ab70e5f48d8360fa39c4 HEAD
b26ae12ab49d75e11ec3ab70e5f48d8360fa39c4 refs/heads/master
a87096a8ba5649282401dda8b55ff454ecdc32fc refs/heads/thp

This leads to believe that possibly proxy is not setup correctly; or there is a firewall issue preventing access to git.kernel.org.

What sort of environment is this running in? is this autopkgtest infra? team-internal maas? certlab?

[Po-Hsu Lin (cypressyew)]

It was working before the -1113 respin.
This one is from oracle cloud with no proxy enabled.

With wget to that repo it will complain about "Issued certificate has expired." not sure if this is related.

date command does not indicate this one is out-of-sync
$ date
Fri Jan 13 12:36:38 UTC 2023

(Comments copied from from Mattermost)