[Bug 1777474] Re: Netinstall ISO offers usage of HTTPS mirrors but lacks ca-certificates

[Pascal Ernster]

Yes, I can reproduce the issue with that ISO as well. Since I've booted
the ISO in a VM with only a serial console and no video card, I've added
"console=ttyS0,115200" to the installer kernel's cmdline in GRUB, and
cancelled installation as soon as possible to get to the big menu with
all the installation steps, so I could select "Execute shell". From
there, I've tried downloading a file from an HTTPS site with a valid
Let's Encrypt certificate, and got the ominous "ERROR: cannot verify
$HOSTNAME's certificate, issued by $CA: Unable to locally verify the
issuer's authority." message.

So yes, the "official" installer ISO images seem to lack the ca-
certificates package as well.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to debian-installer in Ubuntu.
https://bugs.launchpad.net/bugs/1777474

Title:
  Netinstall ISO offers usage of HTTPS mirrors but lacks ca-certificates

Status in debian-installer package in Ubuntu:
  Incomplete

Bug description:
  When using the netboot ISO (https://ftp.halifax.rwth-
  aachen.de/ubuntu/dists/bionic/main/installer-
  amd64/20101020ubuntu543/images/netboot/mini.iso) in the "expert
  command line mode", the installer asks the user to select between the
  protocols HTTP, HTTPS and FTP when specifying a mirror server.
  However, HTTPS mirrors don't work at all since the ISO lacks the "ca-
  certificates" package.

  When using the installer in the "non-expert"/"normal" command line
  mode, even when manually specifying an HTTPS mirror, either HTTP gets
  used or the mirror server's certificates don't get checked at all
  (haven't found out yet which of the two possibilities applies).

  Either way, the ca-certificates package should be included in the
  netboot iso.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1777474/+subscriptions