I've ran into a strange problem where a server that's running Debian 7 won't connect to some websites using SSL. After debugging, it turns out that the root certificates for those sites are not known and therefore not trusted. The case I was debugging was from DigiCert "DigiCert Global Root G2".
Of course I tried updating the system and running
sudo update-ca-certificates, but it didn't solve the problem. However, looking at Debian's git repository, it looks like ca-certificates is up-to-date. In fact, the one I was looking for is there.
Am I missing something? Do I need to do something special to keep up-to-date? Or is the version in git just not released yet? In that case, what can I do to be more up-to-date regardless? I'd rather not manually add root certificates.
sudo apt-cache policy ca-certificates ca-certificates: Installed: 20130119+deb7u1 Candidate: 20130119+deb7u2 Version table: 20130119+deb7u2 0 500 http://security.debian.org/ wheezy/updates/main amd64 Packages *** 20130119+deb7u1 0 500 http://ftp.nl.debian.org/debian/ wheezy/main amd64 Packages 100 /var/lib/dpkg/status
I'm not exactly sure what happened, but I'm only getting this after I changed my source list. Seeing as it is from security.debian.org, I'm worried that the repo didn't work before.