download.vscodium.com: The name in the certificate does not match the expected. #4

Closed
opened 2025-09-10 22:49:51 -05:00 by giteasync · 3 comments
Owner

Originally created by @kevinoid on GitHub.

With an apt source configured according to the instructions on vscodium.com, apt update produces the following error:

Warning: Failed to fetch https://download.vscodium.com/debs/dists/vscodium/InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 2400:52e0:1a01::1002:1 443]
Warning: Some index files failed to download. They have been ignored, or old ones used instead.

It appears that the certificate used by download.vscodium.com (169.150.236.98 2400:52e0:1a01::1002:1 2400:52e0:1a00:0:0:0:1207:2 and likely others) has CN=*.b-cdn.net and subjectAltName: *.b-cdn.net b-cdn.net, which does not include download.vscodium.com.

Perhaps the instructions should be updated to use a different hostname, or the CDN configured to use a different certificate?

Thanks for investigating, and for maintaining VSCodium!
Kevin

Originally created by @kevinoid on GitHub. With an apt source configured according to [the instructions on vscodium.com](https://vscodium.com/#install-on-debian-ubuntu-deb-package), `apt update` produces the following error: > Warning: Failed to fetch https://download.vscodium.com/debs/dists/vscodium/InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 2400:52e0:1a01::1002:1 443] > Warning: Some index files failed to download. They have been ignored, or old ones used instead. It appears that the certificate used by download.vscodium.com (169.150.236.98 2400:52e0:1a01::1002:1 2400:52e0:1a00:0:0:0:1207:2 and likely others) has `CN=*.b-cdn.net` and `subjectAltName: *.b-cdn.net b-cdn.net`, which does not include download.vscodium.com. Perhaps the instructions should be updated to use a different hostname, or the CDN configured to use a different certificate? Thanks for investigating, and for maintaining VSCodium! Kevin
Author
Owner

@daiyam commented on GitHub:

CDN hasn't be paid, yet. That's why we get that error.

@PalinuroSec

@daiyam commented on GitHub: CDN hasn't be paid, yet. That's why we get that error. @PalinuroSec
Author
Owner

@GitMensch commented on GitHub:

As the other issue was closed in favor of this one - I think we need to reopen it, no?

@GitMensch commented on GitHub: As the other issue was closed in favor of this one - I think we need to reopen it, no?
Author
Owner

@daiyam commented on GitHub:

Oops wrong dups: https://github.com/VSCodium/vscodium/issues/2279

@daiyam commented on GitHub: Oops wrong dups: https://github.com/VSCodium/vscodium/issues/2279
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: VSCodium/vscodium.github.io#4