certificate is not trusted

debain 升级zabbix-agent

wget https://repo.zabbix.com/zabbix/5.5/debian/pool/main/z/zabbix-release/zabbix-release_5.5-1+debian10_all.deb

提示报错：

ERROR: The certificate of ‘repo.zabbix.com’ is not trusted.

ERROR: The certificate of ‘repo.zabbix.com’ has expired.

vim /etc/ca-certificates.conf

注释掉#mozilla/DST_Root_CA_X3.crt

#mozilla/DST_Root_CA_X3.crt

执行：update-ca-certificates -f -v

…

136 added, 0 removed; done.

Running hooks in /etc/ca-certificates/update.d…

done.

再执行wget就可以了。

wget https://repo.zabbix.com/zabbix/5.5/debian/pool/main/z/zabbix-release/zabbix-release_5.5-1+debian10_all.deb

apt-get remove zabbix-agent

dpkg -i zabbix-release_5.5-1+debian10_all.deb

apt-get update

apt-get install zabbix-agent

Configuration file ‘/etc/zabbix/zabbix_agentd.conf’
==> File on system created by you or by a script.
==> File also in package provided by package maintainer.
What would you like to do about it ? Your options are:
Y or I : install the package maintainer’s version
N or O : keep your currently-installed version
D : show the differences between the versions
Z : start a shell to examine the situation
The default action is to keep your current version.
*** zabbix_agentd.conf (Y/I/N/O/D/Z) [default=N] ? y

这个选择Y或者N 都会升级到 6.0.25rc1

为什么不是选择的5.5呢？

另外一种情况：

cd /etc/apt/sources.list.d && vim zabbix.list

#deb https://repo.zabbix.com/zabbix/5.5/debian buster main
#deb-src https://repo.zabbix.com/zabbix/5.5/debian buster main
deb http://repo.zabbix.com/zabbix/5.5/debian buster main
deb-src http://repo.zabbix.com/zabbix/5.5/debian buster main

https改为http再apt-get update 即可。