Host mozilla.debian.net lacks proper SSL\TLS certificate

[Mike Hommey]

On Sat, Aug 27, 2016 at 01:13:05PM +0500, Alexander V. Makartsev wrote:
> Hello.
> 
> I don't know if this is right place to send report, but it would be
> nice to fix this problem.  I have successfully updated my apt source
> lists to https for quite some time, and it looks like host debian.net
> lacks proper SSL\TLS certificate.
> 
> apt-get output: ================= Err https://mozilla.debian.net
> jessie-backports/firefox-release amd64 Packages SSL: certificate
> subject name (debian.org) does not match target host name
> 'mozilla.debian.net' Err https://mozilla.debian.net
> jessie-backports/firefox-release i386 Packages  SSL: certificate
> subject name (debian.org) does not match target host name
> 'mozilla.debian.net' Ign https://mozilla.debian.net
> jessie-backports/firefox-release Translation-en_US Ign
> https://mozilla.debian.net jessie-backports/firefox-release
> Translation-en Fetched 494 kB in 11s (44,3 kB/s)
> W: Failed to fetch
> https://mozilla.debian.net/dists/jessie-backports/firefox-release/binary-amd64/Packages
> SSL: certificate subject name (debian.org) does not match target host
> name 'mozilla.debian.net'
> 
> W: Failed to fetch
> https://mozilla.debian.net/dists/jessie-backports/firefox-release/binary-i386/Packages
> SSL: certificate subject name (debian.org) does not match target host
> name 'mozilla.debian.net'
> 
> E: Some index files failed to download. They have been ignored, or old
> ones used instead.  =================

mozilla.debian.net, like many other sites, is hosted on some sort of
debian CDN, and that CDN doesn't have a setup, AFAIK, that allows for
SSL virtual hosting. Debian admins, do you know if there's anything that
can be done here? (at least, it might be better to just not listen on
the HTTPS port for those virtual hosts)

Mike