Arch Linux User Repository

As said in https://aur.archlinux.org/packages/ca-certificates-dnie?O=10 a way to get the latest sha256sums is to download the certs and then execute sha256sum name_of_cert for each of the cert you want the sha256sum.

As of today, this is the working sha256sums array:

sha256sums=( 'ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa' '601293ca20b09a03295d196256c6953ff9eba811db8e3ce140413c1bffe9a869' '8fd16a179944d5d1d420af09405eda7abf2a9c742883e8c2f89e0d90afaf754b' 'f038421f07f20d63a20d3691e5a178ab8459ebe570c1647b7690554ef23876ab' '8265756dd5cd8a37ee61e40351288e4b16a89dd248c1ec4eba25aaf161abf498' '9ce630b35f8ae2c6419e734ad9d2fa30476dd9e7394b1e93b27f83f776a024ea' '554153b13d2cf9ddb753bfbe1a4e0ae08d0aa4187058fe60a2b862b2e4b87bcb' '1edb6bd91274882db795bfc514f8aabe10ad955cbccfd3fd5a5b5febb2ce5b68' '9ff23cb9387b9e0083bd5aa1954eeddf792890aa8e67cd4d38dd28af4a439ad8' 'bd3ce843879319a907a12a4eb14fae854b083904e6dc0867f7180525ca2299be' 'f8b9dc6b0b92211c3021e672352ea0fa957a5deea12cd8b8c1861a132902c715' '388f69ca22ca68fc3af5d7186dc6cb48b4dbbbfa61c9e2c9c21ac78ca93ce34c' '28d5c5ec8d25162e246f682e0c347155643a3227f4ef02690dbebea3d84ba469' '7c61dba038d08cb9e432a6d9c160cfc7ce94d2662959aed720e5bd959f9a820d' 'c048661c0cdc0d2c8abb11576aaa3eabd786dd47e3ed8d593d580535e65c2695' '9569948ca121d3c7a1d07bd1dd7e1d48ea7a5b1ee3e7e9557c06c3b8b28c023e' '8a3e67f591fe555229a4128dced9d01eb5d4bec340c56751f1bef978a0fd01ad' '8e6af1e1377adf7ef19a89796d2c3dd72ac09d86448a47c92c2ff91ec3d0259e' '7105b23e17da1a6ba92ade3562c98a0afd5e4e67997d24a2ef8aa003dd35fa64' '3103003e675dbc82720dddd22e1743c2ca5da3804233c126a49ae2bcbae5aa98' '36a06365ccc8f2152c5414726809b1781024d24cb8b358f51fadf577c00cf75e' '0e1fd15b7dd0b9ade9d0ee43b542aca67c57c87d2807e336e1df60b45c377a7c' '501b1f0036f8508ae04b2f0e49404a0db870fde4518b7c4a383071898acb42de' '7419bcd72b0da4d3af3228f26e092e6568c75cdcda384648590788be1bf49912' '193976ca8d2496f994aa80f729023ff880ca782d001b04b1926d2e6bedb23d77' '30ba4691f05b7d1e1d0f71d6887c01e18c75617741dd65cb7bfaa7846a0af39a' 'ee08a28b262058910e6df0213a3a66d51ccef54917cc13b40eb0af609842134d' '170b6525b9324d93c2ab5fdd8d02c7498d66dd6db6401d9eb468bf589abbdfa7' '71171588571b5568e81e68d882fc2bc2cc245e200c05749bb587bc8d2551e673' '89f4d6ef30a86769a1ce8b5ee3b468343c3904851a240a462fb464cf3284d9b8' 'f1a87bfbd40f17e86251dc30e1d0104a01f1c5fbb3a870eb6ac53679962f2798' '8e8ae2e65da95cf8aed23abe5fc30e5ec9b035785a32347958a6e910e2463b20' '949c042368a36db348e850c853edae1a07369e3a2d2dc8c4740c4813a0e0b764' 'c9bd149503a761e7ca179435c26edd88614cae374fc02bcc38ca7be011809758' '00cd58d43148650dcdca46f972dbf0e4a950df7707fb4be0a4120be8bc33ab5d' '1b4ec00eb3a0c43b69f37795552c1e9c7552dde70ff129f411d651c53c54e16c' 'fcfd3df490b9a21b3fad582011a2e6d039561796ac5d850d01b65ac5dda4a3e9' 'b03f7cc682d2f0a7c1d195692cc0de4c35ad017294955d35f6eb743fe78595f3' )

Working sha256sums as of today

sha256sums=( 'ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa' '601293ca20b09a03295d196256c6953ff9eba811db8e3ce140413c1bffe9a869' '8fd16a179944d5d1d420af09405eda7abf2a9c742883e8c2f89e0d90afaf754b' 'f038421f07f20d63a20d3691e5a178ab8459ebe570c1647b7690554ef23876ab' '8265756dd5cd8a37ee61e40351288e4b16a89dd248c1ec4eba25aaf161abf498' '9ce630b35f8ae2c6419e734ad9d2fa30476dd9e7394b1e93b27f83f776a024ea' '554153b13d2cf9ddb753bfbe1a4e0ae08d0aa4187058fe60a2b862b2e4b87bcb' '1edb6bd91274882db795bfc514f8aabe10ad955cbccfd3fd5a5b5febb2ce5b68' '9ff23cb9387b9e0083bd5aa1954eeddf792890aa8e67cd4d38dd28af4a439ad8' 'bd3ce843879319a907a12a4eb14fae854b083904e6dc0867f7180525ca2299be' 'f8b9dc6b0b92211c3021e672352ea0fa957a5deea12cd8b8c1861a132902c715' '388f69ca22ca68fc3af5d7186dc6cb48b4dbbbfa61c9e2c9c21ac78ca93ce34c' '28d5c5ec8d25162e246f682e0c347155643a3227f4ef02690dbebea3d84ba469' '7c61dba038d08cb9e432a6d9c160cfc7ce94d2662959aed720e5bd959f9a820d' 'c048661c0cdc0d2c8abb11576aaa3eabd786dd47e3ed8d593d580535e65c2695' '9569948ca121d3c7a1d07bd1dd7e1d48ea7a5b1ee3e7e9557c06c3b8b28c023e' '8a3e67f591fe555229a4128dced9d01eb5d4bec340c56751f1bef978a0fd01ad' '8e6af1e1377adf7ef19a89796d2c3dd72ac09d86448a47c92c2ff91ec3d0259e' '7f1d7cc6d2bcfb635959811b2784e7e7ae58945dd5b2ffd719ae6c8edc966234' '3103003e675dbc82720dddd22e1743c2ca5da3804233c126a49ae2bcbae5aa98' '36a06365ccc8f2152c5414726809b1781024d24cb8b358f51fadf577c00cf75e' '0e1fd15b7dd0b9ade9d0ee43b542aca67c57c87d2807e336e1df60b45c377a7c' '501b1f0036f8508ae04b2f0e49404a0db870fde4518b7c4a383071898acb42de' '7419bcd72b0da4d3af3228f26e092e6568c75cdcda384648590788be1bf49912' '193976ca8d2496f994aa80f729023ff880ca782d001b04b1926d2e6bedb23d77' '30ba4691f05b7d1e1d0f71d6887c01e18c75617741dd65cb7bfaa7846a0af39a' 'a9e305cd2b5d0377055cdfc24bf9dd74546e78ff05c6cf525956d309655a5682' '170b6525b9324d93c2ab5fdd8d02c7498d66dd6db6401d9eb468bf589abbdfa7' '27dca17fa8636781f043d2da7d3d3efa398d494a3e40806d8bbc40ad26a9cea5' 'ea8ae2a9711b5be96340127f72d00937d0ca67d92e3bab257a4b35a158bcfc89' '7a26f206c82b90ee47fd5bc5581443c653c917307eb528665eb289149887586b' 'f27ea0aeb7b39af6ef506519a146da32bf2af5b2b701ff47feb4231012155ca7' '4d9a2e0e29342c3d58c26e26425363a36cc67101d3151d94920e67e1fcbc8666' '466de7918983b7477c236a642d86975eb736398d62bdaea08d2f91918219acdd' 'efb3109186629895243c27c85719acfda96655bac87b5096a9b7771890d47d81' '1b4ec00eb3a0c43b69f37795552c1e9c7552dde70ff129f411d651c53c54e16c' 'fcfd3df490b9a21b3fad582011a2e6d039561796ac5d850d01b65ac5dda4a3e9' 'b03f7cc682d2f0a7c1d195692cc0de4c35ad017294955d35f6eb743fe78595f3'

'830ff205ae69485059c3fb2376a7f2f9ee1c2a61de259dd09d0bb6ad69f88832'

'4c7d254f258cb71db48d17f6134e7e8d8b47a5f886bd85f397bd47a2750297f2'

'baf597d97d16bc697f8eb2a1e20ce68c08ad11024f9b1f5264271c1525eeb500

'62b9267266212832a8e22dab933d91c7011274acf71703f9cc97833751a6e94f'

)

Working sha256sums as of today

sha256sums=(
'ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa'
'601293ca20b09a03295d196256c6953ff9eba811db8e3ce140413c1bffe9a869'
'8fd16a179944d5d1d420af09405eda7abf2a9c742883e8c2f89e0d90afaf754b'
'f038421f07f20d63a20d3691e5a178ab8459ebe570c1647b7690554ef23876ab'
'8265756dd5cd8a37ee61e40351288e4b16a89dd248c1ec4eba25aaf161abf498'
'9ce630b35f8ae2c6419e734ad9d2fa30476dd9e7394b1e93b27f83f776a024ea'
'554153b13d2cf9ddb753bfbe1a4e0ae08d0aa4187058fe60a2b862b2e4b87bcb'
'1edb6bd91274882db795bfc514f8aabe10ad955cbccfd3fd5a5b5febb2ce5b68'
'9ff23cb9387b9e0083bd5aa1954eeddf792890aa8e67cd4d38dd28af4a439ad8'
'bd3ce843879319a907a12a4eb14fae854b083904e6dc0867f7180525ca2299be'
'f8b9dc6b0b92211c3021e672352ea0fa957a5deea12cd8b8c1861a132902c715'
'388f69ca22ca68fc3af5d7186dc6cb48b4dbbbfa61c9e2c9c21ac78ca93ce34c'
'28d5c5ec8d25162e246f682e0c347155643a3227f4ef02690dbebea3d84ba469'
'7c61dba038d08cb9e432a6d9c160cfc7ce94d2662959aed720e5bd959f9a820d'
'c048661c0cdc0d2c8abb11576aaa3eabd786dd47e3ed8d593d580535e65c2695'
'9569948ca121d3c7a1d07bd1dd7e1d48ea7a5b1ee3e7e9557c06c3b8b28c023e'
'8a3e67f591fe555229a4128dced9d01eb5d4bec340c56751f1bef978a0fd01ad'
'8e6af1e1377adf7ef19a89796d2c3dd72ac09d86448a47c92c2ff91ec3d0259e'
'7f1d7cc6d2bcfb635959811b2784e7e7ae58945dd5b2ffd719ae6c8edc966234'
'3103003e675dbc82720dddd22e1743c2ca5da3804233c126a49ae2bcbae5aa98'
'41b4ae00421679b02fc21fa13cb01c26a29437716bd893864a7be58921c36e58'
'e45790a1c59597f6806eb7d53ff08ae4cc430bcc6cbcb451c5233fc83719c568'
'4e703141498e8d0dd7ab0b92d2050e957eefc279acf856e8c207ab84b5823d29'
'e0dc59b3ad8d217da56e7261bc13a95fb0e22b978856351c0f74a15eb9750a4e'
'057cc505a563a237fcfbfe9d8e4417e0aef1228f921cc81990a1e9727becf07b'
'c58bdd3285d518b3486c9a9e9d26e8af2a1f3d2cfa3896ca341f36d2910caa29'
'a9e305cd2b5d0377055cdfc24bf9dd74546e78ff05c6cf525956d309655a5682'
'170b6525b9324d93c2ab5fdd8d02c7498d66dd6db6401d9eb468bf589abbdfa7'
'27dca17fa8636781f043d2da7d3d3efa398d494a3e40806d8bbc40ad26a9cea5'
'ea8ae2a9711b5be96340127f72d00937d0ca67d92e3bab257a4b35a158bcfc89'
'7a26f206c82b90ee47fd5bc5581443c653c917307eb528665eb289149887586b'
'f27ea0aeb7b39af6ef506519a146da32bf2af5b2b701ff47feb4231012155ca7'
'4d9a2e0e29342c3d58c26e26425363a36cc67101d3151d94920e67e1fcbc8666'
'466de7918983b7477c236a642d86975eb736398d62bdaea08d2f91918219acdd'
'efb3109186629895243c27c85719acfda96655bac87b5096a9b7771890d47d81'
'1b4ec00eb3a0c43b69f37795552c1e9c7552dde70ff129f411d651c53c54e16c'
'fcfd3df490b9a21b3fad582011a2e6d039561796ac5d850d01b65ac5dda4a3e9'
'b03f7cc682d2f0a7c1d195692cc0de4c35ad017294955d35f6eb743fe78595f3'
)

Can't install it as of today. Same error already posted months ago.

sha256sums=( 'ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa' '601293ca20b09a03295d196256c6953ff9eba811db8e3ce140413c1bffe9a869' '8fd16a179944d5d1d420af09405eda7abf2a9c742883e8c2f89e0d90afaf754b' 'f038421f07f20d63a20d3691e5a178ab8459ebe570c1647b7690554ef23876ab' '8265756dd5cd8a37ee61e40351288e4b16a89dd248c1ec4eba25aaf161abf498' '9ce630b35f8ae2c6419e734ad9d2fa30476dd9e7394b1e93b27f83f776a024ea' '554153b13d2cf9ddb753bfbe1a4e0ae08d0aa4187058fe60a2b862b2e4b87bcb' '1edb6bd91274882db795bfc514f8aabe10ad955cbccfd3fd5a5b5febb2ce5b68' '9ff23cb9387b9e0083bd5aa1954eeddf792890aa8e67cd4d38dd28af4a439ad8' 'bd3ce843879319a907a12a4eb14fae854b083904e6dc0867f7180525ca2299be' 'f8b9dc6b0b92211c3021e672352ea0fa957a5deea12cd8b8c1861a132902c715' '388f69ca22ca68fc3af5d7186dc6cb48b4dbbbfa61c9e2c9c21ac78ca93ce34c' '28d5c5ec8d25162e246f682e0c347155643a3227f4ef02690dbebea3d84ba469' '7c61dba038d08cb9e432a6d9c160cfc7ce94d2662959aed720e5bd959f9a820d' 'c048661c0cdc0d2c8abb11576aaa3eabd786dd47e3ed8d593d580535e65c2695' '9569948ca121d3c7a1d07bd1dd7e1d48ea7a5b1ee3e7e9557c06c3b8b28c023e' '8a3e67f591fe555229a4128dced9d01eb5d4bec340c56751f1bef978a0fd01ad' '8e6af1e1377adf7ef19a89796d2c3dd72ac09d86448a47c92c2ff91ec3d0259e' '7f1d7cc6d2bcfb635959811b2784e7e7ae58945dd5b2ffd719ae6c8edc966234' 'e45ed4fee33cee2b124d332400f106897eaa85c8fa1863b45ed51d9ac9ee4217' '41b4ae00421679b02fc21fa13cb01c26a29437716bd893864a7be58921c36e58' 'e45790a1c59597f6806eb7d53ff08ae4cc430bcc6cbcb451c5233fc83719c568' '4e703141498e8d0dd7ab0b92d2050e957eefc279acf856e8c207ab84b5823d29' 'e0dc59b3ad8d217da56e7261bc13a95fb0e22b978856351c0f74a15eb9750a4e' '057cc505a563a237fcfbfe9d8e4417e0aef1228f921cc81990a1e9727becf07b' 'c58bdd3285d518b3486c9a9e9d26e8af2a1f3d2cfa3896ca341f36d2910caa29' 'a9e305cd2b5d0377055cdfc24bf9dd74546e78ff05c6cf525956d309655a5682' '37520a16a4893c4afa2d5f6f98bac666188e89c08dbf2ff8f82d886e788194bc' 'b4b21d6f74ad67dec6f02908e5a0eb44c636eb7c8f73aadc505f9fd6d003d256' 'e04c172af6170fc916e667ac78efaba6d4b884409f55bf157b9136b7e4321aca' '8d7291c31835741d73620da0b48aca72e92ad3c829eae6cc51da635c759fa0e8' 'f27ea0aeb7b39af6ef506519a146da32bf2af5b2b701ff47feb4231012155ca7' '4d9a2e0e29342c3d58c26e26425363a36cc67101d3151d94920e67e1fcbc8666' '466de7918983b7477c236a642d86975eb736398d62bdaea08d2f91918219acdd' 'efb3109186629895243c27c85719acfda96655bac87b5096a9b7771890d47d81' '1b4ec00eb3a0c43b69f37795552c1e9c7552dde70ff129f411d651c53c54e16c' 'fcfd3df490b9a21b3fad582011a2e6d039561796ac5d850d01b65ac5dda4a3e9' 'b03f7cc682d2f0a7c1d195692cc0de4c35ad017294955d35f6eb743fe78595f3'

Same here cannot install the page because file validation

==> ERROR: One or more files did not pass the validity check! error: failed to download sources for 'ca-certificates-fnmt-20250531-1': error: packages failed to build: ca-certificates-fnmt-20250531-1

Cannot install the package because file validation fails. Am I missing something?

Thanks @sl1pkn07 for maintaining this package, it's very helpful.

As someone else posted, I also get the following curl error while trying to download the certificates:

curl: (60) SSL certificate problem: unable to get local issuer certificate

I've investigated a bit and the issue is caused by the following: The package gets all the FNMT certs from https://www.sede.fnmt.gob.es, but the website itself is reached through HTTPS, and it is signed with a certificate chain.

The certificate chain is composed with: AC RAIZ FNMT-RCM > AC Componentes Informáticos > www.sede.fnmt.gob.es (server cert)

'AC RAIZ FNMT-RCM' is provided by the ca-certificates-mozilla package and will most likely be found in your system CA certs. The server cert for www.sede.fnmt.gob.es is provided by the webserver serving the page, but the webserver doesn't provide the intermediate certificate ('AC Componentes Informáticos'), and curl fails to verify the server certificate and gives the previous error.

The browsers don't give an error because they are able to obtain the intermediate certificate through the AIA (Authority Information Access) extension, which tells them where to download the missing intermediate certificate. Curl, however, doesn't do this automatically.

In this case the server certificate contains the following AIA details:

            Authority Information Access: 
                OCSP - URI:http://ocspcomp.cert.fnmt.es/ocsp/OcspResponder
                CA Issuers - URI:http://www.cert.fnmt.es/certs/ACCOMP.crt

From this we can pull the intermediate cert ACCOMP.crt (through HTTP!) and use that to complete the certificate chain. Note that ACCOMP.crt is nothing but the cert for 'AC Componentes Informáticos' which is also downloaded by this package, they have the exact same SHA sum.

Once we have the cert we can extract the pem with the following command:

openssl x509 -in ACCOMP.crt -out ACCOMP.pem

And make it available to curl it to curl with:

CURL_CA_BUNDLE=./ACCOMP.pem curl ...

with which it should no longer fail.

As per the changes required to fix this in the PKGBUILD, we should probably add ca-certificates-mozilla package as a dependency (to make sure the root cert is in the CA), and download and install ACCOMP.pem from http://www.cert.fnmt.es/certs/ before trying to download any other certs, but I don't know what would be the best way to achieve this (maybe playing with DLAGENTS?).

Working as today sha256sums=(

'ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa'

'601293ca20b09a03295d196256c6953ff9eba811db8e3ce140413c1bffe9a869'

'8fd16a179944d5d1d420af09405eda7abf2a9c742883e8c2f89e0d90afaf754b'

'830ff205ae69485059c3fb2376a7f2f9ee1c2a61de259dd09d0bb6ad69f88832'

'f038421f07f20d63a20d3691e5a178ab8459ebe570c1647b7690554ef23876ab'

'8265756dd5cd8a37ee61e40351288e4b16a89dd248c1ec4eba25aaf161abf498'

'9ce630b35f8ae2c6419e734ad9d2fa30476dd9e7394b1e93b27f83f776a024ea'

'554153b13d2cf9ddb753bfbe1a4e0ae08d0aa4187058fe60a2b862b2e4b87bcb'

'1edb6bd91274882db795bfc514f8aabe10ad955cbccfd3fd5a5b5febb2ce5b68'

'9ff23cb9387b9e0083bd5aa1954eeddf792890aa8e67cd4d38dd28af4a439ad8'

'19001c4ba4846d17809b25f90a94d1cab20a86777968737ce4b34bb9d7eae078'

'5320d7a5dfc8023cedb0c233363a318eb1daa3d35d02b5d986dca2b5b98393b3'

'9dd74806fd1e3ed1cf65cf04764f034e7e04bf23c753f2aff3c749cd45227f11'

'4c7d254f258cb71db48d17f6134e7e8d8b47a5f886bd85f397bd47a2750297f2'

'e40f1d8891bbe0243306e70f4c0d34199f788958be1e40261b3ab4b957382c29'

'988a86178185162999bb6f0ade55c3ff0047b58ba0088f0e308e194456cf22d2'

'b1ae56dfacbb14838b9208567a8952ef977ea5ae61609dc4dd1140f4ac8b60e3'

'f91deaa0faef3bd9d2c9764ab9b14d17ce69427f785a1bf76d38222660976619'

'10f54909204a9ec23e9e9317739a521499018ed5316fdae6a7367ac00d5a5660'

'b03f7cc682d2f0a7c1d195692cc0de4c35ad017294955d35f6eb743fe78595f3'

'fcfd3df490b9a21b3fad582011a2e6d039561796ac5d850d01b65ac5dda4a3e9'

'baf597d97d16bc697f8eb2a1e20ce68c08ad11024f9b1f5264271c1525eeb500'

)

I get this errors: curl: (60) SSL peer certificate or SSH remote key was not OK More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the webpage mentioned above.