apt命令报证书错误的解决方法------- Certificate verification failed: The certificate is NOT trusted.

apt命令报证书错误的解决方法------- Certificate verification failed: The certificate is NOT trusted.

一、错误描述
用apt-get install命令安装软件或apt-get update命令更新时报错，错误如下：

Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 101.6.15.130 443]
E: Failed to fetch https://mirrors.tuna.tsinghua.edu.cn/ubuntu/pool/universe/t/traceroute/traceroute_2.1.0-2_amd64.deb  Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate.  Could not handshake: Error in the certificate verification. [IP: 101.6.15.130 443]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

二、解决方式
1.更改源文件，将所有的https改成http：

sudo vi /etc/apt/sources.list

我用的是清华的镜像，更改过后如下：

 deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic main restricted universe multiverse
 deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-updates main restricted universe multiverse
 deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-backports main restricted universe multiverse
 deb http://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-security main restricted universe multiverse

2.更新源

sudo apt-get update

3.安装/更新证书ca-certificates

sudo apt-get install --reinstall ca-certificates

4.参照步骤一将镜像源文件改回https
改完后/etc/apt/sources.list 文件内容如下：

 deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic main restricted universe multiverse
 deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-updates main restricted universe multiverse
 deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-backports main restricted universe multiverse
 deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-security main restricted universe multiverse

5.再次更新源

sudo apt-get update

6.至此可以正常安装软件了。OK！

sudo apt-get install xxxxx