I just installed 18.04 on a Dell T310 server, and I'm noticing that the text console is unusably slow when scrolling text.

To add some numbers to this, invoking dmesg immediately after boot over an ssh connection takes about half a second to show all of the output, but doing it on the console it takes about 36 seconds for the same amount of output. (A 72x slowdown)

The console stops for a moment immediately after GRUB, and then appears to switch graphics modes to something higher resolution.

Something that worked in the past was forcing vesafb in GRUB (GRUB_CMDLINE_LINUX="video=vesafb:ywrap,mtrr:3" in /etc/default/grub), but that does nothing here.

This has to be something framebuffer related. In dmesg, I see the following:

[    0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz-4.15.0-72-generic root=/dev/mapper/ubuntu--vg-ubuntu--lv ro video=vesafb:ywrap,mtrr:3
[    0.212182] pci 0000:01:03.0: BAR 0: assigned to efifb
[    1.115763] efifb: probing for efifb
[    1.115776] efifb: framebuffer at 0xd9800000, using 1216k, total 1216k
[    1.115779] efifb: mode is 640x480x32, linelength=2560, pages=1
[    1.115782] efifb: scrolling: redraw
[    1.115784] efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0
[    1.142136] fb0: EFI VGA frame buffer device
[    4.121850] fb: switching to mgag200drmfb from EFI VGA
[    4.208453] fbcon: mgadrmfb (fb0) is primary device
[    4.726896] mgag200 0000:01:03.0: fb0: mgadrmfb frame buffer device

At this point, I'm more interested in a usable console than I am having it at high resolution (640x480 is perfectly acceptable).

How do I speed this up?

Edit 1:

Setting nomodeset in GRUB_CMDLINE_LINX in /etc/default/grub helped a little, the mode is now down to 640x480 and isn't unusably slow (about 15 seconds to scroll dmesg now), but it's still doing some kind of fancyness I'd rather completely turn off and just have a text mode console.

I have an /etc/network/interfaces file (on a 16.04 box) that looks like this:

# The primary network interface
auto eth0
iface eth0 inet static
address 192.168.88.50
netmask 255.255.255.0
gateway 192.168.88.1
dns-nameservers 192.168.88.1
dns-domain mynet.lan

You'd expect this to result in eth0 coming up with the specified IP. That is not happening. During boot, I see a line that says:

IP-Config: eth0 hardware address e0:db:55:0c:34:7e mtu 1500 DHCP

..and then the interface is brought up with an address ever-so-helpfully provided by the local DHCP server.

More troubling, this IP-Config line only shows during boot and is not visible in any of my log files.

What is IP-Config, why is it stomping on my interfaces file, and where can it be configured?

More info:

The bogus address (in my case, 192.168.88.222) is only created during boot, sometime before the if* scripts get to it. ip addr shows the wrong address (gleaned from DHCP) directly above the right address (which is marked as "secondary").

tl;dr: Something is broadcasting for DHCP and assigning it to the NIC before they're brought up normally using the if* commands, leading to two addresses on the same NIC.

If I down the interface, ip address shows the bogus address still associated with the NIC. If I issue an ip address flush eth0, the bogus address is removed, and does not come back on a subsequent interface restart - but it does come back when the system is rebooted.

In Ubuntu 14.04 and below, there is a file located in /etc/init/rc-sysconfig.conf or /etc/init/failsafe.conf that pauses the startup process for up to two minutes if the NICs on the machine are not alive.

Ubuntu 16.04 appears to do away with both of these files, yet there is still a delay if it takes a while to bring the network interfaces up.

Where is this delay configured on 16.04 and up?

Note: This is for a 16.04 Server image, so the standard live environment is not available.

I'm trying to access apt from the ALTF2 extra shell in order to install the package required to make ATA Over Ethernet (AoE) targets visible to the system (in this case, vblade). The idea being, that I drop into a terminal, get the target disk visible, install onto it, drop back into the terminal and configure the installed system to load the proper modules on boot.

I understand that the image itself (booting from a USB drive) contains a number of apt packages, but apt itself does not appear to be in path in the install environment.

Also acceptable would be a way get get AoE working without the package, I suppose.

What would be the right way to accomplish this?

On a 12.04 server machine, I've got Apt configured to use a proxy to grab its packages. To wit, in /etc/apt.conf.d/80proxy, I have the two following lines:

Acquire::http::Proxy "http://user:password@proxybox:8443/";
Acquire::https::Proxy "http://user:password@proxybox:8443/";

However, when trying to do an apt-get update, I receive an HTTP 407 (Proxy authentication required).

Further examination of the log on the proxy machine, and a TCP dump, indicates that the username and password configured in the URL are not being transmitted. The username and password never reach the proxy machine.

Troubleshooting:

• I've verified that this machine can access the proxy by doing a curl:

  http_proxy='http://user:password@proxybox:8443/' curl google.com

• I've verified that my password does not contain any special characters.

• I've verified that there are no other proxy settings on the machine.

  • grep -ri proxy /etc/profile* returns nothing
  • grep -ri proxy /etc/apt/* returns nothing but the file above
  • env | grep -i proxy returns nothing

Here's what the tcpdump from an attempt with curl looks like:

CONNECT apt.dockerproject.org:443 HTTP/1.1
Host: apt.dockerproject.org:443
Proxy-Authorization: Basic (redacted)
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.3.4 libidn/1.23 librtmp/2.3
Proxy-Connection: Keep-Alive

And an attempt with apt-get:

CONNECT apt.dockerproject.org:443 HTTP/1.1
Host: apt.dockerproject.org:443
User-Agent: Debian APT-CURL/1.0 (0.8.16~exp12ubuntu10.24)
Proxy-Connection: Keep-Alive
Cache-Control: max-age=0

Note the lack of the Proxy-Authorization header.

How do I get apt to respect the user/password settings I've defined in the configuration file?

A note

New question, since everything else on this matter appears to be outdated and/or conflicting. Hold your close votes, please :)

The problem

On stock installs of Ubuntu 12 and 14 Server, the going advice seems to be that the way you make DNS changes is to edit the interfaces file and add the dns- options there. Only problem is, on servers, where uptime is a concern, it appears the only way to force those changes to be be applied is to bounce the affected network interface with ifdown/ifup.

I've got a large number of servers to make a set of DNS changes on, and I need to update their resolver configurations, en masse, without toggling the network interfaces in this fashion. I also need to make sure the changes stick after a reboot.

The problem is that all of these servers were built with the dns- options in the interfaces file, meaning that if I change resolvconf's head or tail files, I'll end up with a bunch of duplicate lines on reboot.

The process needs to be something like:

1. Completely eliminate the resolver configuration (it's all over the place right now)
2. Set the options to new, known-good values
3. Save those options so they are used by applications immediately, and so they'll be in place after a reboot.

So, a recap:

What won't work

• Editing the lines in interfaces (requires an outage to recycle the interface)
• Editing resolv.conf directly (won't take effect, won't be saved)
• Editing the resolvconf head or tail files (won't take effect, will have duplicate lines on reboot)

The actual question

Is there a way to effect a change like this, without interrupting service? Ideally, I could force resolvconf to go through its update process without toggling the interface.

I have built an unattended setup ISO for Ubuntu 12.04.4 using instructions provided on the community wiki, however, I'm having a hard time with two specific pieces of the install:

• The installer hangs for a couple of minutes about three minutes into the installation process, with a "Retrieving file 1 of 1" message. The kickstart configuration has it pointed at a local update mirror, so there's no reason the installer should be trying to call out to the internet (indeed, the network is set up so that it has no route to do so).

Looking at the created sources.list file after install, I see that the internet-facing Security repos have been enabled (http://security.ubuntu.com stuff). This is the only thing I can see which should lead to this timeout during the install.

Question the first: What do I need to drop into the Kickstart file to ensure this is either disabled outright, or redirected internally?

• Secondly, despite adopting the preseed settings from the "Minimal virtual machine" install reached by hitting F4 on the boot screen, my resulting install is hardly minimal. A dead giveaway is that the Landscape advertising blurb appears on the MOTD during my automated install, but not if I select "minimal virtual machine" and do the install by hand.

Question the second: How do I ensure that I get a "minimal virtual machine" installation when using Kickstart?

Below is a version of my kickstart file. This is loaded into the standard 12.04.4 server ISO.

Thanks in advance!

  #System language
  lang en_US
  #langsupport en_US
  keyboard us
  timezone --utc America/Denver

  #Root password (standard)
  rootpw --iscrypted password-goes-here

  #Skip initial user, root only.
  user --disabled

  #Reboot after installation
  reboot
  #Use text mode install
  text
  #Install OS instead of upgrade
  install
  #Install from update server (replace with 'cdrom' to use local)
  url --url http://internal-server/archive-ubuntu/ubuntu/
 
  #Setup NTP
  preseed clock-setup/ntp boolean true
  preseed clock-setup/ntp-server string internal-ntp-server
 
  #Use our local repo instead of going out to the internet
  preseed mirror/country string manual
  preseed mirror/http/hostname string internal-server
  preseed mirror/http/directory string /archive-ubuntu
  preseed mirror/http/proxy string
  preseed mirror/http/mirror internal-server
 
  #Ensure a minimal install
  #Options taken from ISO/preseed/ubuntu-server-minimalvm.seed
  preseed base-installer/kernel/headers boolean false
  preseed tasksel/skip-tasks string standard
  preseed pkgsel/language-pack-patterns string
  preseed pkgsel/install-language-support boolean false
  preseed base-installer/kernel/altmeta string lts-saucy

  #System bootloader configuration
  bootloader --location=mbr

  #For safety, initialize everything
  #Clear the Master Boot Record
  zerombr yes
  #Partition clearing information
  clearpart --all --initlabel

  #Partition Setup
  #Redacted

  #System authorization information
  auth  --useshadow  --enablemd5

  #Network information
  #Redacted

  #Firewall configuration
  firewall --disabled
  #Do not configure the X Window System
  skipx

I just deployed a handful of 14.04 systems and I'm noticing that whenever I vim something, vim is already in replace mode.

As I'm used to being in command mode on starting, this is rather disorienting.

Any idea why? I don't see any obvious culprits in /etc/vim/vimrc, but this happens with every user on the system.

Installed relevant packages:

$ aptitude search vim | grep ^i
i   vim                             - Vi IMproved - enhanced vi editor
i   vim-common                      - Vi IMproved - Common files
i   vim-nox                         - Vi IMproved - enhanced vi editor - with sc
i   vim-runtime                     - Vi IMproved - Runtime files
i   vim-tiny                        - Vi IMproved - enhanced vi editor - compact

vim -V output:

# vim -V
chdir(/usr/share/vim)
fchdir() to previous dir
sourcing "$VIM/vimrc"
Searching for "debian.vim" in "/root/.vim,/usr/share/vim/vimfiles,/usr/share/vim/vim74,/usr/share/vim/vimfiles/after,/root/.vim/after"
Searching for "/root/.vim/debian.vim"
Searching for "/usr/share/vim/vimfiles/debian.vim"
Searching for "/usr/share/vim/vim74/debian.vim"
chdir(/usr/share/vim/vim74)
fchdir() to previous dir
line 10: sourcing "/usr/share/vim/vim74/debian.vim"
finished sourcing /usr/share/vim/vim74/debian.vim
continuing in /usr/share/vim/vimrc
Searching for "/usr/share/vim/vimfiles/after/debian.vim"
Searching for "/root/.vim/after/debian.vim"
chdir(/usr/share/vim/vim74/syntax)
fchdir() to previous dir
line 20: sourcing "/usr/share/vim/vim74/syntax/syntax.vim"
Searching for "syntax/synload.vim" in "/root/.vim,/var/lib/vim/addons,/usr/share/vim/vimfiles,/usr/share/vim/vim74,/usr/share/vim/vimfiles/after,/var/lib/vim/addons/after,/root/.vim/after"
Searching for "/root/.vim/syntax/synload.vim"
Searching for "/var/lib/vim/addons/syntax/synload.vim"
Searching for "/usr/share/vim/vimfiles/syntax/synload.vim"
Searching for "/usr/share/vim/vim74/syntax/synload.vim"
chdir(/usr/share/vim/vim74/syntax)
fchdir() to previous dir
line 19: sourcing "/usr/share/vim/vim74/syntax/synload.vim"
Searching for "syntax/syncolor.vim" in "/root/.vim,/var/lib/vim/addons,/usr/share/vim/vimfiles,/usr/share/vim/vim74,/usr/share/vim/vimfiles/after,/var/lib/vim/addons/after,/root/.vim/after"
Searching for "/root/.vim/syntax/syncolor.vim"
Searching for "/var/lib/vim/addons/syntax/syncolor.vim"
Searching for "/usr/share/vim/vimfiles/syntax/syncolor.vim"
Searching for "/usr/share/vim/vim74/syntax/syncolor.vim"
chdir(/usr/share/vim/vim74/syntax)
fchdir() to previous dir
line 21: sourcing "/usr/share/vim/vim74/syntax/syncolor.vim"
finished sourcing /usr/share/vim/vim74/syntax/syncolor.vim
continuing in /usr/share/vim/vim74/syntax/synload.vim
Searching for "/usr/share/vim/vimfiles/after/syntax/syncolor.vim"
Searching for "/var/lib/vim/addons/after/syntax/syncolor.vim"
Searching for "/root/.vim/after/syntax/syncolor.vim"
finished sourcing /usr/share/vim/vim74/syntax/synload.vim
continuing in /usr/share/vim/vim74/syntax/syntax.vim
Searching for "filetype.vim" in "/root/.vim,/var/lib/vim/addons,/usr/share/vim/vimfiles,/usr/share/vim/vim74,/usr/share/vim/vimfiles/after,/var/lib/vim/addons/after,/root/.vim/after"
Searching for "/root/.vim/filetype.vim"
Searching for "/var/lib/vim/addons/filetype.vim"
Searching for "/usr/share/vim/vimfiles/filetype.vim"
Searching for "/usr/share/vim/vim74/filetype.vim"
chdir(/usr/share/vim/vim74)
fchdir() to previous dir
line 25: sourcing "/usr/share/vim/vim74/filetype.vim"
Searching for "ftdetect/*.vim" in "/root/.vim,/var/lib/vim/addons,/usr/share/vim/vimfiles,/usr/share/vim/vim74,/usr/share/vim/vimfiles/after,/var/lib/vim/addons/after,/root/.vim/after"
Searching for "/root/.vim/ftdetect/*.vim"
Searching for "/var/lib/vim/addons/ftdetect/*.vim"
Searching for "/usr/share/vim/vimfiles/ftdetect/*.vim"
Searching for "/usr/share/vim/vim74/ftdetect/*.vim"
Searching for "/usr/share/vim/vimfiles/after/ftdetect/*.vim"
Searching for "/var/lib/vim/addons/after/ftdetect/*.vim"
Searching for "/root/.vim/after/ftdetect/*.vim"
not found in 'runtimepath': "ftdetect/*.vim"
finished sourcing /usr/share/vim/vim74/filetype.vim
continuing in /usr/share/vim/vim74/syntax/syntax.vim
Searching for "/usr/share/vim/vimfiles/after/filetype.vim"
Searching for "/var/lib/vim/addons/after/filetype.vim"
Searching for "/root/.vim/after/filetype.vim"
finished sourcing /usr/share/vim/vim74/syntax/syntax.vim
continuing in /usr/share/vim/vimrc
Searching for "syntax/syncolor.vim" in "/root/.vim,/var/lib/vim/addons,/usr/share/vim/vimfiles,/usr/share/vim/vim74,/usr/share/vim/vimfiles/after,/var/lib/vim/addons/after,/root/.vim/after"
Searching for "/root/.vim/syntax/syncolor.vim"
Searching for "/var/lib/vim/addons/syntax/syncolor.vim"
Searching for "/usr/share/vim/vimfiles/syntax/syncolor.vim"
Searching for "/usr/share/vim/vim74/syntax/syncolor.vim"
chdir(/usr/share/vim/vim74/syntax)
fchdir() to previous dir
line 25: sourcing "/usr/share/vim/vim74/syntax/syncolor.vim"
finished sourcing /usr/share/vim/vim74/syntax/syncolor.vim
continuing in /usr/share/vim/vimrc
Searching for "/usr/share/vim/vimfiles/after/syntax/syncolor.vim"
Searching for "/var/lib/vim/addons/after/syntax/syncolor.vim"
Searching for "/root/.vim/after/syntax/syncolor.vim"
Searching for "filetype.vim" in "/root/.vim,/var/lib/vim/addons,/usr/share/vim/vimfiles,/usr/share/vim/vim74,/usr/share/vim/vimfiles/after,/var/lib/vim/addons/after,/root/.vim/after"
Searching for "/root/.vim/filetype.vim"
Searching for "/var/lib/vim/addons/filetype.vim"
Searching for "/usr/share/vim/vimfiles/filetype.vim"
Searching for "/usr/share/vim/vim74/filetype.vim"
chdir(/usr/share/vim/vim74)
fchdir() to previous dir
line 36: sourcing "/usr/share/vim/vim74/filetype.vim"
finished sourcing /usr/share/vim/vim74/filetype.vim
continuing in /usr/share/vim/vimrc
Searching for "/usr/share/vim/vimfiles/after/filetype.vim"
Searching for "/var/lib/vim/addons/after/filetype.vim"
Searching for "/root/.vim/after/filetype.vim"
Searching for "ftplugin.vim" in "/root/.vim,/var/lib/vim/addons,/usr/share/vim/vimfiles,/usr/share/vim/vim74,/usr/share/vim/vimfiles/after,/var/lib/vim/addons/after,/root/.vim/after"
Searching for "/root/.vim/ftplugin.vim"
Searching for "/var/lib/vim/addons/ftplugin.vim"
Searching for "/usr/share/vim/vimfiles/ftplugin.vim"
Searching for "/usr/share/vim/vim74/ftplugin.vim"
chdir(/usr/share/vim/vim74)
fchdir() to previous dir
line 36: sourcing "/usr/share/vim/vim74/ftplugin.vim"
finished sourcing /usr/share/vim/vim74/ftplugin.vim
continuing in /usr/share/vim/vimrc
Searching for "/usr/share/vim/vimfiles/after/ftplugin.vim"
Searching for "/var/lib/vim/addons/after/ftplugin.vim"
Searching for "/root/.vim/after/ftplugin.vim"
Searching for "indent.vim" in "/root/.vim,/var/lib/vim/addons,/usr/share/vim/vimfiles,/usr/share/vim/vim74,/usr/share/vim/vimfiles/after,/var/lib/vim/addons/after,/root/.vim/after"
Searching for "/root/.vim/indent.vim"
Searching for "/var/lib/vim/addons/indent.vim"
Searching for "/usr/share/vim/vimfiles/indent.vim"
Searching for "/usr/share/vim/vim74/indent.vim"
chdir(/usr/share/vim/vim74)
fchdir() to previous dir
line 36: sourcing "/usr/share/vim/vim74/indent.vim"
finished sourcing /usr/share/vim/vim74/indent.vim
continuing in /usr/share/vim/vimrc
Searching for "/usr/share/vim/vimfiles/after/indent.vim"
Searching for "/var/lib/vim/addons/after/indent.vim"
Searching for "/root/.vim/after/indent.vim"
finished sourcing $VIM/vimrc
chdir(/root)
fchdir() to previous dir
could not source "$HOME/.vimrc"
chdir(/root/.vim)
fchdir() to previous dir
could not source "~/.vim/vimrc"
chdir(/root)
fchdir() to previous dir
could not source "$HOME/.exrc"
Searching for "plugin/**/*.vim" in "/root/.vim,/var/lib/vim/addons,/usr/share/vim/vimfiles,/usr/share/vim/vim74,/usr/share/vim/vimfiles/after,/var/lib/vim/addons/after,/root/.vim/after"
Searching for "/root/.vim/plugin/**/*.vim"
Searching for "/var/lib/vim/addons/plugin/**/*.vim"
Searching for "/usr/share/vim/vimfiles/plugin/**/*.vim"
Searching for "/usr/share/vim/vim74/plugin/**/*.vim"
chdir(/usr/share/vim/vim74/plugin)
fchdir() to previous dir
sourcing "/usr/share/vim/vim74/plugin/getscriptPlugin.vim"
finished sourcing /usr/share/vim/vim74/plugin/getscriptPlugin.vim
chdir(/usr/share/vim/vim74/plugin)
fchdir() to previous dir
sourcing "/usr/share/vim/vim74/plugin/gzip.vim"
finished sourcing /usr/share/vim/vim74/plugin/gzip.vim
chdir(/usr/share/vim/vim74/plugin)
fchdir() to previous dir
sourcing "/usr/share/vim/vim74/plugin/matchparen.vim"
finished sourcing /usr/share/vim/vim74/plugin/matchparen.vim
chdir(/usr/share/vim/vim74/plugin)
fchdir() to previous dir
sourcing "/usr/share/vim/vim74/plugin/netrwPlugin.vim"
finished sourcing /usr/share/vim/vim74/plugin/netrwPlugin.vim
chdir(/usr/share/vim/vim74/plugin)
fchdir() to previous dir
sourcing "/usr/share/vim/vim74/plugin/rrhelper.vim"
finished sourcing /usr/share/vim/vim74/plugin/rrhelper.vim
chdir(/usr/share/vim/vim74/plugin)
fchdir() to previous dir
sourcing "/usr/share/vim/vim74/plugin/spellfile.vim"
finished sourcing /usr/share/vim/vim74/plugin/spellfile.vim
chdir(/usr/share/vim/vim74/plugin)
fchdir() to previous dir
sourcing "/usr/share/vim/vim74/plugin/tarPlugin.vim"
finished sourcing /usr/share/vim/vim74/plugin/tarPlugin.vim
chdir(/usr/share/vim/vim74/plugin)
fchdir() to previous dir
sourcing "/usr/share/vim/vim74/plugin/tohtml.vim"
finished sourcing /usr/share/vim/vim74/plugin/tohtml.vim
chdir(/usr/share/vim/vim74/plugin)
fchdir() to previous dir
sourcing "/usr/share/vim/vim74/plugin/vimballPlugin.vim"
finished sourcing /usr/share/vim/vim74/plugin/vimballPlugin.vim
chdir(/usr/share/vim/vim74/plugin)
fchdir() to previous dir
sourcing "/usr/share/vim/vim74/plugin/zipPlugin.vim"
finished sourcing /usr/share/vim/vim74/plugin/zipPlugin.vim
Searching for "/usr/share/vim/vimfiles/after/plugin/**/*.vim"
Searching for "/var/lib/vim/addons/after/plugin/**/*.vim"
Searching for "/root/.vim/after/plugin/**/*.vim"
Reading viminfo file "/root/.viminfo" info oldfiles
Press ENTER or type command to continue

The Problem

I've got one server in a farm which is suddenly unable to correctly handle SSL certificates. Attempting to do a curl command like curl -v https://google.com results in:

curl -v https://google.com
* About to connect() to google.com port 443 (#0)
*   Trying 74.125.137.101... connected
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS alert, Server hello (2):
* SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Using openssl s_client is a little more detailed.

# openssl s_client -host google.com -port 443
CONNECTED(00000003)
depth=2 /C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
verify error:num=20:unable to get local issuer certificate

Things Tried So Far

• Reinstalling ca-certificates - already have the latest available version, according to aptitude, Version: 20130906ubuntu0.12.04.1.

• Reconfiguring ca-certificates via dpkg-reconfigure. This appears to rehash the /etc/ssl/certs folder but has no effect on the problem.

• Using update-ca-certificates --fresh to regenerate the symbolic links in that folder

• Grabbing the latest Mozilla ca bundle from curl.haxx.se - by putting that .pem file in /etc/ssl/certs and running the update command.

Weirdness

The certificate that curl claims it cannot find is indeed in the certification path.

# ls -l /etc/ssl/certs/*Geo*

lrwxrwxrwx 1 root root 57 Apr  7 15:57 /etc/ssl/certs/GeoTrust_Global_CA.pem -> /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt
...

The certificate file referenced has the same permissions as every other box on my network, namely 644.

# ls -l /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt
-rw-r--r-- 1 root root 1216 Feb 20 11:49 /usr/share/ca-certificates/mozilla/GeoTrust_Global_CA.crt

Other secure sites such as Github show identical issues with different certificates. I am running the absolute latest version available of all packages for Ubuntu 12.04.4, including curl, openssl, and ca-certificates.

What's going on here?