# 完全跳过证书检查，强制下载
sudo wget --no-check-certificate https://curl.se/ca/cacert.pem -O /etc/ssl/certs/ca-certificates.crt
sudo update-ca-certificates -f


# 1. 备份原有证书（防止搞坏）
sudo cp /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt.old

# 2. 下载最新全套根证书（来自 curl 官方，安全）
sudo wget --no-check-certificate https://curl.se/ca/cacert.pem -O /etc/ssl/certs/ca-certificates.crt

# 3. 安装证书工具（如果没装）
sudo apt-get install -y ca-certificates

# 4. 强制更新系统证书
sudo update-ca-certificates -f

# 5. 验证是否成功
ls -lh /etc/ssl/certs/ca-certificates.crt
echo "证书更新完成！"