Why, Debian, why?
Last weekend I updated the SSL certificate used for all VirtualHosts on Clazzes.org, like this very site, and https://deb.clazzes.org and some others.
Unfortunately, Debian's ca-certificates package is not maintained for old-stable. For more details, see debian bug 501123.
Therefore, Tools like
curl refuse to download GPG keys, packages, or other stuff from Clazzes.org with https, unless special options like
--no-check-certificate are used.
We are already thinking about providing updated
ca-certificates packages for
old-stable versions like
squeeze and I just entered the bug discussion.