This finally fixed things. I am at 3.9.1 for Turris. I did:
- factory reset
- let old turris update itself
- Checked 'Net with pings via ssh root@192.168.1.1/LUCI password
- updated certificates as you described above
- get-api-crl
- updater-migrate.sh (and “Continuing…” at each prompt)
- Reboot
Thank you very much for your patience. I know this was annoying.
Happy New Year.
-Rick