This is dragging for years, each and every release there is something wrong with certificates and each and every time I install it, I have week or more of research wtf is going on.
I have installed version 10 beta.
Add proxy, ok works (as I have submitted the code fix to kodi developers and they have merged it).
Where to put my proxy ca certificate to. /storage/.config/cacert.pem and yes it is in pem format. Set the date using ssh as the local time server doesnt work and you dont use the dhcp time. Ok.
Then the even more usual, the communication doesnt work. Start logs, check the logs.
Communication starts, the connection is correctly mitmed (sure, I have wrote the proxy and it works; if it is good for firefox and chrome it should be good for curl/libreelec too), the data came back and then the beautiful libreelec fun begins:
2021-07-20 20:00:33.181 T:895 DEBUG <general>: Curl::Debug - TEXT: TLSv1.3 (OUT), TLS alert, unknown CA (560):
2021-07-20 20:00:33.181 T:895 DEBUG <general>: Curl::Debug - TEXT: SSL certificate problem: self signed certificate in certificate chain
2021-07-20 20:00:33.181 T:895 DEBUG <general>: Curl::Debug - TEXT: Closing connection 1
2021-07-20 20:00:33.184 T:895 ERROR <general>: CCurlFile::FillBuffer - Failed: SSL peer certificate or SSH remote key was not OK(60)Sure, why not. It is very awful if you are using self signed certificate (even more as ALL root CA certificates on whole internet are self signed) that you have manually added to cacert.pem as trusted so the connection must be closed. Great. Another quest for where to stuff my ca certificate to.
Sorry for the tone guys, I really like your work but can you PLEASE (please,please,please,please,please,please,please,please,please,please,...) fix those damn certificates once and for all or at least provide a way to disable curl nonsense. I would do it but your system for building the whole thing is just too complex. I just want to watch some movie.
