OdroidC2 - Post install issue - I am afraid the image is not up to date

    Hello,

    I just installed LibreElec on an Odroid C2 (image LibreELEC-Odroid_C2.arm-9.0.2.img downloaded and written with the official USB-SD creator tool).

    Everything is working fine, but I am not able to install any update or add-on.

    Log file (attached to that post) shows that the downloads are rejected

    Line 243 and following:

    Code
    ERROR: CCurlFile::Open failed with code 0 for https://raw.githubusercontent.com/kodi-game/repository.kodi.game/master/release/addons.xml.md5:
ERROR: CCurlFile::Open failed with code 0 for https://addons.libreelec.tv/9.0/Odroid_C2/arm/addons.xml.gz.sha256:
ERROR: Open - failed to open source <https://raw.githubusercontent.com/kodi-game/repository.kodi.game/master/release/addons.xml.md5>
ERROR: Open - failed to open source <https://addons.libreelec.tv/9.0/Odroid_C2/arm/addons.xml.gz.sha256>

    Line 286 and following:

    Code
    CCurlFile::FillBuffer - Failed: SSL peer certificate or SSH remote key was not OK(60)
ERROR: CCurlFile::Open failed with code 0 for https://addons.libreelec.tv/9.0/Odroid_C2/arm/addons.xml.gz.sha256:
ERROR: Open - failed to open source <https://addons.libreelec.tv/9.0/Odroid_C2/arm/addons.xml.gz.sha256>
ERROR: CRepository: failed read 'https://addons.libreelec.tv/9.0/Odroid_C2/arm/addons.xml.gz.sha256'
ERROR: CCurlFile::FillBuffer - Failed: SSL peer certificate or SSH remote key was not OK(60)
ERROR: CRepository: http://mirrors.kodi.tv/addons/leia/addons.xml.gz index has wrong digest e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855, expected: fb6e91e3859d477a2c66882faf64d0aac40128ff642e7ccdf5e9a200e9384e22

    Is the image actually maintained or did I miss something ?

    Thanks

    The solution to this problem can be found here:

    Post

    RE: SOLVED: Cannot Install/Update Addons (on LE9.0 and older versions)

    LE 9.0 (and before) use the old openssl 1.0.2 version which is tripping over the DST Root CA X3 expiration end of September - read more about it here: https://www.openssl.org/blog/blog/2021…RootCertExpire/

    Fortunately applying the workaround 1 (removing the cert) is quite easy:

    First create the directory /storage/.config/system.d/openssl-config.service.d:

    (Code, 1 line)

    then create a file drop-dst-x3.conf in there (full path is /storage/.config/system.d/openssl-config.service.d/drop-dst-x3.conf)…
    HiassofT
    October 13, 2021 at 1:16 PM