Posts by vpeter
-
-
-
Until proper solution will be suggested wrote ir-keytable command in file /storage/.config/autostart.sh.
-
-
Read this
Amlogic != Allwinner
-
P.S (off topic) (Ovi from TBS here
)
Welcome
-
I though openssl uses this file by default? If not then it is ok to use different name (didn't look into this part).
-
openssl.cnf is not relevant here.
-
Sure, this would work also and it is initial idea.
But you need to leave /etc/ssl/cert.pem because this is default name used. Use symbolic link instead.
Also I would rename openssl-config to something more appropriate.
-
Ah, then nothing. At least you have workaround
-
You can try this: libreelec-generic.x86_64-9.0-devel-20180713105447-32ef9ba-certs-test.img.gz
- remove mount line of /etc/ssl from autostart.sh
- create folder /storage/.config/ssl-certs if doesn't exist
- copy your cacert.pem file there (filename is not important)
- update certs with command update-ca-certificates.sh
-
With little more investigation I got more elegant solution.
Curl needs to be build with --with-ca-path=/storage/.config/ssl-certs instead of --without-ca-path. Then users pem files can be put in this folder. But pem file needs to be named by the hash values with command cd /storage/.config/ssl-certs && find *.pem -exec sh -c 'ln -s $0 $(openssl x509 -hash -noout -in "$0").0' {} \;.
Probably better path would be standard one /etc/ssl/certs/ with link to /storage.
-
-
I made few tests and seems the only solution is to add self signed CA certificate (cacert.pem) to /etc/ssl/cert.pem file. This way all CA's are usable. Of course for this folder must be writable.
But maybe I'm wrong and there is better solution
-
autostart.sh script will mount ssl folder to make it writable. But you need to make folder /storage/ssl where you add/change files (as written in one of my post).
I did reproduce the issue but even with copying cacert.pem to ssl folder didn't make it work. Probably because I don't really understand all those certificate stuff
Was just following first google tutorial for creating self signed certificate.
-
-
-
Is there any public sftp server which could be used to test this issue? Just to connect to it not with actual media stuff