Posts by vpeter

I though openssl uses this file by default? If not then it is ok to use different name (didn't look into this part).

openssl.cnf is not relevant here.

Sure, this would work also and it is initial idea.

But you need to leave /etc/ssl/cert.pem because this is default name used. Use symbolic link instead.

Also I would rename openssl-config to something more appropriate.

Ah, then nothing. At least you have workaround

You can try this: libreelec-generic.x86_64-9.0-devel-20180713105447-32ef9ba-certs-test.img.gz

• remove mount line of /etc/ssl from autostart.sh
• create folder /storage/.config/ssl-certs if doesn't exist
• copy your cacert.pem file there (filename is not important)
• update certs with command update-ca-certificates.sh

With little more investigation I got more elegant solution.

Curl needs to be build with --with-ca-path=/storage/.config/ssl-certs instead of --without-ca-path. Then users pem files can be put in this folder. But pem file needs to be named by the hash values with command cd /storage/.config/ssl-certs && find *.pem -exec sh -c 'ln -s $0 $(openssl x509 -hash -noout -in "$0").0' {} \;.

Probably better path would be standard one /etc/ssl/certs/ with link to /storage.

Save the file in UNIX format (not DOS).

Or convert it with dos2unix program:

dos2unix /storage/.config/sleep.d/01-dvb.power

I made few tests and seems the only solution is to add self signed CA certificate (cacert.pem) to /etc/ssl/cert.pem file. This way all CA's are usable. Of course for this folder must be writable.

But maybe I'm wrong and there is better solution

autostart.sh script will mount ssl folder to make it writable. But you need to make folder /storage/ssl where you add/change files (as written in one of my post).

I did reproduce the issue but even with copying cacert.pem to ssl folder didn't make it work. Probably because I don't really understand all those certificate stuff Was just following first google tutorial for creating self signed certificate.

Put this line in autostart.sh

mount | grep -q etc/ssl || mount -o bind /storage/ssl/ /etc/ssl/

If you don't have this file you can create it with command

echo "mount | grep -q etc/ssl || mount -o bind /storage/ssl/ /etc/ssl/" >/storage/.config/autostart.sh

When I will reproduce the issue then will make better solution

Btw: if the problem is read-only ssl folder you can make it writable

cp -a /etc/ssl/ /storage/
mount -o bind /storage/ssl/ /etc/ssl/
systemctl restart kodi

Is there any public sftp server which could be used to test this issue? Just to connect to it not with actual media stuff

Try setting this variable in console and then restart kodi. Of course file must exists there.

export SSL_CERT_FILE=/storage/.kodi/userdata/cacert.pem
systemctl restart kodi

Maybe another option is to set verifypeer=false in sources.xml as [curl] add url option to disable peer verification by Rechi · Pull Request #13909 · xbmc/xbmc · GitHub

As a workaround use absolute path for 7z and it will work.

/storage/.kodi/addons/virtual.system-tools/bin/7z l /var/media/USBSTICK32/videos.7z.001

Seems environment variable P7ZIP_HOME_DIR could help but seems it doesn't.

Update: Oh, it is set by function mySplitCommandLine. Patch is needed to overcome this.

You can try this: No sound after wake-up

Yes, libbluray was bumped to 1.0.2 not so long and needs to be updated.

You can try downloading it

wget -O /storage/.kodi/addons/java/libbluray-j2se-1.0.2.jar http://vpeter.libreelec.tv/BD-J/libbluray-j2se-1.0.2.jar

In file packages/devel/popt/package.mk change

http://rpm5.org/files/popt

to

https://fossies.org/linux/misc

Try this in autostart

sleep 2
umount /var/media/SHARE
mount -o rw,atime,data=ordered /dev/mmcblk0p7 /var/media/SHARE
mount /var/media/SHARE/system/.kodi /storage/.kodi