You can try this: libreelec-generic.x86_64-9.0-devel-20180713105447-32ef9ba-certs-test.img.gz
With little more investigation I got more elegant solution.
Curl needs to be build with --with-ca-path=/storage/.config/ssl-certs instead of --without-ca-path. Then users pem files can be put in this folder. But pem file needs to be named by the hash values with command cd /storage/.config/ssl-certs && find *.pem -exec sh -c 'ln -s $0 $(openssl x509 -hash -noout -in "$0").0' {} \;.
Probably better path would be standard one /etc/ssl/certs/ with link to /storage.
Save the file in UNIX format (not DOS).
Or convert it with dos2unix program:
dos2unix /storage/.config/sleep.d/01-dvb.powerI made few tests and seems the only solution is to add self signed CA certificate (cacert.pem) to /etc/ssl/cert.pem file. This way all CA's are usable. Of course for this folder must be writable.
But maybe I'm wrong and there is better solution 
autostart.sh script will mount ssl folder to make it writable. But you need to make folder /storage/ssl where you add/change files (as written in one of my post).
I did reproduce the issue but even with copying cacert.pem to ssl folder didn't make it work. Probably because I don't really understand all those certificate stuff 
Was just following first google tutorial for creating self signed certificate.
Put this line in autostart.sh
mount | grep -q etc/ssl || mount -o bind /storage/ssl/ /etc/ssl/If you don't have this file you can create it with command
echo "mount | grep -q etc/ssl || mount -o bind /storage/ssl/ /etc/ssl/" >/storage/.config/autostart.shWhen I will reproduce the issue then will make better solution
Btw: if the problem is read-only ssl folder you can make it writable
cp -a /etc/ssl/ /storage/
mount -o bind /storage/ssl/ /etc/ssl/
systemctl restart kodiIs there any public sftp server which could be used to test this issue? Just to connect to it not with actual media stuff
Try setting this variable in console and then restart kodi. Of course file must exists there.
export SSL_CERT_FILE=/storage/.kodi/userdata/cacert.pem
systemctl restart kodiMaybe another option is to set verifypeer=false in sources.xml as [curl] add url option to disable peer verification by Rechi · Pull Request #13909 · xbmc/xbmc · GitHub
As a workaround use absolute path for 7z and it will work.
/storage/.kodi/addons/virtual.system-tools/bin/7z l /var/media/USBSTICK32/videos.7z.001Seems environment variable P7ZIP_HOME_DIR could help but seems it doesn't.
Update: Oh, it is set by function mySplitCommandLine. Patch is needed to overcome this.
Yes, libbluray was bumped to 1.0.2 not so long and needs to be updated.
You can try downloading it
wget -O /storage/.kodi/addons/java/libbluray-j2se-1.0.2.jar http://vpeter.libreelec.tv/BD-J/libbluray-j2se-1.0.2.jarIn file packages/devel/popt/package.mk change
http://rpm5.org/files/poptto
https://fossies.org/linux/miscTry this in autostart
sleep 2
umount /var/media/SHARE
mount -o rw,atime,data=ordered /dev/mmcblk0p7 /var/media/SHARE
mount /var/media/SHARE/system/.kodi /storage/.kodiMaybe the problem is with mount options nosuid,nodev,noexec.
Just a little progress: seems Java for MakeMKV is only need to solve playlist obfuscation. Need to find one such ISO
I want to ask if anyone knows how to add JRE home path to MakeMKV settings? I have installed Java JRE as per these instructions (on 8.2.0 Remix) : Add built-in Java support
As you can read there nothing seems to help.
Sadly I don't know how to reproduce this issue without BR player. If I could use just ISO file (which one) or folder it would be great.
Would be good to make process on regular Linux distro and identify this problems there with a fix.
