Active Topics
-
The N900 is now 15 years old! (7)
to Nokia N900 by Danct12 - 1 day, 17 hrs ago -
Sailfish OS for the Motorola Moto G7 Power (XT1955-5) - (ocean) (4)
to SailfishOS by Maemish - 2 days, 12 hrs ago -
F(x)tec Pro1x (QWERTY) for sale (0)
to Buy & Sell by aln00000 - 4 days, 21 hrs ago - more...
| The Following 2 Users Say Thank You to chrischras For This Useful Post: | ||
 |
|
2015-01-18
, 14:15
|
|
Posts: 654 |
Thanked: 2,368 times |
Joined on Jul 2014
@ UK
|
#2
|
Hi!
I've used cacert before, but never on maemo (i'm new). Since the filesystem structure is different, I had to do a bit of digging but i think this will work...
This is taken from a tutorial I wrote for raspberry pi/ubuntu. I'd post a link too but i'm not sure if that's considered impolite here or not (is it?).
In maemo, it appears these certs are installed in a different directory, so the modified command to re-hash your certificates is:
c_rehash is part of the openssl package.
I've tested the command on maemo and it works, but i haven't installed the cacert root so i can't do a full test to see if it sorts out microb.
HTH!
Last edited by Feathers McGraw; 2015-01-18 at 14:17. Reason: fixed tags
I've used cacert before, but never on maemo (i'm new). Since the filesystem structure is different, I had to do a bit of digging but i think this will work...
This is taken from a tutorial I wrote for raspberry pi/ubuntu. I'd post a link too but i'm not sure if that's considered impolite here or not (is it?).
If you look in your certs directory (ls -l /etc/ssl/certs) you will see that all of the certs have sensible certificate names like GeoTrust_Global_CA.pem, but there are also a load of symbolic links with names like 2c543cd1.0 that point to the certificate files with the human readable names.
Those symlink names like 2c543cd1.0 are hashes of the certificate files, and are there to enable programs on your computer to quickly check whether the root certificate is in your computer's certificate directory or not. Some programs manage to recognise that the certificate is installed just fine without the symlinks, but some of them do not. Openssl is one of the ones that doesn't.
So, we need to make use of one more command to create a symlink for the newly installed cacert-root.crt (this will also refresh the symlinks for the rest of the certs in the folder):
Code:sudo c_rehash /etc/ssl/certs
Code:
# c_rehash /etc/certs/common-ca/
I've tested the command on maemo and it works, but i haven't installed the cacert root so i can't do a full test to see if it sorts out microb.
HTH!
Last edited by Feathers McGraw; 2015-01-18 at 14:17. Reason: fixed tags
| The Following User Says Thank You to Feathers McGraw For This Useful Post: | ||
i have a problem with this cacert.org-verified site:
https://blog.fefe.de
microb tells in Details:
In Fennec it also doesn't work. Error:
wget to the url mentionend above show:
wget -v https://blog.fefe.de --13:36:42-- http://blog.fefe.de/ => 'index.html' Auflösen des Hostname >>blog.fefe.de<< ..... 31.15.64.162, 2001:4d88:3508::fefe:b106 Verbindungsaufbau zu blog.fefe.de|31.15.64.162, :443... verbunden Es ist nicht moeglich, eine SSL-Verbindung herzustellen.I've attached the cert (ptrace.fefe.de(.txt <- remove)) of this site and a screenshot of infos from iceweasel which could open this site with https on my computer.
with regards,
Christian