2022-11-13 12:13:34 +01:00
|
|
|
# Install KTO Root Certificates
|
|
|
|
|
|
|
|
|
|
This repository contains a small setup to automate the delivery of our root certificates to clients.
|
|
|
|
|
|
|
|
|
|
### Files
|
|
|
|
|
* `kto.crt` is our current only root certificate
|
2022-12-30 12:23:41 +01:00
|
|
|
* `advancedsettings.xml` is a Kodi user configuration file (see []())
|
2022-11-13 12:13:34 +01:00
|
|
|
#### Installation
|
2022-12-30 12:23:41 +01:00
|
|
|
* `install.sh` copies the certificates to the right location and then reloads the system's certificates (Linux only)
|
|
|
|
|
|
2022-12-26 19:37:27 +01:00
|
|
|
### Firefox
|
|
|
|
|
* On Mint, had to use the following so that Firefox uses system CAs:
|
|
|
|
|
```
|
|
|
|
|
sudo mv /usr/lib/firefox/libnssckbi.so /usr/lib/firefox/libnssckbi.so.bak
|
|
|
|
|
sudo ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/firefox/libnssckbi.so
|
|
|
|
|
```
|
|
|
|
|
* Stil unclear: Will this be overwritten at Firefox update?
|
2022-12-30 12:25:40 +01:00
|
|
|
|
2022-12-30 12:23:41 +01:00
|
|
|
### Kodi Android
|
|
|
|
|
Since Android does not allow to import our root certificate, we have to import directly in Kodi:
|
|
|
|
|
1. find Kodi app user data directory (usually `/sdcard/Android/data/org.xbmc.kodi`)
|
|
|
|
|
2. copy `advancedsettings.xml` and `kto.crt` (renamed to `cacert.pem`) to `$KODI/files/.kodi/userdata/`
|
