adminconf/kto-ca-install
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add LibreELEC case to install script

Browse Source
This commit is contained in:
Alexandre CATTEAU
2023-08-02 20:19:37 +02:00
parent 25d561a3b0
commit 0c77bf7bbc
2 changed files with 19 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@@ -20,7 +20,8 @@ sudo ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/firefox/li
In systems where we cannot import our certificate (LibreELEC, Android (TV)), we need to copy `advancedsettings.xml` and
`kto.crt` (renamed to `cacert.pem`) to `$HOME_OF_KODI_USER/.kodi/userdata/`.
TODO: At least on LibreELEC, this prevents KODI from using system CA, and thus to access "normal" HTTPS resources.
This prevents KODI from using system CA, and thus to access "normal" HTTPS resources. The solution is to concatenate in
`cacert.pem` KODI's "system" cacert and our own CA. The install script does it for LibreELEC, but not for Android (TV).
#### Android (TV)
1. find Kodi app user data directory (usually `/sdcard/Android/data/org.xbmc.kodi`)

29
install.sh
View File

@@ -14,18 +14,23 @@ else
sudo=""
fi
if command -v update-ca-trust > /dev/null; then
$sudo cp $run_directory/*.crt /etc/ca-certificates/trust-source/anchors/
$sudo update-ca-trust
elif command -v update-ca-certificates > /dev/null; then
$sudo cp $run_directory/*.crt /usr/local/share/ca-certificates/
$sudo update-ca-certificates
elif [ -f /usr/sbin/update-ca-certificates ]; then # Debian...
$sudo cp $run_directory/*.crt /usr/local/share/ca-certificates/
$sudo update-ca-certificates
else
echo "No update-ca binary found. Exiting with error!"
exit 1
if [ $(echo $(lsb_release) | cut -d ' ' -f 1) = "LibreELEC" ]; then
cp /usr/share/kodi/system/certs/cacert.pem /storage/.kodi/userdata/cacert.pem
cat $run_directory/kto.crt >> /storage/.kodi/userdata/cacert.pem
else # More classic Linux expected
if command -v update-ca-trust > /dev/null; then
$sudo cp $run_directory/*.crt /etc/ca-certificates/trust-source/anchors/
$sudo update-ca-trust
elif command -v update-ca-certificates > /dev/null; then
$sudo cp $run_directory/*.crt /usr/local/share/ca-certificates/
$sudo update-ca-certificates
elif [ -f /usr/sbin/update-ca-certificates ]; then # Debian...
$sudo cp $run_directory/*.crt /usr/local/share/ca-certificates/
$sudo update-ca-certificates
else
echo "No update-ca binary found. Exiting with error!"
exit 1
fi
fi
echo "Finished install. Exiting..."