adminconf/kto-ca-install
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add LibreELEC case to install script

Browse Source
This commit is contained in:
Alexandre CATTEAU 2023-08-02 20:19:37 +02:00
parent 25d561a3b0
commit 0c77bf7bbc
2 changed files with 19 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -20,7 +20,8 @@ sudo ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/firefox/li
In systems where we cannot import our certificate (LibreELEC, Android (TV)), we need to copy `advancedsettings.xml` and In systems where we cannot import our certificate (LibreELEC, Android (TV)), we need to copy `advancedsettings.xml` and
`kto.crt` (renamed to `cacert.pem`) to `$HOME_OF_KODI_USER/.kodi/userdata/`. `kto.crt` (renamed to `cacert.pem`) to `$HOME_OF_KODI_USER/.kodi/userdata/`.
TODO: At least on LibreELEC, this prevents KODI from using system CA, and thus to access "normal" HTTPS resources. This prevents KODI from using system CA, and thus to access "normal" HTTPS resources. The solution is to concatenate in
`cacert.pem` KODI's "system" cacert and our own CA. The install script does it for LibreELEC, but not for Android (TV).
#### Android (TV) #### Android (TV)
1. find Kodi app user data directory (usually `/sdcard/Android/data/org.xbmc.kodi`) 1. find Kodi app user data directory (usually `/sdcard/Android/data/org.xbmc.kodi`)

5
install.sh
View File

@ -14,6 +14,10 @@ else
sudo="" sudo=""
fi fi
if [ $(echo $(lsb_release) | cut -d ' ' -f 1) = "LibreELEC" ]; then
cp /usr/share/kodi/system/certs/cacert.pem /storage/.kodi/userdata/cacert.pem
cat $run_directory/kto.crt >> /storage/.kodi/userdata/cacert.pem
else # More classic Linux expected
if command -v update-ca-trust > /dev/null; then if command -v update-ca-trust > /dev/null; then
$sudo cp $run_directory/*.crt /etc/ca-certificates/trust-source/anchors/ $sudo cp $run_directory/*.crt /etc/ca-certificates/trust-source/anchors/
$sudo update-ca-trust $sudo update-ca-trust
@ -27,6 +31,7 @@ else
echo "No update-ca binary found. Exiting with error!" echo "No update-ca binary found. Exiting with error!"
exit 1 exit 1
fi fi
fi
echo "Finished install. Exiting..." echo "Finished install. Exiting..."
exit 0 exit 0