adminconf/kto-ca-install
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add LibreELEC case to install script

Browse Source
This commit is contained in:
Alexandre CATTEAU 2023-08-02 20:19:37 +02:00
parent 25d561a3b0
commit 0c77bf7bbc
2 changed files with 19 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -20,7 +20,8 @@ sudo ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/firefox/li
In systems where we cannot import our certificate (LibreELEC, Android (TV)), we need to copy `advancedsettings.xml` and In systems where we cannot import our certificate (LibreELEC, Android (TV)), we need to copy `advancedsettings.xml` and
`kto.crt` (renamed to `cacert.pem`) to `$HOME_OF_KODI_USER/.kodi/userdata/`. `kto.crt` (renamed to `cacert.pem`) to `$HOME_OF_KODI_USER/.kodi/userdata/`.
TODO: At least on LibreELEC, this prevents KODI from using system CA, and thus to access "normal" HTTPS resources. This prevents KODI from using system CA, and thus to access "normal" HTTPS resources. The solution is to concatenate in
`cacert.pem` KODI's "system" cacert and our own CA. The install script does it for LibreELEC, but not for Android (TV).
#### Android (TV) #### Android (TV)
1. find Kodi app user data directory (usually `/sdcard/Android/data/org.xbmc.kodi`) 1. find Kodi app user data directory (usually `/sdcard/Android/data/org.xbmc.kodi`)

29
install.sh
View File

@ -14,18 +14,23 @@ else
sudo="" sudo=""
fi fi
if command -v update-ca-trust > /dev/null; then if [ $(echo $(lsb_release) | cut -d ' ' -f 1) = "LibreELEC" ]; then
$sudo cp $run_directory/*.crt /etc/ca-certificates/trust-source/anchors/ cp /usr/share/kodi/system/certs/cacert.pem /storage/.kodi/userdata/cacert.pem
$sudo update-ca-trust cat $run_directory/kto.crt >> /storage/.kodi/userdata/cacert.pem
elif command -v update-ca-certificates > /dev/null; then else # More classic Linux expected
$sudo cp $run_directory/*.crt /usr/local/share/ca-certificates/ if command -v update-ca-trust > /dev/null; then
$sudo update-ca-certificates $sudo cp $run_directory/*.crt /etc/ca-certificates/trust-source/anchors/
elif [ -f /usr/sbin/update-ca-certificates ]; then # Debian... $sudo update-ca-trust
$sudo cp $run_directory/*.crt /usr/local/share/ca-certificates/ elif command -v update-ca-certificates > /dev/null; then
$sudo update-ca-certificates $sudo cp $run_directory/*.crt /usr/local/share/ca-certificates/
else $sudo update-ca-certificates
echo "No update-ca binary found. Exiting with error!" elif [ -f /usr/sbin/update-ca-certificates ]; then # Debian...
exit 1 $sudo cp $run_directory/*.crt /usr/local/share/ca-certificates/
$sudo update-ca-certificates
else
echo "No update-ca binary found. Exiting with error!"
exit 1
fi
fi fi
echo "Finished install. Exiting..." echo "Finished install. Exiting..."