Go to file

Alexandre CATTEAU e0f2c0950e Add in README the final solution for Debian-based		2023-01-21 17:40:43 +01:00
.gitignore	Initial commit	2022-11-13 12:13:34 +01:00
advancedsettings.xml	Add Kodi Android conf	2022-12-30 12:23:41 +01:00
install.sh	Add specific Debian use case in install script	2022-12-26 19:37:27 +01:00
kto.crt	Initial commit	2022-11-13 12:13:34 +01:00
README.md	Add in README the final solution for Debian-based	2023-01-21 17:40:43 +01:00

README.md

Install KTO Root Certificates

This repository contains a small setup to automate the delivery of our root certificates to clients.

Files

kto.crt is our current only root certificate
advancedsettings.xml is a Kodi user configuration file (see Kodi Android)

Installation

install.sh copies the certificates to the right location and then reloads the system's certificates (Linux only)

Firefox

On Debian-based distros, the following is required so that Firefox uses system CAs. We add a diversion in dpkg so that Firefox upgrades do not override our change.

sudo dpkg-divert --divert /usr/lib/firefox/libnssckbi.so.orig --rename --local /usr/lib/firefox/libnssckbi.so
sudo ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/firefox/libnssckbi.so

Kodi Android

Since Android does not allow to import our root certificate, we have to import directly in Kodi:

find Kodi app user data directory (usually /sdcard/Android/data/org.xbmc.kodi)
copy advancedsettings.xml and kto.crt (renamed to cacert.pem) to $KODI/files/.kodi/userdata/