WelcomeWelcome | FAQFAQ | DownloadsDownloads | WikiWiki

Recent Posts

Pages: 1 ... 8 9 [10]
91
dCore Imported Extensions / Re: ca-certificates
« Last post by Jason W on August 30, 2015, 03:11:47 AM »
Ok, looking at my HD install I see what needs to be done.
92
dCore Imported Extensions / Re: ca-certificates
« Last post by hiro on August 30, 2015, 02:01:20 AM »
Do you have any crt or pem files in /etc/ssl/certs?
of course, in the mozilla subfolder.

Quote
Most web browsers and some apps look in that folder.
How did you find out? Do you have a list, an overview over these browsers and apps?

Quote
Leaping ahead, without knowing your answer etc
 you could try this assuming individual crt files in mozilla
The reason for the move bundle command is c_rehash only looks at the first certificate in the bundle in hashing it, giving you a duplicate error we don't need. Delete that line if you have no bundle. But if possible pls advise if you have no bundle.
I don't know what you are suggesting here. What is a move bundle command? I didn't get any duplicate error? What do you mean?

btw, here is the current dcore deb2sce script: http://tinycorelinux.net/dCore/import/ca-certificates.deb2sce
and here the tc 6 extension: http://tinycorelinux.net/6.x/x86/tcz/openssl.tcz

Be aware there's also a postinst script in the deb which I tried to read but can't understand the purpose of.
And are we even running the postinst script?
93
dCore Imported Extensions / Re: ca-certificates
« Last post by gordon64 on August 29, 2015, 05:25:21 PM »
Quote
/etc/ssl/certs/mozilla/

Do you have any crt or pem files in /etc/ssl/certs?

Most web browsers and some apps look in that folder.

Leaping ahead, without knowing your answer etc
 you could try this assuming individual crt files in mozilla
The reason for the move bundle command is c_rehash only looks at the first certificate in the bundle in hashing it, giving you a duplicate error we don't need. Delete that line if you have no bundle. But if possible pls advise if you have no bundle.

Code: [Select]
sudo su
mv /etc/ssl/certs/mozilla/ca-certificates.crt /etc
ln -s /etc/ssl/certs/mozilla/* /etc/ssl/certs/
cd /etc/ssl
c_rehash
mv /etc/ca-certificates.crt  /etc/ssl/certs/

good luck


94
dCore Imported Extensions / Re: ca-certificates
« Last post by hiro on August 29, 2015, 01:01:38 PM »
The only thing to get anything working on dcore for me is to do
sudo c_rehash /etc/ssl/certs/mozilla/
and then specify capath to mozilla dir, e.g.
strace openssl s_client -connect  google.com:443 -CApath /etc/ssl/certs/mozilla/

same in irssi, with capath specified as /etc/ssl/certs/mozilla/ it works now, but it required the rehash first.
95
dCore Imported Extensions / Re: ca-certificates
« Last post by hiro on August 29, 2015, 12:44:46 PM »
With "hardcoded" in irssi I mean I specified the CA path in the config file. On 6.x specifying /etc/ssl/certs works.
The irssi used on dcore is the one from debian. There specifying /etc/ssl/certs with only the mozilla folder beneath doesn't succeed.
It doesn't really matter what I do in irssi though, cause even with plain openssl I get the same result. It might be that the above example needs -CApath /etc/ssl/ appended to the openssl command. Without it also doesn't succeed on tc 6.0.
96
Release Candidates / Re: Announcements
« Last post by Jason W on August 29, 2015, 10:21:48 AM »
New fix to the update routine, all dCore x86 ports updated.  If no issues in the coming days, I will move to release.

http://tinycorelinux.net/dCore/x86/release_candidates/
97
dCore Imported Extensions / Re: network-manager-gnome & wicd
« Last post by Jason W on August 29, 2015, 08:54:30 AM »
I will try and spend some time with this too, as there is simply something missing in a startup script, or a user/group, stuff like that.  Pretty much everything is fixable.
98
dCore Imported Extensions / Re: network-manager-gnome & wicd
« Last post by sm8ps on August 29, 2015, 07:37:18 AM »
Tried as suggested; created group connectivity, added my user as well as root to that group. -- No noticable changes.

Protocol:
Code: [Select]
sudo groupadd -r connectivity && sudo usermod tc -aG connectivity && sudo usermod root -aG connectivity
sce-load wireless && sce-load network-manager
sudo /usr/local/postinst/libglib2.0-0 trigger && sudo gtk-update-icon-cache-3.0 -f /usr/share/icons/hicolor/
sudo NetworkManager &
sudo nm-applet &

According to one of the resources mentioned above, I had created the following file in order to give my user sufficient credentials to run nm-applet without sudo but that did not work. The applet would start and connect to one of the "system connections" but it is impossible to change the connection due to "(32) Not authorized to control networking." Here is the file for reference:
Code: [Select]
/etc/polkit-1/localauthority.conf.d/50-org.freedesktop.NetworkManager.pkla
[nm-applet]
Identity=unix-group:netdev
Action=org.freedesktop.NetworkManager.*
ResultAny=yes
ResultInactive=no
ResultActive=yes

Warnings upon launching sudo NetworkManager &
Code: [Select]
(NetworkManager:9496): GLib-WARNING **: GError set over the top of a previous GError or uninitialized memory.
This indicates a bug in someone's code. You must ensure an error is NULL before it's set.
The overwriting error message was: Key file does not have group 'connectivity'

Warnings upon launching sudo nm-applet &
Code: [Select]
** (nm-applet:9532): WARNING **: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.ServiceUnknown: The name org.a11y.Bus was not provided by any .service files
GConf Error: Configuration server couldn't be contacted: D-BUS error: Message did not receive a reply (timeout by message bus)
[message repeated 32 times]
nm-applet-Message: using fallback from indicator to GtkStatusIcon

Upon that, I do have a fully functional nm-applet (in LXDE/Openbox). So AFAICT this is a working solution; it seems questionable, however, if it is sane. :)
99
dCore Imported Extensions / Re: network-manager-gnome & wicd
« Last post by Jason W on August 29, 2015, 05:03:15 AM »
Add your user to the connectivity group, if that helps we can use that and the other info to proceed.
100
dCore Imported Extensions / Re: ca-certificates
« Last post by Jason W on August 29, 2015, 05:01:11 AM »
Below is where LFS gets it's certs, it is listed on it's ca-certificates package page:

https://hg.mozilla.org/releases/mozilla-release/file/default/security/nss/lib/ckfw/builtins/certdata.txt

It is one file, whereas Debian Breaks the entries up into a file a piece.  And it is also from Mozilla.

ca-certificates.tcz contains the same entries as the Debian package does, but also with some legacy .pem symlinks.  So it is the same certs.

If irssi was built on Core and things are hardcoded to /usr/local, then it will not work on other systems.  Prebuilt packages for dCore are built on dCore.
Pages: 1 ... 8 9 [10]