Click Here
home features news forums classifieds faqs links search
5651 members 
Amiga Q&A /  Free for All /  Emulation /  Gaming / (Latest Posts)
Login

Nickname

Password

Lost Password?

Don't have an account yet?
Register now!

Support Amigaworld.net
Your support is needed and is appreciated as Amigaworld.net is primarily dependent upon the support of its users.
Donate

Menu
Main sections
Home
Features
News
Forums
Classifieds
Links
Downloads
Extras
OS4 Zone
IRC Network
AmigaWorld Radio
Newsfeed
Top Members
Amiga Dealers
Information
About Us
FAQs
Advertise
Polls
Terms of Service
Search

IRC Channel
Server: irc.amigaworld.net
Channel: #Amigaworld
Channel Policy and Guidelines

(Uses JAVA Applet and Port 1024)
Visit the Chatroom Website

Who's Online
 42 guest(s) on-line.
 1 member(s) on-line.


 BigD

You are an anonymous user.
Register Now!
 BigD:  2 mins ago
 kolla:  11 mins ago
 wawa:  33 mins ago
 BCP:  40 mins ago
 ErikBauer:  52 mins ago
 DruggedBunny:  55 mins ago
 Severin:  1 hr 2 mins ago
 zipper:  1 hr 9 mins ago
 khayoz:  2 hrs 5 mins ago
 Amiboy:  2 hrs 12 mins ago

/  Forum Index
   /  Amiga OS4 Software
      /  New CA certification file for MuiOWB/Odyssey needed
Register To Post

PosterThread
GrumpyOldMan 
New CA certification file for MuiOWB/Odyssey needed
Posted on 24-Aug-2017 20:32:30
#1 ]
Cult Member
Joined: 3-Nov-2003
Posts: 675
From: Haukipudas, Finland

Hello,

Can somebody please point me towards the latest CA cert file version for MUIOWB and Odyssey browsers? The ones that came with the install packages give out a error making it impossible to enter sites that require the correct certification.

_________________
"Those are my principles, and if you don't like them... well, I have others." (Groucho Marx)

 Status: Offline
Profile     Report this post  
saimo 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 25-Aug-2017 9:15:14
#2 ]
Elite Member
Joined: 11-Mar-2003
Posts: 2008
From: Unknown

@GrumpyOldMan

IIRC, this should do: https://curl.haxx.se/ca/cacert.pem (from https://curl.haxx.se/docs/caextract.html, obtained from https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt).

 Status: Offline
Profile     Report this post  
tonyw 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 26-Aug-2017 2:47:25
#3 ]
Elite Member
Joined: 8-Mar-2003
Posts: 3105
From: Sydney (of course)

@saimo

Pardon my ignorance, but what should one do with that file? There does not seem to be anything like it anywhere in the OWB or Odyssey directories and nothing in SYS:.

_________________
cheers
tony

Hyperion Support Forum: http://forum.hyperion-entertainment.biz/index.php

 Status: Offline
Profile     Report this post  
kolla 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 26-Aug-2017 7:10:23
#4 ]
Cult Member
Joined: 20-Aug-2003
Posts: 694
From: Trondheim, Norway

@tonyw

Don't they all just use AmiSSL?

_________________
B5D6A1D019D5D45BCC56F4782AC220D8B3E2A6CC

 Status: Offline
Profile     Report this post  
saimo 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 26-Aug-2017 7:47:16
#5 ]
Elite Member
Joined: 11-Mar-2003
Posts: 2008
From: Unknown

@tonyw

Quote:
Pardon my ignorance, but what should one do with that file? There does not seem to be anything like it anywhere in the OWB or Odyssey directories and nothing in SYS:.

Yep, the browser* needs that file to be called curl-ca-bundle.crt.
*I believe that it's libcurl, which the browser links to, that needs that file.

Last edited by saimo on 26-Aug-2017 at 07:49 AM.

 Status: Offline
Profile     Report this post  
jPV 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 26-Aug-2017 11:50:07
#6 ]
Cult Member
Joined: 11-Apr-2005
Posts: 571
From: .fi

@kolla
Quote:

Don't they all just use AmiSSL?


No.

 Status: Offline
Profile     Report this post  
Raziel 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 26-Aug-2017 15:03:03
#7 ]
Elite Member
Joined: 17-Apr-2004
Posts: 2429
From: A haunted Castle somewhere in the Bavarian Mountains

@tonyw

iirc Odyssey uses the "curl-ca-bundle.crt" installed in DEVS: (i could be wrong though)

_________________
If slaughterhouses had glass walls, everyone would be a vegetarian. ~ Sir Paul McCartney
-
Did everything just taste purple for a second? ~ Philip J. Fry
-
Ain't got no cash, ain't got no style, ladies vomit when I smile. ~ Dr. John Zoidberg

 Status: Offline
Profile     Report this post  
sundown 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 26-Aug-2017 17:00:45
#8 ]
Elite Member
Joined: 30-Aug-2003
Posts: 5098
From: Right here...

@tonyw

Quote:
Pardon my ignorance, but what should one do with that file?

Just re-name the downloaded 'cacert.pem' file to 'curl-ca-bundle.crt' for odyssey.

_________________
Hate tends to make you look stupid...

 Status: Offline
Profile     Report this post  
elwood 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 27-Aug-2017 8:23:22
#9 ]
Elite Member
Joined: 17-Sep-2003
Posts: 3398
From: Lyon, France

@tonyw

Quote:
what should one do with that file? There does not seem to be anything like it anywhere in the OWB or Odyssey directories


Strange:
Programs:Internet/Odyssey> dir cu#?
curl-ca-bundle.crt 250607 ----rwed 16-May-16 13:16:10

Programs:Internet/OWB1.16> dir cu#?
curl-ca-bundle.crt 225828 ----rw-d 17-Oct-09 20:56:50

Without it I can't access httpS sites.

_________________
Philippe 'Elwood' Ferrucci
Sam460 1.10 Ghz
AmigaOS 4 betatester
Amiga Translator Organisation

 Status: Offline
Profile     Report this post  
jabirulo 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 27-Aug-2017 10:34:25
#10 ]
Regular Member
Joined: 20-Jun-2004
Posts: 310
From: Donosti (GUIPUZCOA)

@elwood

Size differs 'cos it gets updated from time to time. Maybe new version have some certificates removed (outdsated certif). It's a plain text file, you can edit//view it:
##
## Bundle of CA Root Certificates
##
## Certificate data from Mozilla as of: Mon Apr 27 08:58:04 2015
##
## This is a bundle of X.509 certificates of public Certificate Authorities
## (CA). These were automatically extracted from Mozilla's root certificates
## file (certdata.txt). This file can be found in the mozilla source tree:
## http://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
...

Last edited by jabirulo on 27-Aug-2017 at 10:37 AM.
Last edited by jabirulo on 27-Aug-2017 at 10:36 AM.

 Status: Offline
Profile     Report this post  
tonyw 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 27-Aug-2017 13:43:03
#11 ]
Elite Member
Joined: 8-Mar-2003
Posts: 3105
From: Sydney (of course)

@elwood

I wasn't looking for "curl-ca-bundle.crt", I was looking for the file named above, ie "cacert.pem".

_________________
cheers
tony

Hyperion Support Forum: http://forum.hyperion-entertainment.biz/index.php

 Status: Offline
Profile     Report this post  
Raziel 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 28-Aug-2017 6:48:57
#12 ]
Elite Member
Joined: 17-Apr-2004
Posts: 2429
From: A haunted Castle somewhere in the Bavarian Mountains

@tonyw

You can call the file whatever you want and place it wherever you want.

It can be changed in Odyssey in Settings/Security - Certificate Path

I call it "curl-ca-bundle.crt" and let it rest in DEVS:

Odyssey and YAM point to that.
Some of the system software access it from there with that name.
And another advantage is, i only have to update one file and not deal with many.

Last edited by Raziel on 28-Aug-2017 at 06:49 AM.

_________________
If slaughterhouses had glass walls, everyone would be a vegetarian. ~ Sir Paul McCartney
-
Did everything just taste purple for a second? ~ Philip J. Fry
-
Ain't got no cash, ain't got no style, ladies vomit when I smile. ~ Dr. John Zoidberg

 Status: Offline
Profile     Report this post  
GrumpyOldMan 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 28-Aug-2017 17:22:04
#13 ]
Cult Member
Joined: 3-Nov-2003
Posts: 675
From: Haukipudas, Finland

@Raziel, all

I downloaded the latest PEM file (dated June 7th), renamed it and copied it to 'devs' and also into the MuiOWB and Odyssey program directories. The CA error still appears.

Is there a way to check where the browsers fetch this file? Or is the latest PEM file somehow incompatible with Amiga browsers?

_________________
"Those are my principles, and if you don't like them... well, I have others." (Groucho Marx)

 Status: Offline
Profile     Report this post  
elwood 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 28-Aug-2017 18:24:02
#14 ]
Elite Member
Joined: 17-Sep-2003
Posts: 3398
From: Lyon, France

@Raziel

Oh, so "curl-ca-bundle.crt" is probably the default as I never changed its name. Thanks.

@GrumpyOldMan

Once I tried to update this file with a more recent one but I could not access HTTPS sites anymore so I reverted and sticked with the original one since then. "Original one" = the file released with the program. So my .cert file in Odyssey was released with it. The file in YAM/Resources/Certificates directory was released with Yam.
I don't try to mix things up and everything works

Last edited by elwood on 28-Aug-2017 at 06:31 PM.
Last edited by elwood on 28-Aug-2017 at 06:27 PM.

_________________
Philippe 'Elwood' Ferrucci
Sam460 1.10 Ghz
AmigaOS 4 betatester
Amiga Translator Organisation

 Status: Offline
Profile     Report this post  
saimo 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 28-Aug-2017 21:06:19
#15 ]
Elite Member
Joined: 11-Mar-2003
Posts: 2008
From: Unknown

@GrumpyOldMan

Quote:
I downloaded the latest PEM file (dated June 7th), renamed it and copied it to 'devs' and also into the MuiOWB and Odyssey program directories. The CA error still appears.

Is there a way to check where the browsers fetch this file? Or is the latest PEM file somehow incompatible with Amiga browsers?

I've been using the same file for months (well, not that I surf much on AmigaOS, but still...) without issues. I simply have it in Odyssey's main directory as "curl-ca-bundle.crt".
Have you removed the old file from the Odyssey directory? Do you have the latest Odyssey (v1.23 r4)?
You can use Snoopy to see which file gets loaded first.

 Status: Offline
Profile     Report this post  
Raziel 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 29-Aug-2017 6:51:56
#16 ]
Elite Member
Joined: 17-Apr-2004
Posts: 2429
From: A haunted Castle somewhere in the Bavarian Mountains

@GrumpyOldMan

Quote:

s there a way to check where the browsers fetch this file? Or is the latest PEM file somehow incompatible with Amiga browsers?

Yes, in Odyssey, go to "Settings/Preferences" and see where Odyssey points to in "Security".

btw, i do an automatic update everytime i boot up my Amiga which will fetch and copy the latest ca-bundle.crt file.

Works perfect here with every site i visit, never got a complaint from Odyssey that sites won't load because of outdated certificates.

@Elwood

It's just a text file with certificates, it doesn't matter if you mix them from YAM or OWB/Odyseey. They are the same (just not from the same day).

They simply downloaded it from the maintainer's site and put them into thir release package (they don't change or adapt anything in that file either).

You won't harm your installs by updating them, the program authors just don't update them that often due to their program's release cycles and if you take into account how long it has been since an Odyssey release it's probably normal to get certificate errors/warnings because of the outdated ca-bundle.crt upto now.

_________________
If slaughterhouses had glass walls, everyone would be a vegetarian. ~ Sir Paul McCartney
-
Did everything just taste purple for a second? ~ Philip J. Fry
-
Ain't got no cash, ain't got no style, ladies vomit when I smile. ~ Dr. John Zoidberg

 Status: Offline
Profile     Report this post  
lionstorm 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 29-Aug-2017 19:58:51
#17 ]
Super Member
Joined: 31-Jul-2003
Posts: 1546
From: the french side

@Raziel

maybe because in your settings, you checked the "ignore SSL errors"

 Status: Offline
Profile     Report this post  
saimo 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 29-Aug-2017 20:34:28
#18 ]
Elite Member
Joined: 11-Mar-2003
Posts: 2008
From: Unknown

@lionstorm

I don't have that option set and still I don't get any error. The file just works: it's only a matter of configuring Odyssey properly to reference it.

 Status: Offline
Profile     Report this post  
GrumpyOldMan 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 30-Aug-2017 18:43:42
#19 ]
Cult Member
Joined: 3-Nov-2003
Posts: 675
From: Haukipudas, Finland

@saimo, all

I removed my current versions and downloaded and unpacked the latest OWB and Odyssey packages from OS4Depot. The CA cert files are the ones that come within the them. They both work otherwise fine but I still get the error with both browsers when trying to address my bank website (or other sites that use the https).

Is there anything else that could cause this problem?


_________________
"Those are my principles, and if you don't like them... well, I have others." (Groucho Marx)

 Status: Offline
Profile     Report this post  
saimo 
Re: New CA certification file for MuiOWB/Odyssey needed
Posted on 30-Aug-2017 21:00:16
#20 ]
Elite Member
Joined: 11-Mar-2003
Posts: 2008
From: Unknown

@GrumpyOldMan

Quote:

GrumpyOldMan wrote:
@saimo, all

I removed my current versions and downloaded and unpacked the latest OWB and Odyssey packages from OS4Depot. The CA cert files are the ones that come within the them. They both work otherwise fine but I still get the error with both browsers when trying to address my bank website (or other sites that use the https).

Is there anything else that could cause this problem?


The certificate files in the packages are those available at the time of the release, and thus they are now outdated. Replace them with the file I indicated in the initial reply (I can't guarantee that this will solve all of your problems, but it definitely helps).

 Status: Offline
Profile     Report this post  

[ home ][ about us ] [ forums ][ classifieds ] [ links ][ news archive ] [ link to us ][ user account ]
Copyright 2000 - 2017 Amigaworld.net.

Amigaworld.net was originally founded by David Doyle