Poster | Thread |
GrumpyOldMan
| |
New CA certification file for MuiOWB/Odyssey needed Posted on 24-Aug-2017 21:32:30
| | [ #1 ] |
|
|
|
Cult Member |
Joined: 3-Nov-2003 Posts: 675
From: Haukipudas, Finland | | |
|
| Hello,
Can somebody please point me towards the latest CA cert file version for MUIOWB and Odyssey browsers? The ones that came with the install packages give out a error making it impossible to enter sites that require the correct certification.
_________________ "Those are my principles, and if you don't like them... well, I have others." (Groucho Marx) |
|
Status: Offline |
|
|
saimo
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 25-Aug-2017 10:15:14
| | [ #2 ] |
|
|
|
Elite Member |
Joined: 11-Mar-2003 Posts: 2453
From: Unknown | | |
|
| |
Status: Offline |
|
|
tonyw
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 26-Aug-2017 3:47:25
| | [ #3 ] |
|
|
|
Elite Member |
Joined: 8-Mar-2003 Posts: 3240
From: Sydney (of course) | | |
|
| @saimo
Pardon my ignorance, but what should one do with that file? There does not seem to be anything like it anywhere in the OWB or Odyssey directories and nothing in SYS:.
_________________ cheers tony
Hyperion Support Forum: http://forum.hyperion-entertainment.biz/index.php |
|
Status: Offline |
|
|
kolla
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 26-Aug-2017 8:10:23
| | [ #4 ] |
|
|
|
Elite Member |
Joined: 21-Aug-2003 Posts: 2893
From: Trondheim, Norway | | |
|
| @tonyw
Don't they all just use AmiSSL? _________________ B5D6A1D019D5D45BCC56F4782AC220D8B3E2A6CC |
|
Status: Offline |
|
|
saimo
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 26-Aug-2017 8:47:16
| | [ #5 ] |
|
|
|
Elite Member |
Joined: 11-Mar-2003 Posts: 2453
From: Unknown | | |
|
| @tonyw
Quote:
Pardon my ignorance, but what should one do with that file? There does not seem to be anything like it anywhere in the OWB or Odyssey directories and nothing in SYS:. |
Yep, the browser* needs that file to be called curl-ca-bundle.crt. *I believe that it's libcurl, which the browser links to, that needs that file.Last edited by saimo on 26-Aug-2017 at 08:49 AM.
_________________ RETREAM - retro dreams for Amiga, Commodore 64 and PC |
|
Status: Offline |
|
|
jPV
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 26-Aug-2017 12:50:07
| | [ #6 ] |
|
|
|
Cult Member |
Joined: 11-Apr-2005 Posts: 812
From: .fi | | |
|
| @kolla Quote:
Don't they all just use AmiSSL? |
No._________________ - The wiki based MorphOS Library - Your starting point for MorphOS - Software made by jPV^RNO |
|
Status: Offline |
|
|
Anonymous
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 26-Aug-2017 16:03:03
| | [ # ] |
|
| @tonyw
iirc Odyssey uses the "curl-ca-bundle.crt" installed in DEVS: (i could be wrong though) |
|
|
|
|
sundown
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 26-Aug-2017 18:00:45
| | [ #8 ] |
|
|
|
Elite Member |
Joined: 30-Aug-2003 Posts: 5120
From: Right here... | | |
|
| @tonyw
Quote:
Pardon my ignorance, but what should one do with that file? |
Just re-name the downloaded 'cacert.pem' file to 'curl-ca-bundle.crt' for odyssey._________________ Hate tends to make you look stupid... |
|
Status: Offline |
|
|
elwood
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 27-Aug-2017 9:23:22
| | [ #9 ] |
|
|
|
Elite Member |
Joined: 17-Sep-2003 Posts: 3428
From: Lyon, France | | |
|
| @tonyw
Quote:
what should one do with that file? There does not seem to be anything like it anywhere in the OWB or Odyssey directories |
Strange: Programs:Internet/Odyssey> dir cu#? curl-ca-bundle.crt 250607 ----rwed 16-May-16 13:16:10
Programs:Internet/OWB1.16> dir cu#? curl-ca-bundle.crt 225828 ----rw-d 17-Oct-09 20:56:50
Without it I can't access httpS sites._________________ Philippe 'Elwood' Ferrucci Sam460 1.10 Ghz AmigaOS 4 betatester Amiga Translator Organisation |
|
Status: Offline |
|
|
jabirulo
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 27-Aug-2017 11:34:25
| | [ #10 ] |
|
|
|
Regular Member |
Joined: 20-Jun-2004 Posts: 370
From: Donosti (GUIPUZCOA) | | |
|
| @elwood
Size differs 'cos it gets updated from time to time. Maybe new version have some certificates removed (outdsated certif). It's a plain text file, you can edit//view it: ## ## Bundle of CA Root Certificates ## ## Certificate data from Mozilla as of: Mon Apr 27 08:58:04 2015 ## ## This is a bundle of X.509 certificates of public Certificate Authorities ## (CA). These were automatically extracted from Mozilla's root certificates ## file (certdata.txt). This file can be found in the mozilla source tree: ## http://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt ... Last edited by jabirulo on 27-Aug-2017 at 11:37 AM. Last edited by jabirulo on 27-Aug-2017 at 11:36 AM.
|
|
Status: Offline |
|
|
tonyw
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 27-Aug-2017 14:43:03
| | [ #11 ] |
|
|
|
Elite Member |
Joined: 8-Mar-2003 Posts: 3240
From: Sydney (of course) | | |
|
| @elwood
I wasn't looking for "curl-ca-bundle.crt", I was looking for the file named above, ie "cacert.pem". _________________ cheers tony
Hyperion Support Forum: http://forum.hyperion-entertainment.biz/index.php |
|
Status: Offline |
|
|
Anonymous
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 28-Aug-2017 7:48:57
| | [ # ] |
|
| @tonyw
You can call the file whatever you want and place it wherever you want.
It can be changed in Odyssey in Settings/Security - Certificate Path
I call it "curl-ca-bundle.crt" and let it rest in DEVS:
Odyssey and YAM point to that. Some of the system software access it from there with that name. And another advantage is, i only have to update one file and not deal with many. Last edited by Raziel on 28-Aug-2017 at 07:49 AM.
|
|
|
|
|
GrumpyOldMan
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 28-Aug-2017 18:22:04
| | [ #13 ] |
|
|
|
Cult Member |
Joined: 3-Nov-2003 Posts: 675
From: Haukipudas, Finland | | |
|
| @Raziel, all
I downloaded the latest PEM file (dated June 7th), renamed it and copied it to 'devs' and also into the MuiOWB and Odyssey program directories. The CA error still appears.
Is there a way to check where the browsers fetch this file? Or is the latest PEM file somehow incompatible with Amiga browsers?
_________________ "Those are my principles, and if you don't like them... well, I have others." (Groucho Marx) |
|
Status: Offline |
|
|
elwood
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 28-Aug-2017 19:24:02
| | [ #14 ] |
|
|
|
Elite Member |
Joined: 17-Sep-2003 Posts: 3428
From: Lyon, France | | |
|
| @Raziel
Oh, so "curl-ca-bundle.crt" is probably the default as I never changed its name. Thanks.
@GrumpyOldMan
Once I tried to update this file with a more recent one but I could not access HTTPS sites anymore so I reverted and sticked with the original one since then. "Original one" = the file released with the program. So my .cert file in Odyssey was released with it. The file in YAM/Resources/Certificates directory was released with Yam. I don't try to mix things up and everything works Last edited by elwood on 28-Aug-2017 at 07:31 PM. Last edited by elwood on 28-Aug-2017 at 07:27 PM.
_________________ Philippe 'Elwood' Ferrucci Sam460 1.10 Ghz AmigaOS 4 betatester Amiga Translator Organisation |
|
Status: Offline |
|
|
saimo
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 28-Aug-2017 22:06:19
| | [ #15 ] |
|
|
|
Elite Member |
Joined: 11-Mar-2003 Posts: 2453
From: Unknown | | |
|
| @GrumpyOldMan
Quote:
I downloaded the latest PEM file (dated June 7th), renamed it and copied it to 'devs' and also into the MuiOWB and Odyssey program directories. The CA error still appears.
Is there a way to check where the browsers fetch this file? Or is the latest PEM file somehow incompatible with Amiga browsers? |
I've been using the same file for months (well, not that I surf much on AmigaOS, but still...) without issues. I simply have it in Odyssey's main directory as "curl-ca-bundle.crt". Have you removed the old file from the Odyssey directory? Do you have the latest Odyssey (v1.23 r4)? You can use Snoopy to see which file gets loaded first._________________ RETREAM - retro dreams for Amiga, Commodore 64 and PC |
|
Status: Offline |
|
|
Anonymous
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 29-Aug-2017 7:51:56
| | [ # ] |
|
| @GrumpyOldMan
Quote:
s there a way to check where the browsers fetch this file? Or is the latest PEM file somehow incompatible with Amiga browsers?
|
Yes, in Odyssey, go to "Settings/Preferences" and see where Odyssey points to in "Security".
btw, i do an automatic update everytime i boot up my Amiga which will fetch and copy the latest ca-bundle.crt file.
Works perfect here with every site i visit, never got a complaint from Odyssey that sites won't load because of outdated certificates.
@Elwood
It's just a text file with certificates, it doesn't matter if you mix them from YAM or OWB/Odyseey. They are the same (just not from the same day).
They simply downloaded it from the maintainer's site and put them into thir release package (they don't change or adapt anything in that file either).
You won't harm your installs by updating them, the program authors just don't update them that often due to their program's release cycles and if you take into account how long it has been since an Odyssey release it's probably normal to get certificate errors/warnings because of the outdated ca-bundle.crt upto now. |
|
|
|
|
lionstorm
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 29-Aug-2017 20:58:51
| | [ #17 ] |
|
|
|
Super Member |
Joined: 31-Jul-2003 Posts: 1588
From: the french side | | |
|
| @Raziel
maybe because in your settings, you checked the "ignore SSL errors" |
|
Status: Offline |
|
|
saimo
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 29-Aug-2017 21:34:28
| | [ #18 ] |
|
|
|
Elite Member |
Joined: 11-Mar-2003 Posts: 2453
From: Unknown | | |
|
| @lionstorm
I don't have that option set and still I don't get any error. The file just works: it's only a matter of configuring Odyssey properly to reference it. _________________ RETREAM - retro dreams for Amiga, Commodore 64 and PC |
|
Status: Offline |
|
|
GrumpyOldMan
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 30-Aug-2017 19:43:42
| | [ #19 ] |
|
|
|
Cult Member |
Joined: 3-Nov-2003 Posts: 675
From: Haukipudas, Finland | | |
|
| @saimo, all
I removed my current versions and downloaded and unpacked the latest OWB and Odyssey packages from OS4Depot. The CA cert files are the ones that come within the them. They both work otherwise fine but I still get the error with both browsers when trying to address my bank website (or other sites that use the https).
Is there anything else that could cause this problem?
_________________ "Those are my principles, and if you don't like them... well, I have others." (Groucho Marx) |
|
Status: Offline |
|
|
saimo
| |
Re: New CA certification file for MuiOWB/Odyssey needed Posted on 30-Aug-2017 22:00:16
| | [ #20 ] |
|
|
|
Elite Member |
Joined: 11-Mar-2003 Posts: 2453
From: Unknown | | |
|
| @GrumpyOldMan
Quote:
GrumpyOldMan wrote: @saimo, all
I removed my current versions and downloaded and unpacked the latest OWB and Odyssey packages from OS4Depot. The CA cert files are the ones that come within the them. They both work otherwise fine but I still get the error with both browsers when trying to address my bank website (or other sites that use the https).
Is there anything else that could cause this problem? |
The certificate files in the packages are those available at the time of the release, and thus they are now outdated. Replace them with the file I indicated in the initial reply (I can't guarantee that this will solve all of your problems, but it definitely helps)._________________ RETREAM - retro dreams for Amiga, Commodore 64 and PC |
|
Status: Offline |
|
|