Hello,

Can somebody please point me towards the latest CA cert file version for MUIOWB and Odyssey browsers? The ones that came with the install packages give out a error making it impossible to enter sites that require the correct certification.

_________________
"Those are my principles, and if you don't like them... well, I have others." (Groucho Marx)

@GrumpyOldMan

IIRC, this should do: https://curl.haxx.se/ca/cacert.pem (from https://curl.haxx.se/docs/caextract.html, obtained from https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt).

_________________
RETREAM - retro dreams for Amiga, Commodore 64 and PC

@saimo

Pardon my ignorance, but what should one do with that file? There does not seem to be anything like it anywhere in the OWB or Odyssey directories and nothing in SYS:.

_________________
cheers
tony

Hyperion Support Forum: http://forum.hyperion-entertainment.biz/index.php

@tonyw

Don't they all just use AmiSSL?

_________________
B5D6A1D019D5D45BCC56F4782AC220D8B3E2A6CC

@tonyw

Quote:

Pardon my ignorance, but what should one do with that file? There does not seem to be anything like it anywhere in the OWB or Odyssey directories and nothing in SYS:.

Yep, the browser* needs that file to be called curl-ca-bundle.crt.
*I believe that it's libcurl, which the browser links to, that needs that file.

Last edited by saimo on 26-Aug-2017 at 08:49 AM.

_________________
RETREAM - retro dreams for Amiga, Commodore 64 and PC

@kolla
Quote:

Don't they all just use AmiSSL?

No.

_________________
- The wiki based MorphOS Library - Your starting point for MorphOS
- Software made by jPV^RNO

@tonyw

iirc Odyssey uses the "curl-ca-bundle.crt" installed in DEVS: (i could be wrong though)

@tonyw

Quote:

Pardon my ignorance, but what should one do with that file?

Just re-name the downloaded 'cacert.pem' file to 'curl-ca-bundle.crt' for odyssey.

_________________
Hate tends to make you look stupid...

@tonyw

Quote:

what should one do with that file? There does not seem to be anything like it anywhere in the OWB or Odyssey directories

Strange:
Programs:Internet/Odyssey> dir cu#?
curl-ca-bundle.crt 250607 ----rwed 16-May-16 13:16:10

Programs:Internet/OWB1.16> dir cu#?
curl-ca-bundle.crt 225828 ----rw-d 17-Oct-09 20:56:50

Without it I can't access httpS sites.

_________________
Philippe 'Elwood' Ferrucci
Sam460 1.10 Ghz
AmigaOS 4 betatester
Amiga Translator Organisation

@elwood

Size differs 'cos it gets updated from time to time. Maybe new version have some certificates removed (outdsated certif). It's a plain text file, you can edit//view it:
##
## Bundle of CA Root Certificates
##
## Certificate data from Mozilla as of: Mon Apr 27 08:58:04 2015
##
## This is a bundle of X.509 certificates of public Certificate Authorities
## (CA). These were automatically extracted from Mozilla's root certificates
## file (certdata.txt). This file can be found in the mozilla source tree:
## http://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
...

Last edited by jabirulo on 27-Aug-2017 at 11:37 AM.
Last edited by jabirulo on 27-Aug-2017 at 11:36 AM.

@elwood

I wasn't looking for "curl-ca-bundle.crt", I was looking for the file named above, ie "cacert.pem".

_________________
cheers
tony

Hyperion Support Forum: http://forum.hyperion-entertainment.biz/index.php

@tonyw

You can call the file whatever you want and place it wherever you want.

It can be changed in Odyssey in Settings/Security - Certificate Path

I call it "curl-ca-bundle.crt" and let it rest in DEVS:

Odyssey and YAM point to that.
Some of the system software access it from there with that name.
And another advantage is, i only have to update one file and not deal with many.

Last edited by Raziel on 28-Aug-2017 at 07:49 AM.

@Raziel, all

I downloaded the latest PEM file (dated June 7th), renamed it and copied it to 'devs' and also into the MuiOWB and Odyssey program directories. The CA error still appears.

Is there a way to check where the browsers fetch this file? Or is the latest PEM file somehow incompatible with Amiga browsers?

_________________
"Those are my principles, and if you don't like them... well, I have others." (Groucho Marx)

@Raziel

Oh, so "curl-ca-bundle.crt" is probably the default as I never changed its name. Thanks.

@GrumpyOldMan

Once I tried to update this file with a more recent one but I could not access HTTPS sites anymore so I reverted and sticked with the original one since then. "Original one" = the file released with the program. So my .cert file in Odyssey was released with it. The file in YAM/Resources/Certificates directory was released with Yam.
I don't try to mix things up and everything works

Last edited by elwood on 28-Aug-2017 at 07:31 PM.
Last edited by elwood on 28-Aug-2017 at 07:27 PM.

_________________
Philippe 'Elwood' Ferrucci
Sam460 1.10 Ghz
AmigaOS 4 betatester
Amiga Translator Organisation

@GrumpyOldMan

Quote:

I downloaded the latest PEM file (dated June 7th), renamed it and copied it to 'devs' and also into the MuiOWB and Odyssey program directories. The CA error still appears. Is there a way to check where the browsers fetch this file? Or is the latest PEM file somehow incompatible with Amiga browsers?

I've been using the same file for months (well, not that I surf much on AmigaOS, but still...) without issues. I simply have it in Odyssey's main directory as "curl-ca-bundle.crt".
Have you removed the old file from the Odyssey directory? Do you have the latest Odyssey (v1.23 r4)?
You can use Snoopy to see which file gets loaded first.

_________________
RETREAM - retro dreams for Amiga, Commodore 64 and PC

@GrumpyOldMan

Quote:

s there a way to check where the browsers fetch this file? Or is the latest PEM file somehow incompatible with Amiga browsers?

Yes, in Odyssey, go to "Settings/Preferences" and see where Odyssey points to in "Security".

btw, i do an automatic update everytime i boot up my Amiga which will fetch and copy the latest ca-bundle.crt file.

Works perfect here with every site i visit, never got a complaint from Odyssey that sites won't load because of outdated certificates.

@Elwood

It's just a text file with certificates, it doesn't matter if you mix them from YAM or OWB/Odyseey. They are the same (just not from the same day).

They simply downloaded it from the maintainer's site and put them into thir release package (they don't change or adapt anything in that file either).

You won't harm your installs by updating them, the program authors just don't update them that often due to their program's release cycles and if you take into account how long it has been since an Odyssey release it's probably normal to get certificate errors/warnings because of the outdated ca-bundle.crt upto now.

@Raziel

maybe because in your settings, you checked the "ignore SSL errors"

@lionstorm

I don't have that option set and still I don't get any error. The file just works: it's only a matter of configuring Odyssey properly to reference it.

_________________
RETREAM - retro dreams for Amiga, Commodore 64 and PC

@saimo, all

I removed my current versions and downloaded and unpacked the latest OWB and Odyssey packages from OS4Depot. The CA cert files are the ones that come within the them. They both work otherwise fine but I still get the error with both browsers when trying to address my bank website (or other sites that use the https).

Is there anything else that could cause this problem?

_________________
"Those are my principles, and if you don't like them... well, I have others." (Groucho Marx)

@GrumpyOldMan

Quote:

GrumpyOldMan wrote: @saimo, all I removed my current versions and downloaded and unpacked the latest OWB and Odyssey packages from OS4Depot. The CA cert files are the ones that come within the them. They both work otherwise fine but I still get the error with both browsers when trying to address my bank website (or other sites that use the https). Is there anything else that could cause this problem?

The certificate files in the packages are those available at the time of the release, and thus they are now outdated. Replace them with the file I indicated in the initial reply (I can't guarantee that this will solve all of your problems, but it definitely helps).

_________________
RETREAM - retro dreams for Amiga, Commodore 64 and PC