INTERACT FORUM

Please login or register.

Login with username, password and session length
Advanced search  
Pages: [1]   Go Down

Author Topic: Change to CA certificates in MC 25  (Read 1743 times)

bob

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 13821
Change to CA certificates in MC 25
« on: March 22, 2019, 03:03:34 pm »

Instead of looking for the CA certificates (which allow https to work in MC) in the usual debian location of /etc/ssl/certs/ca-certificates.crt we look for them in MC's application directory now (using the package symlink) at /usr/lib/jriver/MC25/ca-certificates.crt, that is a symlink to /etc/ssl/certs/ca-certificates.crt.

If you are running on a non-debian based system you can do one of the two following things:
1) Change the /usr/lib/jriver/MC25/ca-certificates.crt symlink to point to the one for your distro
or
2) Change that symlink to local-ca-certificates.crt in the same /usr/lib/jriver/MC25 directory. This local copy is the created on the packaging system here when the .deb is created.
Logged

BryanC

  • MC Beta Team
  • Citizen of the Universe
  • *****
  • Posts: 2651
Re: Change to CA certificates in MC 25
« Reply #1 on: March 22, 2019, 10:10:23 pm »

To clarify, /usr/lib/jriver/MC25/local-ca-certificates.crt is checked before /usr/lib/jriver/MC25/ca-certificates.crt? So if we don't want to mess with the packaged files we should symlink /usr/lib/jriver/MC25/local-ca-certificates.crt to /etc/ssl/certs/ca-certificates.crt (or wherever the system certificate resides)?
Logged

bob

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 13821
Re: Change to CA certificates in MC 25
« Reply #2 on: March 25, 2019, 08:07:38 am »

To clarify, /usr/lib/jriver/MC25/local-ca-certificates.crt is checked before /usr/lib/jriver/MC25/ca-certificates.crt? So if we don't want to mess with the packaged files we should symlink /usr/lib/jriver/MC25/local-ca-certificates.crt to /etc/ssl/certs/ca-certificates.crt (or wherever the system certificate resides)?
Unfortunately gnutls will only use one ca cert file. If you have the system ca-certificates.crt file (some systems don't have it) and it's NOT in /etc/ssl/certs/ca-certificates.crt you symlink to that.
If you don't have it, you symlink to the local copy /usr/lib/jriver/MC25/local-ca-certificates.crt
Logged
Pages: [1]   Go Up