INTERACT FORUM

More => Old Versions => JRiver Media Center 25 for Linux => Topic started by: bob on March 22, 2019, 03:03:34 pm

Title: Change to CA certificates in MC 25
Post by: bob on March 22, 2019, 03:03:34 pm
Instead of looking for the CA certificates (which allow https to work in MC) in the usual debian location of /etc/ssl/certs/ca-certificates.crt we look for them in MC's application directory now (using the package symlink) at /usr/lib/jriver/MC25/ca-certificates.crt, that is a symlink to /etc/ssl/certs/ca-certificates.crt.

If you are running on a non-debian based system you can do one of the two following things:
1) Change the /usr/lib/jriver/MC25/ca-certificates.crt symlink to point to the one for your distro
or
2) Change that symlink to local-ca-certificates.crt in the same /usr/lib/jriver/MC25 directory. This local copy is the created on the packaging system here when the .deb is created.
Title: Re: Change to CA certificates in MC 25
Post by: BryanC on March 22, 2019, 10:10:23 pm
To clarify, /usr/lib/jriver/MC25/local-ca-certificates.crt is checked before /usr/lib/jriver/MC25/ca-certificates.crt? So if we don't want to mess with the packaged files we should symlink /usr/lib/jriver/MC25/local-ca-certificates.crt to /etc/ssl/certs/ca-certificates.crt (or wherever the system certificate resides)?
Title: Re: Change to CA certificates in MC 25
Post by: bob on March 25, 2019, 08:07:38 am
To clarify, /usr/lib/jriver/MC25/local-ca-certificates.crt is checked before /usr/lib/jriver/MC25/ca-certificates.crt? So if we don't want to mess with the packaged files we should symlink /usr/lib/jriver/MC25/local-ca-certificates.crt to /etc/ssl/certs/ca-certificates.crt (or wherever the system certificate resides)?
Unfortunately gnutls will only use one ca cert file. If you have the system ca-certificates.crt file (some systems don't have it) and it's NOT in /etc/ssl/certs/ca-certificates.crt you symlink to that.
If you don't have it, you symlink to the local copy /usr/lib/jriver/MC25/local-ca-certificates.crt