libera/#devuan/ Wednesday, 2018-10-31

yae7nae4how to trust a self-signed certificate on Devuan? I have tried copy localhost.crt to /usr/local/share/ca-certificates and run update-ca-certificates, curl https://localhost works but both Firefox and Chromium didn't trust the cert.    I also tried dpkg-reconfigure ca-certificate but still same.02:36
djphprobably have to import them into ff (etc)02:37
yae7nae4I want to trust cert in system, so I can avoid such configuration in browsers.02:39
gnarfacehmmm02:40
yae7nae4I also tried to install p11-kit contains `trust` but seems not works on Devuan to import a cert as `anchor` (this method works on Arch Linux and then Firefox/Chromium also trust the cert)02:40
gnarfacethis worked last i tried it but i haven't tried a new version of firefox or chromium...02:40
gnarfacei'm trying to remember if all you had to do was put the file in a ca-certificates directory or if you also have to set a variable somewhere02:41
gnarfacei know that some programs are more picky about the format than others02:41
gnarfaceso maybe it's just how you saved it02:41
yae7nae4https://bugs.freedesktop.org/show_bug.cgi?id=66161    I found this, seems Firefox ship with its own hardcoded set of certificates (libnssckbi.so), Arch Linux solved this problem by apply a patch to p11-kit. this is a bit complex. so the best solution may be following the document of the Browser (I guess certuils should works for both Firefox and Chromium, but so complex)04:03
gnarfaceoh, maybe i did just add it to firefox manually after all04:09
gnarfacenow that i think of it04:09
m3ttihi folks21:06
m3ttii wanted to thank you for this awesome systemd free distro21:06
m3ttii use it mainly as development mashine in stable mode with lxqt which is awesome i love it21:07
golinuxD:21:08
debdogthat was prolly a typo21:10
nacellenot for some devs22:22
* nacelle runs22:22

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!