Project

General

Profile

https for F-Droid on Replicant 4.0

Added by Dmitry Samoyloff about 10 years ago

I can't use F-Droid repo through https://f-droid.org/repo , getting the error:

  Update failed for https://f-droid.org/repo -
  A problem occured while establishing an
  SSL connection. If problem persists,
  AND you have a very old device, you could
  try using http instead of https for the repo
  URL.

Using http works. Updating F-Droid to 0.55 didn't help.

P.S. https://google.com in browser gives warning but works:

  there are problems with the
  security certificate for this site.

Should I update SSL certificates somehow?


Replies (7)

RE: https for F-Droid on Replicant 4.0 - Added by Paul Kocialkowski about 10 years ago

That's a bit odd, I never encountered this issue. Maybe you should install a newer version of F-Droid?

RE: https for F-Droid on Replicant 4.0 - Added by Dmitry Samoyloff about 10 years ago

0.55 is the latest version and it have the same SSL error.

Here's what I've found: https://f-droid.org/forums/topic/cannot-update-f-droid-on-phone/ . In my case https://f-droid.org in Replicant's browser leads to "there are problems with the security certificate for this site.".

RE: https for F-Droid on Replicant 4.0 - Added by Dmitry Samoyloff about 10 years ago

Just tried https again and it works now without warnings or errors :-/

RE: https for F-Droid on Replicant 4.0 - Added by Paul Kocialkowski about 10 years ago

I just tested with the latest Replicant 4.0 images on the Galaxy S3 and both F-Droid and the Browser work properly with SSL. The certificates are recognized and are valid. Did you change anything related to certificates? I don't think what you're experiencing is the default behavior.

Can you check what's in /system/etc/security and /system/etc/security/cacerts? That's where the certificates are stored in Android.

RE: https for F-Droid on Replicant 4.0 - Added by Dmitry Samoyloff about 10 years ago

I just tested with the latest Replicant 4.0 images on the Galaxy S3 and both F-Droid and the Browser work properly with SSL. The certificates are recognized and are valid. Did you change anything related to certificates? I don't think what you're experiencing is the default behavior.

I've updated F-Droid to 0.55. Also, I rebooted the device.

Can you check what's in /system/etc/security and /system/etc/security/cacerts? That's where the certificates are stored in Android.

localhost / # ls -l /system/etc/security/ 
drwxr-xr-x    2 root     root          4096 Jan  4  2012 cacerts
-rw-r--r--    1 root     root          1125 Sep 29 21:43 otacerts.zip
localhost / # ls -l /system/etc/security/cacerts/                              
-rw-r--r--    1 root     root          4767 Sep 29 21:44 00673b5b.0
-rw-r--r--    1 root     root          4573 Sep 29 21:44 03e16f6c.0
-rw-r--r--    1 root     root          5292 Sep 29 21:44 08aef7bb.0
-rw-r--r--    1 root     root          4540 Sep 29 21:44 0d188d89.0
-rw-r--r--    1 root     root          4614 Sep 29 21:44 10531352.0
-rw-r--r--    1 root     root          4686 Sep 29 21:44 111e6273.0
-rw-r--r--    1 root     root          5027 Sep 29 21:44 1155c94b.0
-rw-r--r--    1 root     root          5345 Sep 29 21:44 119afc2e.0
-rw-r--r--    1 root     root          5844 Sep 29 21:44 11a09b38.0
-rw-r--r--    1 root     root          4300 Sep 29 21:44 12d55845.0
-rw-r--r--    1 root     root          4548 Sep 29 21:44 17b51fe6.0
-rw-r--r--    1 root     root          6251 Sep 29 21:44 1920cacb.0
-rw-r--r--    1 root     root          4890 Sep 29 21:44 1dac3003.0
-rw-r--r--    1 root     root          3603 Sep 29 21:44 1dbdda5b.0
-rw-r--r--    1 root     root          7074 Sep 29 21:44 1dcd6f4c.0
-rw-r--r--    1 root     root          4724 Sep 29 21:44 1df5ec47.0
-rw-r--r--    1 root     root          4332 Sep 29 21:44 1e8e7201.0
-rw-r--r--    1 root     root          8385 Sep 29 21:44 1eb37bdf.0
-rw-r--r--    1 root     root          4712 Sep 29 21:44 219d9499.0
-rw-r--r--    1 root     root          4747 Sep 29 21:44 23f4c490.0
-rw-r--r--    1 root     root          2948 Sep 29 21:44 27af790d.0
-rw-r--r--    1 root     root          5157 Sep 29 21:44 2afc57aa.0
-rw-r--r--    1 root     root          5785 Sep 29 21:44 2e8714cb.0
-rw-r--r--    1 root     root          4699 Sep 29 21:44 2fa87019.0
-rw-r--r--    1 root     root          7290 Sep 29 21:44 2fb1850a.0
-rw-r--r--    1 root     root          8829 Sep 29 21:44 33815e15.0
-rw-r--r--    1 root     root          4637 Sep 29 21:44 343eb6cb.0
-rw-r--r--    1 root     root          4628 Sep 29 21:44 399e7759.0
-rw-r--r--    1 root     root          4706 Sep 29 21:44 3a3b02ce.0
-rw-r--r--    1 root     root          4361 Sep 29 21:44 3ad48a91.0
-rw-r--r--    1 root     root          4892 Sep 29 21:44 3c58f906.0
-rw-r--r--    1 root     root          7412 Sep 29 21:44 3c860d51.0
-rw-r--r--    1 root     root          7350 Sep 29 21:44 3d441de8.0
-rw-r--r--    1 root     root          4778 Sep 29 21:44 3e7271e8.0
-rw-r--r--    1 root     root          5512 Sep 29 21:44 418595b9.0
-rw-r--r--    1 root     root          4817 Sep 29 21:44 455f1b52.0
-rw-r--r--    1 root     root          7432 Sep 29 21:44 46b2fd3b.0
-rw-r--r--    1 root     root          4263 Sep 29 21:44 48478734.0
-rw-r--r--    1 root     root          2687 Sep 29 21:44 4d654d1d.0
-rw-r--r--    1 root     root          4445 Sep 29 21:44 4e18c148.0
-rw-r--r--    1 root     root          5076 Sep 29 21:44 4fbd6bfa.0
-rw-r--r--    1 root     root          4731 Sep 29 21:44 5021a0a2.0
-rw-r--r--    1 root     root          7420 Sep 29 21:44 5046c355.0
-rw-r--r--    1 root     root          5165 Sep 29 21:44 524d9b43.0
-rw-r--r--    1 root     root          4959 Sep 29 21:44 56b8a0b6.0
-rw-r--r--    1 root     root          4433 Sep 29 21:44 57692373.0
-rw-r--r--    1 root     root          4826 Sep 29 21:44 58a44af1.0
-rw-r--r--    1 root     root          3613 Sep 29 21:44 594f1775.0
-rw-r--r--    1 root     root          4804 Sep 29 21:44 5a3f0ff8.0
-rw-r--r--    1 root     root          4678 Sep 29 21:44 5a5372fc.0
-rw-r--r--    1 root     root          6031 Sep 29 21:44 5cf9d536.0
-rw-r--r--    1 root     root          3478 Sep 29 21:44 5e4e69e7.0
-rw-r--r--    1 root     root          4824 Sep 29 21:44 60afe812.0
-rw-r--r--    1 root     root          4690 Sep 29 21:44 635ccfd5.0
-rw-r--r--    1 root     root          4793 Sep 29 21:44 67495436.0
-rw-r--r--    1 root     root          4648 Sep 29 21:44 69105f4f.0
-rw-r--r--    1 root     root          4534 Sep 29 21:44 6adf0799.0
-rw-r--r--    1 root     root          3957 Sep 29 21:44 6e8bf996.0
-rw-r--r--    1 root     root          4484 Sep 29 21:44 6fcc125d.0
-rw-r--r--    1 root     root          4270 Sep 29 21:44 72f369af.0
-rw-r--r--    1 root     root          3105 Sep 29 21:44 72fa7371.0
-rw-r--r--    1 root     root          3147 Sep 29 21:44 74c26bd0.0
-rw-r--r--    1 root     root          4831 Sep 29 21:44 75680d2e.0
-rw-r--r--    1 root     root          2664 Sep 29 21:44 7651b327.0
-rw-r--r--    1 root     root          4949 Sep 29 21:44 76579174.0
-rw-r--r--    1 root     root          4312 Sep 29 21:44 7999be0d.0
-rw-r--r--    1 root     root          5157 Sep 29 21:44 7a481e66.0
-rw-r--r--    1 root     root          7332 Sep 29 21:44 7a819ef2.0
-rw-r--r--    1 root     root          3010 Sep 29 21:44 7d3cd826.0
-rw-r--r--    1 root     root          4524 Sep 29 21:44 7d453d8f.0
-rw-r--r--    1 root     root          4679 Sep 29 21:44 81b9768f.0
-rw-r--r--    1 root     root          4452 Sep 29 21:44 8470719d.0
-rw-r--r--    1 root     root          4634 Sep 29 21:44 84cba82f.0
-rw-r--r--    1 root     root          4571 Sep 29 21:44 85cde254.0
-rw-r--r--    1 root     root          4276 Sep 29 21:44 86212b19.0
-rw-r--r--    1 root     root          7156 Sep 29 21:44 87753b0d.0
-rw-r--r--    1 root     root          4260 Sep 29 21:44 882de061.0
-rw-r--r--    1 root     root          4535 Sep 29 21:44 895cad1a.0
-rw-r--r--    1 root     root          2850 Sep 29 21:44 89c02a45.0
-rw-r--r--    1 root     root          3613 Sep 29 21:44 8f7b96c4.0
-rw-r--r--    1 root     root          7988 Sep 29 21:44 9339512a.0
-rw-r--r--    1 root     root          4511 Sep 29 21:44 95aff9e3.0
-rw-r--r--    1 root     root          4150 Sep 29 21:44 9685a493.0
-rw-r--r--    1 root     root          4405 Sep 29 21:44 9772ca32.0
-rw-r--r--    1 root     root          7209 Sep 29 21:44 9d6523ce.0
-rw-r--r--    1 root     root          4369 Sep 29 21:44 9dbefe7b.0
-rw-r--r--    1 root     root          8370 Sep 29 21:44 9f533518.0
-rw-r--r--    1 root     root          5431 Sep 29 21:44 a0bc6fbb.0
-rw-r--r--    1 root     root          3716 Sep 29 21:44 a15b3b6b.0
-rw-r--r--    1 root     root          4284 Sep 29 21:44 a3896b44.0
-rw-r--r--    1 root     root          4123 Sep 29 21:44 a7605362.0
-rw-r--r--    1 root     root          2865 Sep 29 21:44 a7d2cf64.0
-rw-r--r--    1 root     root          4333 Sep 29 21:44 ab5346f4.0
-rw-r--r--    1 root     root          6145 Sep 29 21:44 add67345.0
-rw-r--r--    1 root     root          4368 Sep 29 21:44 b0f3e76e.0
-rw-r--r--    1 root     root          4355 Sep 29 21:44 b7db1890.0
-rw-r--r--    1 root     root          4515 Sep 29 21:44 bc3f2570.0
-rw-r--r--    1 root     root          3010 Sep 29 21:44 bcdd5959.0
-rw-r--r--    1 root     root          4576 Sep 29 21:44 bda4cc84.0
-rw-r--r--    1 root     root          4688 Sep 29 21:44 bdacca6f.0
-rw-r--r--    1 root     root          5229 Sep 29 21:44 bf64f35b.0
-rw-r--r--    1 root     root          3716 Sep 29 21:44 c215bc69.0
-rw-r--r--    1 root     root          3207 Sep 29 21:44 c33a80d4.0
-rw-r--r--    1 root     root          4524 Sep 29 21:44 c527e4ab.0
-rw-r--r--    1 root     root          4700 Sep 29 21:44 c7e2a638.0
-rw-r--r--    1 root     root          7834 Sep 29 21:44 c8763593.0
-rw-r--r--    1 root     root          2534 Sep 29 21:44 ccc52f49.0
-rw-r--r--    1 root     root          4591 Sep 29 21:44 cdaebb72.0
-rw-r--r--    1 root     root          4680 Sep 29 21:44 cf701eeb.0
-rw-r--r--    1 root     root          7520 Sep 29 21:44 d16a5865.0
-rw-r--r--    1 root     root          5089 Sep 29 21:44 d537fba6.0
-rw-r--r--    1 root     root          4887 Sep 29 21:44 d64f06f3.0
-rw-r--r--    1 root     root          3965 Sep 29 21:44 d777342d.0
-rw-r--r--    1 root     root          4987 Sep 29 21:44 d8274e24.0
-rw-r--r--    1 root     root          6980 Sep 29 21:44 dbc54cab.0
-rw-r--r--    1 root     root          3159 Sep 29 21:44 ddc328ff.0
-rw-r--r--    1 root     root          4280 Sep 29 21:44 e48193cf.0
-rw-r--r--    1 root     root          7505 Sep 29 21:44 e60bf0c0.0
-rw-r--r--    1 root     root          7148 Sep 29 21:44 e775ed2d.0
-rw-r--r--    1 root     root          3117 Sep 29 21:44 e7b8d656.0
-rw-r--r--    1 root     root          4854 Sep 29 21:44 e8651083.0
-rw-r--r--    1 root     root          7412 Sep 29 21:44 ea169617.0
-rw-r--r--    1 root     root          4270 Sep 29 21:44 eb375c3e.0
-rw-r--r--    1 root     root          3105 Sep 29 21:44 ed049835.0
-rw-r--r--    1 root     root          4694 Sep 29 21:44 ed524cf5.0
-rw-r--r--    1 root     root          5411 Sep 29 21:44 ee7cd6fb.0
-rw-r--r--    1 root     root          3010 Sep 29 21:44 f4996e82.0
-rw-r--r--    1 root     root          4672 Sep 29 21:44 f58a60fe.0
-rw-r--r--    1 root     root          7006 Sep 29 21:44 f61bff45.0
-rw-r--r--    1 root     root          7517 Sep 29 21:44 f80cc7f6.0
-rw-r--r--    1 root     root          4603 Sep 29 21:44 fac084d7.0
-rw-r--r--    1 root     root          5219 Sep 29 21:44 facacbc6.0
-rw-r--r--    1 root     root          4686 Sep 29 21:44 fde84897.0
-rw-r--r--    1 root     root          5106 Sep 29 21:44 ff783690.0
localhost / #                                                                  

RE: https for F-Droid on Replicant 4.0 - Added by Paul Kocialkowski about 10 years ago

That looks good, though I tried on my Galaxy S3 with the latest Replicant images and it works well, so this must be an issue that's specific to your setup. Does this happen to anyone else?

RE: https for F-Droid on Replicant 4.0 - Added by Rick Landman about 10 years ago

Paul Kocialkowski wrote:

so this must be an issue that's specific to your setup. Does this happen to anyone else?

Hello,

I am new to replicant and hope to be able to contribute in the future. Just bought a new S3 and put replicant 4.0 on it (so never used it with android/anything else). Everything went smoothly as pointed by the docs. The first thing I encountered was exactly the same issue as Samoyloff is mentioning.

When I try to update repo of F-droid (https://f-droid.org/repo) I get:

Update failed for https://f-droid.org/repo -
A problem occured while establishing an
SSL connection. If problem persists,
AND you have a very old device, you could
try using http instead of https for the repo
URL.??

If I browse to any https site (including ones I am definitely sure have no certificate issues) I consistently get errors/warnings about the security certificates.

If I change f-droid repo to "http://f-droid.org/repo" the update proces runs fine. I did a few reboots and changed repo back to "https://f-droid.org/repo". Nothing changing sofar. I checked "/system/etc/security" and "/system/etc/security/cacerts". Both are filled the same way as Samoyloff quoted above.

If you need anymore info please let me know.

Thanks, Rick

Update: And a few minutes later all https sites work fine. Nothing changed, even no reboot.

    (1-7/7)