-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Problem with Certificates in Jessie
Jessie's certificate handling is broken. If a root cert. is withdrawn, Jessie fails instead of checking alternative root certs. This can be worked around by people with expertise, but for muggles like me, it means, e.g. that I can't enlist my new Pi 3 at Einstein@Home. Please fix.
-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Re: Problem with Certificates in Jessie
Foundation: Are you listening? The Debian custodian should be taken aside for a serious chat.
- RaTTuS
- Posts: 10703
- Joined: Tue Nov 29, 2011 11:12 am
- Location: North West UK
- Contact: Twitter YouTube
Re: Problem with Certificates in Jessie
is this foundation or debian problem ?
have you put in a bug report ?
have you put in a bug report ?
How To ask Questions :- http://www.catb.org/esr/faqs/smart-questions.html
WARNING - some parts of this post may be erroneous YMMV
1QC43qbL5FySu2Pi51vGqKqxy3UiJgukSX
Covfefe
WARNING - some parts of this post may be erroneous YMMV
1QC43qbL5FySu2Pi51vGqKqxy3UiJgukSX
Covfefe
-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Re: Problem with Certificates in Jessie
It's not my problem, that's for sure. All of the WiFi problems, well documented on this and other sites, and now this. I'm on the verge of chucking my Pi 3 and going elsewhere.
-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Re: Problem with Certificates in Jessie
[MOD EDIT - WARNING ISSUED]
-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Re: Problem with Certificates in Jessie
Yeah, ok.
Quoting from "makezine": "We also ran into one problem with the onboard Wi-Fi that only occurred whilst running the new board in headless mode. This ended up being caused by a power-saving mode on the connectivity chip. Effectively the board became unresponsive in headless mode if it was connected to the network only via Wi-Fi." Ah-ha.
So: Now we have a Pi 3 rated at 5.1V (!), a Pi 3 that dies when running Linpack, a Pi 3 that dies in headless mode when running WiFi only, and a Pi 3 running a Jessie disto that can't process certificates properly.
I would use the term "under-cooked" except that the Linpack results suggest a modicum of "over-cooking". Haste makes waste.
Quoting from "makezine": "We also ran into one problem with the onboard Wi-Fi that only occurred whilst running the new board in headless mode. This ended up being caused by a power-saving mode on the connectivity chip. Effectively the board became unresponsive in headless mode if it was connected to the network only via Wi-Fi." Ah-ha.
So: Now we have a Pi 3 rated at 5.1V (!), a Pi 3 that dies when running Linpack, a Pi 3 that dies in headless mode when running WiFi only, and a Pi 3 running a Jessie disto that can't process certificates properly.
I would use the term "under-cooked" except that the Linpack results suggest a modicum of "over-cooking". Haste makes waste.
Re: Problem with Certificates in Jessie
That is off topic. If all you are going to do is 'pi bash' quotes from other sources then perhaps you should post them elsewhere.
Texy
Texy
Various male/female 40- and 26-way GPIO header for sale here ( IDEAL FOR YOUR PiZero ):
https://www.raspberrypi.org/forums/viewtopic.php?f=93&t=147682#p971555
https://www.raspberrypi.org/forums/viewtopic.php?f=93&t=147682#p971555
-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Re: Problem with Certificates in Jessie
Hardly. This is how I found out why my Pi 3 was apparently crashing. It's amazing how quickly good will evapoates when people go on wild goose chases after problems that turn out to be in the product, not in their use of it. The Foundation should (a) enumerate the known major problems and the time frames for remediation, and (b) issue a very public apology for the amount of people's time that has been wasted.
Re: Problem with Certificates in Jessie
You should immediately stop using computers (any kind). You don't seem to know thatNeilAlexanderHiggins wrote:Hardly. This is how I found out why my Pi 3 was apparently crashing. It's amazing how quickly good will evapoates when people go on wild goose chases after problems that turn out to be in the product, not in their use of it. The Foundation should (a) enumerate the known major problems and the time frames for remediation, and (b) issue a very public apology for the amount of people's time that has been wasted.
1) There's no software without undetected bugs.
2) There's no OS without (at least) tens of thousands undetected bugs.
3) Tens of thousands of developers (if you count all packages) are involved in a system like Debian/Raspbian, most of them in their spare time.
The Foundation is only responsible for a very small part of the software system (firmware, a few drivers, kernel settings, a small number of packages from their local archive which replace Raspbian packages).
Minimal Kiosk Browser (kweb)
Slim, fast webkit browser with support for audio+video+playlists+youtube+pdf+download
Optional fullscreen kiosk mode and command interface for embedded applications
Includes omxplayerGUI, an X front end for omxplayer
Slim, fast webkit browser with support for audio+video+playlists+youtube+pdf+download
Optional fullscreen kiosk mode and command interface for embedded applications
Includes omxplayerGUI, an X front end for omxplayer
-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Re: Problem with Certificates in Jessie
The problem with amateur organisations is that don't even know what bugs and limitations are inherent in their products, let alone have a plan to address them. Eben's best effort in respect of the WiFi bug (and why would you add WiFi as an alternative to wired unless you intend that people will use it) is that the problem will be addressed "eventually." Woo-hoo!
Re: Problem with Certificates in Jessie
The problem with amateur people like you is that they do not know what they are talking about. Did you ever provide something useful to the community?NeilAlexanderHiggins wrote:The problem with amateur organisations is that don't even know what bugs and limitations are inherent in their products, let alone have a plan to address them. Eben's best effort in respect of the WiFi bug (and why would you add WiFi as an alternative to wired unless you intend that people will use it) is that the problem will be addressed "eventually." Woo-hoo!
Minimal Kiosk Browser (kweb)
Slim, fast webkit browser with support for audio+video+playlists+youtube+pdf+download
Optional fullscreen kiosk mode and command interface for embedded applications
Includes omxplayerGUI, an X front end for omxplayer
Slim, fast webkit browser with support for audio+video+playlists+youtube+pdf+download
Optional fullscreen kiosk mode and command interface for embedded applications
Includes omxplayerGUI, an X front end for omxplayer
-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Re: Problem with Certificates in Jessie
"kweb - slim and fast" - that's paid (professional) advertising, is it?
-
- Posts: 25262
- Joined: Tue Mar 25, 2014 12:40 pm
- Location: Delightful Dorset
Re: Problem with Certificates in Jessie
Kweb is open-sourceNeilAlexanderHiggins wrote:"kweb - slim and fast" - that's paid (professional) advertising, is it?

The information is out there....you just have to let it in.
My other Linux machine is a ChromeBox
My other Linux machine is a ChromeBox
-
- Posts: 25262
- Joined: Tue Mar 25, 2014 12:40 pm
- Location: Delightful Dorset
Re: Problem with Certificates in Jessie
Have you update & dist-upgrade Jessie ?NeilAlexanderHiggins wrote:Jessie's certificate handling is broken. If a root cert. is withdrawn, Jessie fails instead of checking alternative root certs. This can be worked around by people with expertise, but for muggles like me, it means, e.g. that I can't enlist my new Pi 3 at Einstein@Home. Please fix.
http://downloads.raspberrypi.org/raspbi ... _notes.txt
The information is out there....you just have to let it in.
My other Linux machine is a ChromeBox
My other Linux machine is a ChromeBox
-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Re: Problem with Certificates in Jessie
No matches to "certificate"
Re: Problem with Certificates in Jessie
I still don't understand the problem ? Which root certificate
store are you talking about ? Iceweasels ?
Do you have all updates installed (a WiFi problem was
recently fixed ) . Are you running Raspbian
Jessie ?
ghans
store are you talking about ? Iceweasels ?
Do you have all updates installed (a WiFi problem was
recently fixed ) . Are you running Raspbian
Jessie ?
ghans
• Don't like the board ? Missing features ? Change to the prosilver theme ! You can find it in your settings.
• Don't like to search the forum BEFORE posting 'cos it's useless ? Try googling : yoursearchtermshere site:raspberrypi.org
• Don't like to search the forum BEFORE posting 'cos it's useless ? Try googling : yoursearchtermshere site:raspberrypi.org
- DougieLawson
- Posts: 40564
- Joined: Sun Jun 16, 2013 11:19 pm
- Location: A small cave in deepest darkest Basingstoke, UK
- Contact: Website Twitter
Re: Problem with Certificates in Jessie
Can you stop using some of those aromatic materials you're smoking? They're clearly addling your brain and turning your thoughts into complete balderdash and poppycock.NeilAlexanderHiggins wrote:The problem with amateur organisations is that don't even know what bugs and limitations are inherent in their products, let alone have a plan to address them. Eben's best effort in respect of the WiFi bug (and why would you add WiFi as an alternative to wired unless you intend that people will use it) is that the problem will be addressed "eventually." Woo-hoo!
The RPF isn't amateur, you can't sell 8 million computers without some level of professionalism. Eben and his team are a highly skilled group of engineers who've started to change the world of computing in their first four years.
There's always bugs in software (fixing them has paid my mortgage off).
Your mythical WiFi bug is solved with the 4.1.20 (and experimental 4.4.6) kernel and firmware.
Any language using left-hand whitespace for syntax is ridiculous
Any DMs sent on Twitter will be answered next month.
Fake doctors - are all on my foes list.
Any requirement to use a crystal ball or mind reading will result in me ignoring your question.
Any DMs sent on Twitter will be answered next month.
Fake doctors - are all on my foes list.
Any requirement to use a crystal ball or mind reading will result in me ignoring your question.
Re: Problem with Certificates in Jessie
Who's getting paid for what?NeilAlexanderHiggins wrote:"kweb - slim and fast" - that's paid (professional) advertising, is it?
kweb is free and open source software and a gift to the community.
Minimal Kiosk Browser (kweb)
Slim, fast webkit browser with support for audio+video+playlists+youtube+pdf+download
Optional fullscreen kiosk mode and command interface for embedded applications
Includes omxplayerGUI, an X front end for omxplayer
Slim, fast webkit browser with support for audio+video+playlists+youtube+pdf+download
Optional fullscreen kiosk mode and command interface for embedded applications
Includes omxplayerGUI, an X front end for omxplayer
Re: Problem with Certificates in Jessie
I too am a fan of Einstein@home (user Muskoka https://einstein.phys.uwm.edu/top_users ... t&offset=0).
I tried both Raspbian and Ubuntu MATE - same problem. I'll just wait for a fix.
I tried both Raspbian and Ubuntu MATE - same problem. I'll just wait for a fix.
"Self-education is, I firmly believe, the only kind of education there is" - Isaac Asimov
-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Re: Problem with Certificates in Jessie
Does anybody (who knows what they are talking about) know if this is fixed yet?
-
- Posts: 25262
- Joined: Tue Mar 25, 2014 12:40 pm
- Location: Delightful Dorset
Re: Problem with Certificates in Jessie
Thought you had given up and chucked the Raspberry Pi 3B viewtopic.php?f=28&t=140036#p929429NeilAlexanderHiggins wrote:Does anybody (who knows what they are talking about) know if this is fixed yet?
The information is out there....you just have to let it in.
My other Linux machine is a ChromeBox
My other Linux machine is a ChromeBox
Re: Problem with Certificates in Jessie
Nobody has any idea what you are talking about.
Its good that the Einstein@Home folks know that something
is wrong with Raspbian. What i don't understand why they
don't try to issue a proper bugreport so that people can
actually do something about it.
Try to contact forum members "plugwash" and "ShiftPlusOne".
You would be advised to have some (any) useful details and
instructions for reproduction of the issue ready which
you have been omitting from this public thread.
https://bugs.launchpad.net/raspbian
https://github.com/RPi-Distro/repo/issues
ghans
Its good that the Einstein@Home folks know that something
is wrong with Raspbian. What i don't understand why they
don't try to issue a proper bugreport so that people can
actually do something about it.
Try to contact forum members "plugwash" and "ShiftPlusOne".
You would be advised to have some (any) useful details and
instructions for reproduction of the issue ready which
you have been omitting from this public thread.
https://bugs.launchpad.net/raspbian
https://github.com/RPi-Distro/repo/issues
ghans
• Don't like the board ? Missing features ? Change to the prosilver theme ! You can find it in your settings.
• Don't like to search the forum BEFORE posting 'cos it's useless ? Try googling : yoursearchtermshere site:raspberrypi.org
• Don't like to search the forum BEFORE posting 'cos it's useless ? Try googling : yoursearchtermshere site:raspberrypi.org
-
- Posts: 43
- Joined: Sun May 25, 2014 10:22 am
Re: Problem with Certificates in Jessie
Ah! Good to see that the fanboys are following up their old "conquests". Feeling better now?
Re: Problem with Certificates in Jessie
I suppose the issue is the one discussed here: https://einsteinathome.org/forum_thread.php?id=11760
It was reported to Debian and eventually fixed: https://bugs.debian.org/cgi-bin/bugrepo ... =812708#15
It was also reported to Raspbian, but that was not really necessary because Debian fixes are usually adopted automatically: https://bugs.launchpad.net/raspbian/+bug/1538821
apt-get should pull the latest package, openssl 1.0.1t-1+deb8u2, so there is no need for the Foundation to update anything.
It was reported to Debian and eventually fixed: https://bugs.debian.org/cgi-bin/bugrepo ... =812708#15
It was also reported to Raspbian, but that was not really necessary because Debian fixes are usually adopted automatically: https://bugs.launchpad.net/raspbian/+bug/1538821
apt-get should pull the latest package, openssl 1.0.1t-1+deb8u2, so there is no need for the Foundation to update anything.
- DougieLawson
- Posts: 40564
- Joined: Sun Jun 16, 2013 11:19 pm
- Location: A small cave in deepest darkest Basingstoke, UK
- Contact: Website Twitter
Re: Problem with Certificates in Jessie
If it doesn't work on Jessie try running E@H on Ubuntu MATE.
Any language using left-hand whitespace for syntax is ridiculous
Any DMs sent on Twitter will be answered next month.
Fake doctors - are all on my foes list.
Any requirement to use a crystal ball or mind reading will result in me ignoring your question.
Any DMs sent on Twitter will be answered next month.
Fake doctors - are all on my foes list.
Any requirement to use a crystal ball or mind reading will result in me ignoring your question.