empty toonstore, certificate error

[Peter1612]

After recovering my toon i upgraded tot 5.33.9 and it works again.
but the toon store stays empty 0 apps available.

When i run the following command:
curl "https://raw.githubusercontent.com/ToonS ... onRepo.xml"

I get this error. wich i guess is causing the problem,
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.

When i run with the -k i get the list.
Allready tried the update script -f and this says the following:
./update-rooted.sh -f
===================================================================================================================================================================
Welcome to the rooted Toon upgrade script. This script will try to upgrade your Toon using your original connection with Eneco. It will start the VPN if necessary.
Please be advised that running this script is at your own risk!

Version: 4.34 - TheHogNL & TerrorSource & yjb - 02-01-2021

If you like the update script for rooted toons you can support me. Any donation is welcome and helps me developing the script even more.
https://paypal.me/pools/c/8bU3eQp1Jt

===================================================================================================================================================================

Only fixing files.
creating backup of inittab...
creating backup of chrony.conf...
creating backup of hosts...
creating backup of config_happ_scsync.xml...
creating backup of qmf_tenant.xml.save ...
FIXING: Downloading resources.rcc TSC mod for this version 5.33.9.
FIXING: Now updating all toonstore installed apps
EDITING: Time server, removes unnecessary link to Quby
EDITING: Hosts file, removes unnecessary link to Quby
EDITING: Disable add google DNS on top of resolv.conf
EDITING: disable ovpn connection to quby
EDITING: Activating Toon, enabling ElectricityDisplay and GasDisplay
EDITING: removing data gathering by Quby and whitelisting web services
EDITING: disabling Eneco subscription feature apps to free up memory on this toon 1
EDITING: disabling KPI and weather happ as these are not necessary on rooted toons
EDITING: disabling samba nmbd on toon 1 as probably it is not necessary
EDITING: download certificate store pem file
There is a new version of the Mozilla CA pem file. Downloading it!
Finished fixing files!

tried a reboot with goot hopes, but still no apps available.

[TheHogNL]

The line:
There is a new version of the Mozilla CA pem file. Downloading it!

Should be followed by:
Download ok! Replacing Mozilla CA pem file!

So something is not workign while updating the CA pem file.

It is this part of the update script. Can you check from this script lines where it goes wrong? maybe the curl download?

Code: Select all

                echo "There is a new version of the Mozilla CA pem file. Downloading it!"
                /usr/bin/curl -Nks https://curl.haxx.se/ca/cacert.pem -o /tmp/mozilla.crt
                SHA256NEW=`/usr/bin/sha256sum /tmp/mozilla.crt | cut -d\  -f1`
                if [ "$SHA256ONLINE" == "$SHA256NEW" ]
                then
                        echo "Download ok! Replacing Mozilla CA pem file!"
                        mv -f /tmp/mozilla.crt /usr/local/share/ca-certificates/mozilla.crt
                        UPDATECA=true
                fi

[toontoon2]

I’m having the same issue on 2 different toons.

[Peter1612]

this is the concent of the mozilla cert file:
Thats not good...
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://curl.se/ca/cacert.pem">here</a>.</p>
<hr>
<address>Apache Server at curl.haxx.se Port 80</address>
</body></html>

[TheHogNL]

this is the concent of the mozilla cert file:
Thats not good...
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://curl.se/ca/cacert.pem">here</a>.</p>
<hr>
<address>Apache Server at curl.haxx.se Port 80</address>
</body></html>

I see. I need to change the script. I will do that now

[Peter1612]

i redownloaden the update script from: https://github.com/ToonSoftwareCollective/update-rooted
did and update -f again and it seems to be working now.
maybe had an old or wrong update script i guess.

thanks for your help!

[TheHogNL]

i redownloaden the update script from: https://github.com/ToonSoftwareCollective/update-rooted
did and update -f again and it seems to be working now.
maybe had an old or wrong update script i guess.

thanks for your help!

No I just updated the script