import ca.crt onto my htpc?

[heysoundude]

hello all, and Happy 2020!

Thank you @RMerlin for the new v384.14_2

This is probably a question for @thelonelycoder
I've built a HTPC for myself over the holidays (xbian.org on a RasPi 4) and am wondering if I should import the ca.crt I've generated in pixelserv/Diversion/amtm onto this wee machine? I can SSH into it...I'm just not sure how to scoop what I need from my router using the command line

 

[Jack Yaz]

hello all, and Happy 2020!

Thank you @RMerlin for the new v384.14_2

This is probably a question for @thelonelycoder
I've built a HTPC for myself over the holidays (xbian.org on a RasPi 4) and am wondering if I should import the ca.crt I've generated in pixelserv/Diversion/amtm onto this wee machine? I can SSH into it...I'm just not sure how to scoop what I need from my router using the command line

Assuming like OSMC it'll be built on top of Debian, so standard certificate import instructions for Debian should apply

 

[heysoundude]

right...but like I said, I'm not entirely sure what the source path is for the command line cp.
or am I overthinking? it can't be as simple as pixelserv.ip/ca.crt to destination, can it?

 

[Jack Yaz]

right...but like I said, I'm not entirely sure what the source path is for the command line cp.
or am I overthinking? it can't be as simple as pixelserv.ip/ca.crt to destination, can it?

You should be able to wget/curl it from that URL to the local filesystem, then cp it. Or download it directly to the final destination.

 

[heysoundude]

See, that’s where I get lost. Perhaps you can clarify for me: i wget from the command line of the htpc, and curl from the router’s command line, or is it the other way around?

As in wget cp pixelserv.ip/ca.crt /user/local/share/ca-certificates/ ?


Sent from my iPhone using Tapatalk

 

[Jack Yaz]

Run this on the HTPC:

sudo wget -o /usr/local/share/ca-certificates/pixelserv.crt https://diversion-adblocking-ip.address/ca.crt

 

[heysoundude]

Thanks to you and your prompting, I figured it out on my own. (and learned a thing or 2 in the process, like in debian when logged in as root, you can skip the sudo...which is cool but scary and also, if you do the wget in the destination directory, destination is implied as 'current')

(It's also a good idea to issue a update-ca-certificates as well after the wget)