Rtorrent problem

[aeksakis21]

Hello,
Thanks! for wonderful firmware.

FW Base: 1.02.21Device: WDLXTV_LIVE
Latest version: 0.5.1.1

i have problem with one tracker, all torrent downloaded from this tracker doesn't work. i have this error: "Peer certificate cannot be authenticated with known CA certificate"

What can i do?

Many thanks.

[mad_ady]

I don't know if rtorrent has an option to ignore root ca (which are missing). Otherwise I'll try to add the list of certificates in the next firmware...

[kroetkroet]

mad_ady: if it may help:

Not sure if easy on wdlxtv...

[mad_ady]

Thanks for the link. Currently the wdtv lacks most of the root CAs, and I broght this to b-rad's attention 4-5 years ago (my, how time flies!). I think he never included the full certificates because of firmware space limits, but now, with bi2 support, it shouldn't be an issue...

One thing I don't undestand: is this tracker signed by a root ca (e.g. is the certificate declared valid by a browser?), or does he use some bogus root ca that needs to be added? Adding a bogus root ca totally compromises ssl security (this is how man-in-the-middle attacks are done)

PS. The wdtv has only certificates for netflix (under /etc/certs/ca.pem). I'll try to repace them with something better for the next release

[kroetkroet]

I never saw the error from the topic starter in my rtorrent - who read log files anyway , but indeed, I kinda doubt if this is a "legit" complaint or a torrent-attack-spambot for the wdlxtv forum

[mad_ady]

Either way, having the legitimate list of CAs is a good idea

[mad_ady]

Ok, I managed to add curl certificate support to the firmwares (currently only on svn). It should fix the problem if rtorrent uses curl to check certificates, but I'm not sure if it's the case.

There are other ways to add certificate support to the firmware, but they're more costly in terms of space used.
https://wiki.archlinux.org/index.php/Rtorrent#CA_certificates

So, if anybody is brave to try it out, you'd need an ext3 firmware from svn to see if it makes any difference. Instructions here:
http://wiki.wdlxtv.com/RootFS

Kindly let me know if it works or not.

[mad_ady]

I could use some testers to flash the 0.5.2.1 beta and see if the rtorrent-missing-ca problem went away or not...
More information here: http://forum.wdlxtv.com/viewtopic.php?f=38&t=9027