I forgot to mention Fil that if you are using Debain 9 as the HOST and
as as a GUEST, then you will have to copy the TLS certificates from a
different Linux machine into the GUEST, because the HOST certificates
will also be old.
If however you are using an up-to-date debian-based HOST machine and
Debian 9 as the GUEST then you shouldn't have any issues with
certificates. The certificates are copied from the HOST to the GUEST.
The relevant block is this ...
#copy our certificates to chroot as debian 9 certs are outdated
sudo /usr/sbin/chroot squashfs-root /Sources/getSourceDeps.sh
sudo rm -rf squashfs-root/usr/share/ca-certificates
sudo rm squashfs-root/etc/ca-certificates.conf
sudo cp -a /usr/share/ca-certificates squashfs-root/usr/share/
sudo cp -a /etc/ca-certificates.conf squashfs-root/etc/
sudo rm -rf squashfs-root/etc/ssl/certs
sudo cp -a /etc/ssl/certs squashfs-root/etc/ssl/certs
sudo /usr/sbin/chroot squashfs-root
/usr/sbin/update-ca-certificates
... in getDebian9.sh
I don't have instructions on how to copy certificates by USB as an
alternative but you can proabably work it out from this code.
Cheers,
Josh
_______________________________________________
Replicant mailing list
[email protected]
https://lists.osuosl.org/mailman/listinfo/replicant
