Updating Alt-F packages list

[Michal Smolík]

Good day.
Can someone please advise me?
I have a problem from the Updating Alt-F packages list. The photo shows what it's doing to me. I found some progress, but I'm lost in point 3.
Where I find and run the Command.
Or does anyone have a better course of action?

Thank you.

--------------------------------------------------------------------------------------------------------------------------------------------

Good point. You have to download to a PC and install manually in the box.

1-Download to a PC from sourceforge->Files->pkgs->unstable, openssl-1.1.1k_arm.ipk
https://sourceforge.net/projects/alt-f/files/pkgs/unstable/openssl_1.1.1k_arm.ipk/download

2-Upload the pkg to the box using File Explorer, using a existing share, say to the public RW share

3-Login the box and execute the command

ipkg install /Public/RW/openssl-1.1.1k_arm.ipk # or whatever the share folder path is

4-if the above succeeds, a cronjob will be added and will run once a week, at random hours and days, executing the /usr/bin/update_ca.sh script. To execute it now just type

update_ca.sh

If it succeeds, the /etc/ssl/ca-bundle.crt will be updated (you can see its date using the command

ls -l /etc/ssl/ca-bundle.crt

Now wget should not complain about certificates and ipkg should works. Notice that previous failed ipkg attempts might be retried, so don't issue 'ipkg update' before the above.

Worked? Please let me know, so I can post it in the forum.

PS: the update_ca.sh script uses wget itself, but if the download site certificate is still valid you should have no issues downloading ca-bundle.crt. Otherwise you have to download the cacert.pem file from https://curl.se/ca/cacert.pem yourself and save it on the box with the name ca-bundle.crt at the /etc/ssl/ directory.

[Anton Zlotnikov]

I was a same problem with update lists and download of packages.
Your solution is right and helped me. Thanks
Point 3 - You need make ssh connection to nas with putty software.

пятница, 17 декабря 2021 г. в 22:46:30 UTC+3, scbl...@gmail.com:

[Michal Smolík]

Good day.
Thank you for the advice I have installed PUTTY software. I'll connect ssh connect.
There, he wants a login and password for me. Somehow I can't get to the root. Where can I set it in Alt-f in the browser.
Thank you

Dne neděle 19. prosince 2021 v 14:45:10 UTC+1 uživatel Anton Zlotnikov napsal:

[Michal Smolík]

so 1. 1. 2022 v 21:59 odesílatel Michal Smolík <scbl...@gmail.com> napsal:

--
You received this message because you are subscribed to a topic in the Google Groups "Alt-F" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/alt-f/9XgVhwFH5Dk/unsubscribe.
To unsubscribe from this group and all its topics, send an email to alt-f+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/alt-f/a4360557-44f1-4666-8915-3f5155bd7196n%40googlegroups.com.

[Bert K]

Try to SSH to root@<IPAddr>, then use the webui password.  This worked for me.

--
You received this message because you are subscribed to the Google Groups "Alt-F" group.
To unsubscribe from this group and stop receiving emails from it, send an email to alt-f+un...@googlegroups.com.

[Hell Fish]

You need to know to the path where the file (openssl-1.1.1k_arm.ipk) resides. It is visible in the shared folder WebUI part afair.

In a terminal,

df -h #shows which file systems are mounted where, with free space

ls # shows contents of a path, such as /mnt/sda1/

If you can't find anything, I can offer a workaround:

this file is a copy from sourceforge on my space, plain http

wget "http://hellfish.free.fr/openssl_1.1.1k_arm.ipk"
md5sum openssl_1.1.1k_arm.ipk | grep '168ecd0c485157c257d785897012a1a4' && ipkg install $PWD/openssl_1.1.1k_arm.ipk || echo no

/usr/bin/update_ca.sh

I assume md5sum is available on the box, the checksum can be "verified" https://www.google.com/search?q=168ecd0c485157c257d785897012a1a4

[Sanchelioss]

Hello!
Problem with updating packages. My version openssl:
openssl 1.1.1k

Error:
Downloading https://sourceforge.net/projects/alt-f/files/pkgs/stable/Packages Downloading https://sourceforge.net/projects/alt-f/files/pkgs/unstable/Packages An error ocurred, return value: 2. Collected errors: ipkg_download: ERROR: Command failed with return value 5: `wget --passive-ftp -q -P /tmp/ipkg-FjDR7g https://sourceforge.net/projects/alt-f/files/pkgs/stable/Packages' ipkg_download: ERROR: Command failed with return value 5: `wget --passive-ftp -q -P /tmp/ipkg-FjDR7g https://sourceforge.net/projects/alt-f/files/pkgs/unstable/Packages'

Are the certificates ok? A couple of days ago it worked.

воскресенье, 2 января 2022 г. в 19:39:08 UTC+3, Hell Fish:

[Rob Walz]

I am having issues installing the openssl package as well. I have copied it to the Public RW directory. I connect using ssh in putty. when I run the  ipkg -install /Public/RW/openssl-1.1.1k_arm.ipk I get this message.

 "/Public/RW/openssl-1.1.1k_arm.ipk" is not a mountpoint.
I have tried going to the directory Public/RW and running it there and get the same message.

[Rob Walz]

Found a october post with a fix for packages not installing.   wget --no-check-certificate https://curl.se/ca/cacert.pem -O /etc/ssl/ca-bundle.crt

Packages installed properly now.

[Sanchelioss]

Certificates is updated on command   "wget --no-check-certificate https://curl.se/ca/cacert.pem -O /etc/ssl/ca-bundle.crt"
But the package update still doesn't work. Downloading https://sourceforge.net/projects/alt-f/files/pkgs/stable/Packages

Downloading https://sourceforge.net/projects/alt-f/files/pkgs/unstable/Packages
An error ocurred, return value: 2.
Collected errors:

ipkg_download: ERROR: Command failed with return value 5: `wget --passive-ftp    -q -P /tmp/ipkg-ZK0Uif https://sourceforge.net/projects/alt-f/files/pkgs/stable/Packages'
ipkg_download: ERROR: Command failed with return value 5: `wget --passive-ftp    -q -P /tmp/ipkg-ZK0Uif https://sourceforge.net/projects/alt-f/files/pkgs/unstable/Packages'

See ssl folder:
-rw-r--r--    1 root     root        208065 Oct 26 06:12 ca-bundle.crt
lrwxrwxrwx    1 root     root            13 Jan 19 21:52 ca-bundle.pem -> ca-bundle.crt
lrwxrwxrwx    1 root     root            13 Jan 17 23:52 cacert.pem -> ca-bundle.crt
drwxr-xr-x    2 root     root          4096 Jan 19 22:01 certs
-rw-r--r--    1 root     root           424 Jun 14  2021 dhparam.pem
drwxr-xr-x    2 root     root           112 Oct 13  2017 misc
-rw-r--r--    1 root     root         10917 Jan 19 21:56 openssl.cnf
drwxr-xr-x    2 root     root          4096 Jan  4 00:29 private
-rw-r--r--    1 root     root          1052 May 18  2020 server.cnf
-rw-------    1 root     root          1704 Jan  4 00:28 vsftpd.pem

My openssl version:
OpenSSL 1.1.1k  25 Mar 2021

вторник, 18 января 2022 г. в 03:44:20 UTC+3, rob...@gmail.com:

[Jeremy Laidman]

The timestamp and size of the ca-bundle.crt file suggests that it is the newer version with the updated certificates, so the wget command seems to have worked. However "return value 5" means "SSL verification failure" which suggests that wget is not using the updated certificates perhaps.

> But the package update still doesn't work.

What is the "package update"? Do you mean running update_ca.sh? Or running "ipkg update"?

Try running "ipkg update" and try again. Or update_ca.sh.

Try running a form of the wget command that's shown in the error output of ipkg, such as:

wget --passive-ftp    -d -P /tmp/ https://sourceforge.net/projects/alt-f/files/pkgs/stable/Packages

ls -l /tmp/Packages

The wget command will fetch the Packages file and put it in /tmp/. If this fails, the "-d" will turn on debug mode, and might show where the problem is.

Cheers

Jeremy

You received this message because you are subscribed to the Google Groups "Alt-F" group.

To unsubscribe from this group and stop receiving emails from it, send an email to alt-f+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/alt-f/c329e45e-c798-44c0-b474-99f289753323n%40googlegroups.com.