16:57 <cmnky> I'm having a difficult time trying to get self-signed certs working with libreELECT / kodi / squid ... is there a page with concise instructions somewhere ?

16:58 <cmnky> er .. libreELEC

16:59 <cmnky> I've googled and duckduckgo'd and I'm more confused

17:00 <cmnky> also, I've configured kodi to use my squid proxy, and it doesn't seem to work, but I can curl from the command line and watch the squid logs and it seems to be working

17:01 <cmnky> this seems like such a useful setup to be ignored

18:12 <jm18> cmnky: what are you trying to do? and whats the problem with it?

18:15 <cmnky> I have a squid caching proxy server

18:16 <cmnky> and I'm trying to get libreELEC/Kodi to route all traffic through it

18:16 <cmnky> which, I had working, until I configured ssl-bump on the squid proxy

18:17 <cmnky> ssl-bump = allows squid to cache HTTPS requests, as well as HTTP

18:17 <cmnky> its configuration uses a self-signed certificate

18:17 <cmnky> which I need to install on libreELEC somehow to get it to use it

18:18 <cmnky> the problem is I can't find any good concise guides for libreELEC, only a bunch of confusing posts

18:19 <cmnky> Kodi ( and its add-ons ) would benefit greatly if I could get caching working, but you know the entire web is moving towards HTTPS everywhere, so its useless unless it caches SSL/TLS requests

18:21 <cmnky> the current method of adding a self signed cert seems to be some convoluted combination of editing the master .pem file and transferring the modified file back to some alternate location and then using scripts to set environment variables

18:22 <cmnky> and theres some detail like file permissions or having certain fields in the cert be valid or something

18:22 <cmnky> thats causing it to not work ... it apparently *could be* as simple as copying the custom cert to a sub-dir, but libreELEC doesn't appear to be setup that way

18:23 <cmnky> complicating the issue is that curl from the command line appears to work perfectly, while kodi/add-ons do not, they just fail silently, or I don't know where to look for the log info

18:23 <jm18> i used a self signed certificate for my media server with kodi before. cant remember what the solution was... but it was simple but hard to find

18:24 <cmnky> yeah, its not in the wiki ;D

18:33 <jm18> cmnky: https://www.reddit.com/r/libreELEC/comments/li8h9y/self_signed_certificate_with_jellyfin/ there are 2 suggested directories to place your certificate... try those

18:42 <cmnky> I'll check it out, thanks

18:44 <jm18> cmnky: https://forum.libreelec.tv/thread/20753-how-do-i-add-additional-certificate-authorities-for-mitm-proxy-such-as-burp-mitm/ <--- one of same directories there in response from chewitt

18:45 <jm18> might need both... the first one was specific to an addon while that one is for openssl conf...

18:46 <cmnky> yeah, that second link looks like it might be a winner if it actually works

18:46 <cmnky> I'll test it in a little while and report back, thanks again

18:46 <jm18> you're welcome (: