[SOLVED] Certificate issues in LXC

crts · 09-03-2018, 09:19 AM

I am using a jabber client (mcabber) inside LXC. When I start the client
it fails to connect with error message:

Code:

Certificate is not trusted!
Disconnected, reason: 3->'LM_DISCONNECT_REASON_ERROR'

This is not an issue when I run the client with the same configuration outside the container. I already tried installing the 'ca-certificates' package but the error remained.

Which additional packages am I missing?

bassmadrigal · 09-04-2018, 03:49 PM

Do you have your install inside of your container fully updated with all patches? I vaguely remember another post on here where someone was having problems with that only to find they didn't have all the patches installed.

crts · 09-04-2018, 04:22 PM

If by patches you mean that all installed packages are up-to-date, then yes. If by all patches you mean a full install, then no. I can get it to work on a fully installed LXC. I like to keep my containers as small as possible, though.

bassmadrigal · 09-04-2018, 04:51 PM

Ok, I wasn't aware you were running a partial installation on the container. It is difficult to diagnose with that limited error message.

Have you tried running an ldd on mcabber to see if anything's missing?

abga · 09-04-2018, 05:22 PM

I never used mcabber myself, but this (rather old) bug report might help:
https://bitbucket.org/McKael/mcabber...te-not-trusted

If you already installed the ca-certificates package and openssl(needed), set your time/date right and try updating them with:

Code:

/usr/sbin/update-ca-certificates

P.S.
If you need to add a certificate, follow this tutorial (part before the browser section) written by AlienBob:
https://alien.slackbook.org/blog/add...our-slackware/

chris.willing · 09-05-2018, 02:02 AM

Quote:

Originally Posted by bassmadrigal

Ok, I wasn't aware you were running a partial installation on the container. It is difficult to diagnose with that limited error message.

Yes - no one could guess what the OP might be missing without knowing what is already installed.

However if using the default slackware template (as distributed in the 14.2 lxc package), then the following additional packages will be needed to run mcabber:

Code:

loudmouth gpgme libassuan libgpg-error gnutls libffi p11-kit nettle

chris

crts · 09-05-2018, 08:21 AM

Installing openssl, as suggested by abga, solved the problem.

Quote:

Originally Posted by bassmadrigal

Have you tried running an ldd on mcabber to see if anything's missing?

Yes, I always run ldd on the binary before I create the container. The library dependencies are never a problem. Only when additional configuration are files needed, that is when it gets tricky. Anyway, I successfully managed to finally shrink the container. Thanks everyone for your input.