SSL error on Fedora

[ykonoclast]

Background

I seem to be having the same problem as this issue here :
#2102

I tried following directions from there and ran mozroots --import --ask-remove to no avail.

CKAN Version: tried all from 1.22.1 to 1.24.0-PRE-1

KSP Version: 1.3.1.1891 x86_64

Operating System: Fedora 26 x86_64

Have you made any manual changes to your GameData folder (i.e., not via CKAN)? Nope

Problem

What steps did you take in CKAN? launching it and tried to download a mod

What did you expect to happen? that it would launch without error message and would download the mod

What happened instead? pop-up window (once on auto-update at launch and once on downloading) with the following message : Error: TrustFailure (Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED)

[HebaruSan]

Which mod, and when did you try? SpaceDock's certificate expired within the last day or two and only got renewed late yesterday, so if you were downloading from SpaceDock about 24 hours ago, an SSL error would be expected.

[ykonoclast]

Thanks for the reply, I tried yesterday and a few hours ago and retried just now.
Mods tried are fairly standard : docking port alignment, trajectories, precise maneuvers.

As indicated the same error is present on launching CKAN due to the auto-update feature.

[politas]

As stated in the release notes:

• Mac/Linux/Mono users: please use the new cert-sync tool, to update mono's certificate store.

[ykonoclast]

Did work, thanks.

You might want to update your documentation as it is the place where users are looking for instructions, such a necessity should not be mined in the release notes of a given version.

[HebaruSan]

@ykonoclast, thanks for the feedback. I added some more text to the Fedora wiki page, but I wasn't sure of the best formatting. Can you take a look? Please feel free to make your own edits, it's a wiki after all.

[ykonoclast]

@HebaruSan
Good idea! I went there and added a few clarifications using this morning's experience in actually being able to use CKAN.