MobileRead Forums - View Single Post - "Web Browser is unable to establish a secure connection to this web site"

mergen3107 · 05-21-2017, 04:24 AM

So I contacted Amazon again. This time, it took longer time to explain them that it is not about Software Update, but certificates. The conversation ended up with the 'official' explanation that 'Kindle 5 Non-Touch is a legacy device that Amazon does not support in full', so there should be no other changes expected to system files whatsoever.

OK. Meanwhile I found by accident THIS.

Spoiler:

On the first page of our thread arifunke tried to change the certificates manually.

I pulled Kindle's certificates file /etc/ssl/certs/ca-certificates.crt, opened it and followed the website at the top. The files there are in .pem format, however, from inside their structure looks the same as in Kindle's .cert files, with BEGIN-END notation.

Now question: how do we pull all these pieces of information together to update Kindle's certificates?

05-21-2017, 04:24 AM	#42
mergen3107 Wizard Posts: 1,518 Karma: 5000046 Join Date: Feb 2012 Location: Cape Canaveral Device: Kindle Scribe	So I contacted Amazon again. This time, it took longer time to explain them that it is not about Software Update, but certificates. The conversation ended up with the 'official' explanation that 'Kindle 5 Non-Touch is a legacy device that Amazon does not support in full', so there should be no other changes expected to system files whatsoever. OK. Meanwhile I found by accident THIS. Spoiler: Long story. Amazon Kindle App for Android which I tried to run on Nook Simple Touch experienced the same problem. After SSL issues found out back 2015 (or 2014, don't remember) major websites changed their security policies. NST can run only very old apk, also NST itself contains by default old certificates. So by renewing them, NST can connect to Amazon's servers correctly. On the first page of our thread arifunke tried to change the certificates manually. I pulled Kindle's certificates file /etc/ssl/certs/ca-certificates.crt, opened it and followed the website at the top. The files there are in .pem format, however, from inside their structure looks the same as in Kindle's .cert files, with BEGIN-END notation. Now question: how do we pull all these pieces of information together to update Kindle's certificates?