K3 update-ca-certificates binary

[mergen3107]

Hi!

Can someone please fetch the file /usr/sbin/update-ca-certificates from the K3? I accidentally overwrote it with the same file from the Debian certificates package.

I also found Amazon source code, but I am lost on how to find files there.

Thank you!

[mergen3107]

Oops, nevermind. Doing chmod 755 to this file fixed it!

[mergen3107]

Although, the output is peculiar...

[root@kindle root]# update-ca-certificates
Updating certificates in /etc/ssl/certs...
openssl:Error: 'rehash' is an invalid command.

Standard commands
asn1parse      ca             ciphers        crl            crl2pkcs7
dgst           dh             dhparam        dsa            dsaparam
ec             ecparam        enc            engine         errstr
gendh          gendsa         genrsa         nseq           ocsp
passwd         pkcs12         pkcs7          pkcs8          prime
rand           req            rsa            rsautl         s_client
s_server       s_time         sess_id        smime          speed
spkac          verify         version        x509

Message Digest commands (see the `dgst' command for more details)
md2            md4            md5            rmd160         sha
sha1

Cipher commands (see the `enc' command for more details)
aes-128-cbc    aes-128-ecb    aes-192-cbc    aes-192-ecb    aes-256-cbc
aes-256-ecb    base64         bf             bf-cbc         bf-cfb
bf-ecb         bf-ofb         cast           cast-cbc       cast5-cbc
cast5-cfb      cast5-ecb      cast5-ofb      des            des-cbc
des-cfb        des-ecb        des-ede        des-ede-cbc    des-ede-cfb
des-ede-ofb    des-ede3       des-ede3-cbc   des-ede3-cfb   des-ede3-ofb
des-ofb        des3           desx           idea           idea-cbc
idea-cfb       idea-ecb       idea-ofb       rc2            rc2-40-cbc
rc2-64-cbc     rc2-cbc        rc2-cfb        rc2-ecb        rc2-ofb
rc4            rc4-40

129 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
run-parts: unrecognized option `--test'
BusyBox v1.7.2 (2019-05-30 09:57:42 UTC) multi-call binary

Usage: run-parts [-t] [-a ARG] [-u MASK] DIRECTORY

Run a bunch of scripts in a directory

Options:
        -t      Prints what would be run, but does not actually run anything
        -a ARG  Pass ARG as an argument for every program invoked
        -u MASK Set the umask to MASK before executing every program

done.

[NiLuJe]

Your Debian binary probably expects a way more recent version of OpenSSL than whatever prehistoric build the K3 originally shipped.

[mergen3107]

Thanks!
I took update-ca-certificates from the usbnet /bin. At least this error went away. Now I can't replace run-parts. I changed the symlink of it in /bin/run-parts. It was pointing to the old BusyBox on Kindle (1.7.2 from 2019), I cahnged it to the usbnet's busybox. But the error is still the same.

Anyway, the .crt file in /etc/ssl/certs/ is created alright, but it seems Kindle cannot find the proper certificate when trying to go to amazon.com . I added the first two default certificates as well.

Strangely, with the old .crt file it still works ok!
Huh.

[mergen3107]

My main goal with the ca certificates is to try to update them to see if this will help to connect to Amazon servers, to register my device. So far I had no luck, it says “Your device cannot connect at this time”. I know they shutdown the Kindle Shop for those old Kindles, but I should be able to register them, right?