#Adding ship pack sinking simulator 2 install

I changed all the CA certificates in aegis-certman to the latest Mozilla certs, patched the source to create both old and new symlinks when new certs are added, and patched the install scripts to delete all preexisting CA certs before installing the new ones (so that everything would get both symlinks).īy this point, I could use OpenSSL from the command line to access TLSv1.2 sites, like Wikipedia. It *might* be possible to get this to work closed by doing the next step before this one. The moment I installed aegis-crypto, all the code on the system couldn't be verified, since Aegis couldn't find the codesigning certs. I hadn't realized that OpenSSL 1 hashes certs differently from 0.9.8, and that I was going to need two sets of symlinks in /etc/ssl/certs for both versions. I rebuilt aegis-crypto, and that's where I ran into trouble with closed mode. There are closed packages that link to 0.9.8, so it's not possible to get rid of it completely.

There are vulnerabilities in it that you could avoid by using a newer version, but be prepared to do more patching of the open source components that link against it. I don't have a solid HOWTO built for this yet, as I rebuilt a lot more packages than I probably needed to, and my N9 is my daily driver, so it'll be difficult to experiment with this to trim it down.įirst, I built OpenSSL 1.0.1t out of Debian Jessie, since I figured it would be easier to do proof of concept on a version closer to the original that was already debianized. It may be possible to do this VERY carefully in closed mode with the aegis-install hack, but I haven't tried again after I failed the first 2 times. NOTE: I'm in open mode with the patched open-mode kernel. Granted, this is too late for me and for other users in the USA, since the last US carrier with 3G is shutting it down next year, but perhaps if anyone using the N9 in other countries that are maintaining at least their 2G GSM can get good out of this, here's what I did. I've gotten TLSv1.2 working in grob (stock browser) and fenix (stock email client) on my N9.

Adding ship pack sinking simulator 2