Page 1 of 1
Update ECU definition from internet seems to be broken at least on Windows
Posted: Thu Aug 24, 2023 2:46 am
by AndreyB
TS no longer downloads fresh .ini files automatically for me, can someone who uses Windows confirm or deny having same issue?
I believe this is about TS having too old version of JRE 1.8.0_66 from back 2015 emended. I've actually replaced cacerts file with a file from a fresh 1.8 JRE instance and got the issue resolved.
https://github.com/rusefi/rusefi/issues/5536
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Thu Aug 24, 2023 2:51 am
by AndreyB
PS: corresponding log line in
TunerStudioAppDebug.txt is
Code: Select all
Debug: Failed to get ini: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Thu Aug 24, 2023 3:10 am
by AndreyB
Oh right, it's the annual rusefi.com certificate update and 25% of the 1.8.0_66 CA certificates have already expired.
- image.png (16.34 KiB) Viewed 37786 times
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Thu Aug 24, 2023 7:25 pm
by NormanAlphaspeed
- Untitled.jpeg (199.53 KiB) Viewed 37744 times
- Untitled.jpeg (231.83 KiB) Viewed 37744 times
large amount of end users in panic because choosing ini file is too difficult
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Tue Aug 29, 2023 2:22 am
by NormanAlphaspeed
More reports of angry people
- image.png (2.95 MiB) Viewed 37628 times
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Sun Sep 24, 2023 10:37 pm
by AndreyB
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Sun Sep 24, 2023 10:58 pm
by mck1117
Are you recommending that users install a custom certificate authority globally for all Java apps? That's TERRIBLE security advice. You know better than that.
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Sun Sep 24, 2023 11:02 pm
by AndreyB
mck1117 wrote: ↑Sun Sep 24, 2023 10:58 pm
globally for all Java apps?
Please see where you are wrong.
On my end let me spell out source of cacerts file
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Sun Sep 24, 2023 11:04 pm
by mck1117
So it is just for TS, but it's still a risk. TS is using that file for downloading updates to TS, which then run as administrator on your PC. So you've now installed a CA (if only to TS) that can serve files that are expected to grant admin rights.
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Sun Sep 24, 2023 11:08 pm
by mck1117
Can you explain the actual issue that requires adding a CA?
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Sun Sep 24, 2023 11:10 pm
by AndreyB
https://github.com/rusefi/rusefi/wiki/JRE#tunerstudio-cacerts-work-around clarifies source of cacerts file, thank you for your feedback.
Matt please read github ticket in first post and let me know if I can clarify anything beyond what is already documented.
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Sat Oct 14, 2023 2:50 pm
by AndreyB
rusEFI bundles now contain 'update-ts-cacerts' folder with fixts.bat
Re: Update ECU definition from internet seems to be broken at least on Windows
Posted: Thu Nov 30, 2023 12:34 am
by NormanAlphaspeed
AndreyB wrote: ↑Sat Oct 14, 2023 2:50 pm
rusEFI bundles now contain 'update-ts-cacerts' folder with fixts.bat
~credit to norman for writing a crappy batch file