2016-03-27 73 views
-1

似乎沒有可靠的權威/證書預裝在越獄iOS中。例如:在Jailbroken iOS中修復CA證書?

  1. 儘管試圖克隆回購,gitSSL certificate problem

    ➜ ~ git clone https://github.com/tylerhall/sosumi.git 
    Cloning into 'sosumi'... 
    fatal: unable to access 'https://github.com/tylerhall/sosumi.git/': SSL certificate problem: unable to get local issuer certificate 
    
  2. wget返回錯誤,同時檢查證書:

    ➜ ~ wget https://curl.haxx.se/ 
    --2016-03-27 13:36:14-- https://curl.haxx.se/ 
    Resolving curl.haxx.se... 80.67.6.50, 2a00:1a28:1200:9::2 
    Connecting to curl.haxx.se|80.67.6.50|:443... connected. 
    ERROR: cannot verify curl.haxx.se's certificate, issued by '/C=US/O=Let\'s Encrypt/CN=Let\'s Encrypt Authority X1': 
        Unable to locally verify the issuer's authority. 
    To connect to curl.haxx.se insecurely, use `--no-check-certificate'. 
    
  3. curl回報,同時檢驗證書錯誤:

    ➜ ~ curl https://curl.haxx.se/ 
    
    curl: (60) SSL certificate problem: unable to get local issuer certificate 
    More details here: http://curl.haxx.se/docs/sslcerts.html 
    
    curl performs SSL certificate verification by default, using a "bundle" 
    of Certificate Authority (CA) public keys (CA certs). If the default 
    bundle file isn't adequate, you can specify an alternate file 
    using the --cacert option. 
    If this HTTPS server uses a certificate signed by a CA represented in 
    the bundle, the certificate verification probably failed due to a 
    problem with the certificate (it might be expired, or the name might 
    not match the domain name in the URL). 
    If you'd like to turn off curl's verification of the certificate, use 
    the -k (or --insecure) option. 
    

我想:

cd /usr/local/share/ca-certificates 
wget http://curl.haxx.se/ca/cacert.pem --no-check-certificate 
wget http://repo.thireus.com/Packages_robinbird/update-ca-certificates_1.1-2_iphoneos-arm.deb 
dpkg -i update-ca-certificates_1.1-2_iphoneos-arm.deb 
update-ca-certificates 

這表明沒有影響。

我該如何一勞永逸解決認證問題?

回答

0

iOS使用存儲在鑰匙串中的自己的證書存儲,就像OSX一樣。它不是Linux,與越獄無關。這就是爲什麼,例如,蘋果爲OSX構建了自己的Git版本,可以訪問該證書存儲並且不會抱怨證書。你必須閱讀你需要的工具,他們在哪裏搜索可信任的證書。