mozroots - Couldn't retrieve the file using the supplied information.

[kitingChris]

CKAN Version:
latest
Operating System:
ubuntu
The issue you are experiencing:

$ mozroots --import --ask-remove 
Mozilla Roots Importer - version 3.2.8.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

Downloading from 'http://mxr.mozilla.org/seamonkey/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1'...
Couldn't retrieve the file using the supplied information.

[emmanuelmathot]

same issue with 3.12.0

# mozroots --import --sync
Mozilla Roots Importer - version 3.12.0.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

Downloading from 'http://mxr.mozilla.org/seamonkey/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1'...
Couldn't retrieve the file using the supplied information.

[politas]

Mozilla have removed this functionality. You'll need to use Mono's built-in certmgr instead. I haven't been able to reproduce the symptoms to work out exactly what's needed in terms of instructions, though

[bdouxx]

hi
watch my post on an gentoo bug :
https://bugs.gentoo.org/show_bug.cgi?id=585548#c4

use this command instead:
mozroots --import --sync --machine --url "http://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt"

or better( if ca-certificates.crt are here):
cert-sync /etc/ssl/certs/ca-certificates.crt

[kitingChris]

@bdouxx does not work for me :(

# mozroots --import --sync --machine --url "http://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt"
Mozilla Roots Importer - version 3.2.8.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

Downloading from 'http://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt'...
Importing certificates into machine store...
Error: System.ArgumentException: Offset and length were out of bounds for the array or count is greater than the number of elements from index to the end of the source collection.
  at System.Buffer.BlockCopy (System.Array src, Int32 srcOffset, System.Array dst, Int32 dstOffset, Int32 count) [0x00000] in <filename unknown>:0 
  at Mono.Security.ASN1..ctor (System.Byte[] data) [0x00000] in <filename unknown>:0 
  at Mono.Security.X509.X509Certificate.get_RSA () [0x00000] in <filename unknown>:0 
  at Mono.Security.X509.X509Store.ImportPrivateKey (Mono.Security.X509.X509Certificate certificate, System.Security.Cryptography.CspParameters cspParams) [0x00000] in <filename unknown>:0 
  at Mono.Security.X509.X509Store.Import (Mono.Security.X509.X509Certificate certificate) [0x00000] in <filename unknown>:0 
  at Mono.Tools.MozRoots.Process () [0x00000] in <filename unknown>:0 
  at Mono.Tools.MozRoots.Main (System.String[] args) [0x00000] in <filename unknown>:0 

[bdouxx]

@kitingChris

can you try the other method?
www.mono-project.com/docs/about-mono/releases/3.12.0/

Mono users on Linux no longer need to run mozroots to get SSL working. A new command, cert-sync, has been added to this release, which synchronizes the Mono SSL certificate store against your OS certificate store – and this tool has been integrated into the packaging system for all mono-project.com packages, so it is automatically used when you install Mono via our packages. Just make sure the ca-certificates-mono package is installed on Debian/Ubuntu (it’s always bundled on RPM-based distros) to take advantage! It should be installed on fresh installs by default.

If you want to invoke the tool manually (e.g. you installed via make install, not packages) use
cert-sync /path/to/ca-bundle.crt

On Debian systems, that’s
cert-sync /etc/ssl/certs/ca-certificates.crt

and on Red Hat derivatives it’s
cert-sync /etc/pki/tls/certs/ca-bundle.crt

Your distribution might use a different path, if it’s not derived from one of those.

[netkan-bot]

Hey there! I'm a fun-loving automated bot who's responsible for making sure old support tickets get closed out. As we haven't seen any activity on this ticket for a while, we're hoping the problem has been resolved and I'm closing out the ticket automaically. If I'm doing this in error, please add a comment to this ticket to let us know, and we'll re-open it!

[kitingChris]

$ uname -a
Linux CENTAURI 4.2.0-42-generic #49-Ubuntu SMP Tue Jun 28 21:26:26 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

$ cat /etc/os-release 
NAME="Ubuntu"
VERSION="15.10 (Wily Werewolf)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 15.10"
VERSION_ID="15.10"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"

# mono --version
Mono JIT compiler version 3.2.8 (Debian 3.2.8+dfsg-4ubuntu4)
Copyright (C) 2002-2014 Novell, Inc, Xamarin Inc and Contributors. www.mono-project.com
    TLS:           __thread
    SIGSEGV:       altstack
    Notifications: epoll
    Architecture:  amd64
    Disabled:      none
    Misc:          softdebug 
    LLVM:          supported, not enabled.
    GC:            sgen

$ cert-sync
cert-sync: command not found

Very cool that they shut such an essential option down so it does only work for the very newest distributions... -.-

[ayan4m1]

http://packages.ubuntu.com/search?searchon=contents&keywords=cert-sync&mode=&suite=xenial&arch=any

Just make sure the ca-certificates-mono package is installed on Debian/Ubuntu