LNet SSL Certificate Expired

[wildefire]

And Tillmen's cut a new SSL certificate for the repo and lnet now so there's no need for this anymore.

[chalion]

As a non coder/non *nix using windows guy, i modified this manually and then copied my working hacked lnet script to paste bin.
http://pastebin.com/EaDbDsJW

save this as lnet2 or something and then put it in your scripts, kill lnet and run lnet2. it will connect until this is resolved on the server end.

also thank you very much for the workaround code.

Also you will need to trust lnet2 if you want to do it that way. you can also backup your old lnet.lic and overwrite it with this is if you wanted.

[Jara]

This works! Just copy the new script as lnet2.lic, put in your lich\scripts folder and run ;lnet2 in game as a temp workaround.


GSIV (53):

Luxelle Dionket Chaddeaux Jara Wulfyna
Wordek Zodin Thalbrecht Tobias Lashier
Akono Starduct Stahks Kwant Zaleric
Ordim Limorten Mikaloah Dirvy Cromir
Frunk Lunaryna Soandso Taenarion Mither
Falon Issly Lalkcriga Enrath Radcraw
Xylock Ignis Kataleena Dhairn Ilande
Loxius Archaeron Heyward Krysalla Diablic
Criemsen Alex Windi Ilera Patecatl
Deftone Apoc Darqwolf Laviticas Attoll
Ogato Maerc Helius

GSF (3):

Shinran Vernly Wally

DR (13):

Gabellia Dugoln Lukrani Mistified Usidore
Lokran Tekronn Sheltim Inkin Mooselurk
Martyen Mithgrek Romeron

GSPlat (1):

Peppwyn

Total connected: 70

[Soulance]

Asked me for a password though...

Ah, nevermind. Must have set one before or something. Works!

[MzFit Toy]

I am going to make this really easy for you all. Find your lich folder. Go into it and find the scripts folder. Inside this folder is a file called lnet.lic. Right click on this file, and copy and paste the file into the same folder, creating a copy of the lnet.lic file. Then, go the link provided above with the script (that thing is huge by the way)
http://pastebin.com/EaDbDsJW, copy all of it and open the original lnet.lic file. Ctrl+a to copy everything in that file currently and delete it. Then paste the new script into it and save. No trusting, no fussing. Lnet fixed.

[Chastittee]

So, this got the temp lnet working, but I can't get ;repository to work. Looks to be the same certificate issue. Any ideas?

Error reads:
[repository: error connecting to server: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed]

[Chastittee]

Scratch that. Lnet2 stopped working as well I think.

[wildefire]

Put the following in the repository.lic script after line number 264:
ssl_context.verify_mode = OpenSSL::SSL::VERIFY_NONE

That'll let repo connect around the same certificate error.
Caveat is I didn't bother checking the repo server's ssl certificate when I was looking at packet dumps of this this morning, so there's not even a random internet stranger's word telling you it's not nefarious.

[Chastittee]

I'm sorry, but I am not following. I'm opening repository.lic in Notepad. No line #s. Am I doing something wrong?

[Velfi]

I'm sorry, but I am not following. I'm opening repository.lic in Notepad. No line #s. Am I doing something wrong?

Use Notepad++ as it's better and has line numbers. I believe the code you'd want to search for without it would be:



if OpenSSL::SSL::VERIFY_PEER == OpenSSL::SSL::VERIFY_NONE
# the plat_updater script redefines OpenSSL::SSL::VERIFY_PEER, disabling it for everyone
ssl_context.verify_mode = 1 # probably right
else
ssl_context.verify_mode = OpenSSL::SSL::VERIFY_PEER
end


That final end is line 264, so you'd insert (without the ' ') the ' ssl_context.verify_mode = OpenSSL::SSL::VERIFY_NONE ' on the line after the end and before the:



socket = TCPSocket.new(hostname, port)


..which is on line 265.

edit: I've tried this change and saved it as a separate script, seems to work.

[Chastittee]

Thanks, all! Rough start to a return from a 3 year hiatus, but I think we're good now! :)

[Luxelle]

Hey, Thanks Tillmen for fixing Lich. :) Lookin' good!

[Donquix]

Use Notepad++ as it's better and has line numbers. I believe the code you'd want to search for without it would be:



if OpenSSL::SSL::VERIFY_PEER == OpenSSL::SSL::VERIFY_NONE
# the plat_updater script redefines OpenSSL::SSL::VERIFY_PEER, disabling it for everyone
ssl_context.verify_mode = 1 # probably right
else
ssl_context.verify_mode = OpenSSL::SSL::VERIFY_PEER
end


That final end is line 264, so you'd insert (without the ' ') the ' ssl_context.verify_mode = OpenSSL::SSL::VERIFY_NONE ' on the line after the end and before the:



socket = TCPSocket.new(hostname, port)


..which is on line 265.

edit: I've tried this change and saved it as a separate script, seems to work.

I also recommend notepad++ but if you need to use notpead in pinch...

click view -> status bar

There should be a bar on the bottom that now shows your line and column number the cursor is at.

also you can....

click edit > go to... (or press control-g)

this will give you a prompt to go to a specific line number.