site  contact  subhomenews

Flatpak SSL fix

April 17, 2023 — BarryK

The saga continues. Previous post:

https://bkhome.org/news/202304/still-struggling-with-the-flatpak-sandbox.html

Starting some flatpaks from a terminal, they reported SSL errors. Microsoft-Teams-for-Linux Flatpak starts, but only a blank window. Errors, cutdown:

# teams
...
[2:0417/133241.026000:ERROR:nss_util.cc(349)] After loading Root Certs, loaded==false: /usr/lib/x86_64-linux-gnu/libnssckbi.so: undefined symbol: C_GetInterface ...
[49:0417/133241.074775:ERROR:ssl_client_socket_impl.cc(983)] handshake failed; returned -1, SSL error code 1, net_error -202

I found that the NixOS developers had the same problem, and they discovered the cause:

https://github.com/NixOS/nixpkgs/issues/82422

I recompiled 'p11-kit' in OE, with the "trust-path", and now Teams-for-Linux works, so have added it to the Flatpak Installer. OE commit:

https://github.com/bkauler/oe-qky-kirkstone/commit/7a8cb30cc31351a5d2273150045b88a5d517cee8

That "undefined symbol" has gone away, weird. Still haven't fixed QGIS Flatpak.    

Tags: easy