Invalid certificate chain with certificate in signature

[calebadcock]

I'm using docker to install via Georift/install-jellyfin-tizen

app_id[AprZAARz4r.Jellyfin] install failed[118, -12], reason: Check certificate error : :Invalid certificate chain with certificate in signature.:<-3>

I've tried other build versions going back to 2023-11-29

TV Model: QN65LS03DAFXZA

[jeppevinkel]

I haven't encountered this issue before, but I see that others have https://github.com/Georift/install-jellyfin-tizen/issues/21 I do wonder what the cause could be though. It might relate to specific TV firmware or Tizen versions since I can't replicate this issue on my TV.

[kalua85]

Same issue here:

PS C:\tizen-studio\tools\ide\bin> .\tizen.bat install -n .\Jellyfin.wgt -t QE65S95DATXXN
Transferring the package...
Transferred the package: C:\tizen-studio\tools\ide\bin\Jellyfin.wgt -> /home/owner/share/tmp/sdk_tools/tmp
Installing the package...
--------------------
Platform log view
--------------------
install AprZAARz4r.Jellyfin
package_path /home/owner/share/tmp/sdk_tools/tmp/Jellyfin.wgt
app_id[AprZAARz4r.Jellyfin] install start
app_id[AprZAARz4r.Jellyfin] installing[9]
app_id[AprZAARz4r.Jellyfin] installing[19]
app_id[AprZAARz4r.Jellyfin] install failed[118, -12], reason: Check certificate error : :Invalid certificate chain with certificate in signature.:<-3>
spend time for wascmd is [3810]ms
Failed to install Tizen application.
Total time: 00:00:07.885

[jeppevinkel]

I can't reproduce with issue on my TV, so I'm at a loss for how to help

[kalua85]

I forked your repo, upgraded tizen studio to 5.6, ceated my own certificate to use in the build process but still the same error. So don't know what to do anymore.

[calebadcock]

I had to create a Samsung certificate myself. I'm guessing some TV models require this instead of a Tizen certificate.

Seeing as how I had to manually add my specific TV to the certificate before building, I'm not sure there is a way to automate this process for these builds.

@jeppevinkel feel free to close unless you think there is a way to automate.

[kalua85]

Created my own samsung certificate and added my DUID to it and then building manually, installation worked without issue. So I guess this can be closed as I don't see how this can be automated.

[0x414c49]

I don't know why it happens, this is the 2nd time. I have to remove the app and install it manually again

[jeppevinkel]

I'll close this since I don't know of a way to programmatically create a general Samsung certificate. This is unsolvable for now. It might be Samsung adding more restrictions on distribution outside their store.

[testuser7]

@jeppevinkel Here's how to manually create certificates: https://gist.github.com/andreas-mausch/026413d908ba61cda15981bb4fbcd276 But I'm getting the same error Invalid certificate chain with certificate in signature. What CA is used for certificates generated from IDE?

This is what it looks like for me:

[rvdr]

c:\tizen-studio\tools\ide\bin\tizen.bat security-profiles add -n SamsungTV -a C:/tizen-studio-data/keystore/author/SamsungTV.p12 -p "password" -dr C:\tizen-studio\tools\certificate-generator\certificates\distributor\tizen-distributor-signer-new.p12 c:\tizen-studio\tools\ide\bin\tizen.bat build-web -e ".*" -e gulpfile.js -e README.md -e "node_modules/*" -e "package*.json" -e "yarn.lock" c:\tizen-studio\tools\ide\bin\tizen.bat package -t wgt -o . -- .buildResult --sign SamsungTV I created the certificates via the certificate manager, yet i still get Check certificate errors