Page 1 of 1

netsurf and SSL certs

Posted: Wed Mar 27, 2019 4:05 pm
by emcclariion
I am trying to get the SSl working, I have downloaded the latest prem and saved it as cabundle in netsurf and it still does not work

any suggestions, its says unknown SSL something, has anyone got this working ?

thanks

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 4:06 pm
by PeterS
Have you had it working before ?

I will check my set-up tonight.

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 4:42 pm
by emcclariion
no, the fresh download has never worked, but I have only ever used netsurf the last 6 months...

if yours is working do i just need your cabundle dont know?

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 7:58 pm
by PeterS
When I download the CI builds I just replace the ns020.app file which means my installation might be a bit stale but it does work.

I have cabundle file in the netsurf/res folder and in choices there are two paths:

ca_bundle:./res/cabundle
ca_path:./res/certs

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 8:03 pm
by emcclariion
Just to confirm what do you mean by CI build? And do you just use the cabundel which is downloaded with the NS download..?

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 8:12 pm
by PeterS
If you edit the choices file with an editor, make sure it has unix line endings (I use Everest with the right settings).

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 8:13 pm
by PeterS
CI builds from here: https://ci.netsurf-browser.org/builds/atari/

However, it hasn't updated for a few weeks which I need to ask the NS guys about.

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 8:14 pm
by rudis
make sure date and time are set correctly

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 8:23 pm
by PeterS
I just updated to use the cabundle from the CI build and NS is still working.

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 8:44 pm
by emcclariion
Cheers all the latest builds are with nsv4e.app will then run on a tt?

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 9:06 pm
by PeterS
No, that is the Coldfire (Firebee) version.

Download the m68k build https://ci.netsurf-browser.org/builds/a ... c-4554.zip

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 9:11 pm
by stormy
Maybe you can try polar ssl?

https://ptonthat.fr/polarssl-ldg/

Re: netsurf and SSL certs

Posted: Wed Mar 27, 2019 9:14 pm
by emcclariion
Cheers I will download that version

Re: netsurf and SSL certs

Posted: Thu Mar 28, 2019 11:21 am
by Rajah Lone
Reminder: Netsurf uses its own SSL/TLS layer (openssl?). PolarSSL.ldg is a library opened for every program, but one has to code to use its API.

If the CA bundle is needed: https://curl.haxx.se/docs/caextract.html (I pick the latest file for PolarSSL.ldg new archive).

Re: netsurf and SSL certs

Posted: Thu Mar 28, 2019 12:13 pm
by andrew08
Please go through this FAQ (http://www.modssl.org/docs/2.8/ssl_faq.html) to solve your problem.. :cheers:

Re: netsurf and SSL certs

Posted: Thu Mar 28, 2019 2:12 pm
by Rajah Lone
One more thing: if your quickest machine is TT 32MHz, it may not work due to the heavy computations during SSL Handshake (agreement between client and server at SSL/TLS connection start).
If CPU is not fast enough then SSL Handshake will fail with a timeout (60s usualy).
060 or ColdFire is the minimum for nowadays ciphersuites and TLS protocols. If you really want to do SSL on slow 68K, then use weaker ciphersuites.

Re: netsurf and SSL certs

Posted: Thu Mar 28, 2019 7:14 pm
by emcclariion
Tested that netsurf version and it does not work, click on say wikipedia

Get ssl verify failed, click on details

Says trusted

Wikipedia.org
Global sign organization

Time is crorrct

Re: netsurf and SSL certs

Posted: Thu Mar 28, 2019 7:14 pm
by emcclariion
Tested that netsurf version and it does not work, click on say wikipedia

Get ssl verify failed, click on details

Says trusted

Wikipedia.org
Global sign organization

Time is crorrct

Re: netsurf and SSL certs

Posted: Fri Mar 29, 2019 11:49 am
by PeterS
Does it work on a plain http page ?

Re: netsurf and SSL certs

Posted: Fri Mar 29, 2019 1:16 pm
by emcclariion
yes, Peter