netsurf and SSL certs

[emcclariion]

I am trying to get the SSl working, I have downloaded the latest prem and saved it as cabundle in netsurf and it still does not work

any suggestions, its says unknown SSL something, has anyone got this working ?

thanks

[PeterS]

Have you had it working before ?

I will check my set-up tonight.

[emcclariion]

no, the fresh download has never worked, but I have only ever used netsurf the last 6 months...

if yours is working do i just need your cabundle dont know?

[PeterS]

When I download the CI builds I just replace the ns020.app file which means my installation might be a bit stale but it does work.

I have cabundle file in the netsurf/res folder and in choices there are two paths:

ca_bundle:./res/cabundle
ca_path:./res/certs

[emcclariion]

Just to confirm what do you mean by CI build? And do you just use the cabundel which is downloaded with the NS download..?

[PeterS]

If you edit the choices file with an editor, make sure it has unix line endings (I use Everest with the right settings).

[PeterS]

CI builds from here: https://ci.netsurf-browser.org/builds/atari/

However, it hasn't updated for a few weeks which I need to ask the NS guys about.

[rudis]

make sure date and time are set correctly

[PeterS]

I just updated to use the cabundle from the CI build and NS is still working.

[emcclariion]

Cheers all the latest builds are with nsv4e.app will then run on a tt?

[PeterS]

No, that is the Coldfire (Firebee) version.

Download the m68k build https://ci.netsurf-browser.org/builds/a ... c-4554.zip

[stormy]

Maybe you can try polar ssl?

https://ptonthat.fr/polarssl-ldg/

[emcclariion]

Cheers I will download that version

[Rajah Lone]

Reminder: Netsurf uses its own SSL/TLS layer (openssl?). PolarSSL.ldg is a library opened for every program, but one has to code to use its API.

If the CA bundle is needed: https://curl.haxx.se/docs/caextract.html (I pick the latest file for PolarSSL.ldg new archive).

[andrew08]

Please go through this FAQ (http://www.modssl.org/docs/2.8/ssl_faq.html) to solve your problem..

[Rajah Lone]

One more thing: if your quickest machine is TT 32MHz, it may not work due to the heavy computations during SSL Handshake (agreement between client and server at SSL/TLS connection start).
If CPU is not fast enough then SSL Handshake will fail with a timeout (60s usualy).
060 or ColdFire is the minimum for nowadays ciphersuites and TLS protocols. If you really want to do SSL on slow 68K, then use weaker ciphersuites.

[emcclariion]

Tested that netsurf version and it does not work, click on say wikipedia

Get ssl verify failed, click on details

Says trusted

Wikipedia.org
Global sign organization

Time is crorrct

[emcclariion]

Tested that netsurf version and it does not work, click on say wikipedia

Get ssl verify failed, click on details

Says trusted

Wikipedia.org
Global sign organization

Time is crorrct

[PeterS]

Does it work on a plain http page ?

[emcclariion]

yes, Peter