maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Maemo 5 / Fremantle (https://talk.maemo.org/forumdisplay.php?f=40)
-   -   cannot browse to https://emacswiki.org (https://talk.maemo.org/showthread.php?t=97003)

t-b 2016-07-19 15:33
cannot browse to https://emacswiki.org
 
Hi,

I cannot access https://emacswiki.org/ from my N900 (running stable CSSU).

A local certificate problem or is it a general N900 browsing issue? Other sites seem to be working fine.

reinob 2016-07-19 18:59
Re: cannot browse to https://emacswiki.org
 
Quote:
Originally Posted by t-b (Post 1510074)
Hi,

I cannot access https://emacswiki.org/ from my N900 (running stable CSSU).

A local certificate problem or is it a general N900 browsing issue? Other sites seem to be working fine.
That page is using a letsencrypt certificate. I'm not sure Maemo5 included the relevant root certificate.

Would be a good candidate for CSSU...

peterleinchen 2016-07-19 20:44
Re: cannot browse to https://emacswiki.org
 
Quote:
Originally Posted by t-b (Post 1510074)
I cannot access https://emacswiki.org/ from my ...
N9, too.

Sorry for possible hi-jacking:
As well as I cannot open https://talk.maemo.org on my N9 (which should be a different issue).

t-b 2016-07-19 21:36
Re: cannot browse to https://emacswiki.org
 
Quote:
Originally Posted by reinob (Post 1510095)
That page is using a letsencrypt certificate.
https://www.archlinux.org is also using letsencrypt and works fine. So I assume it is not the root cause.

t-b 2016-08-11 15:52
Re: cannot browse to https://emacswiki.org
 
Is there a workaround for this problem?
Emacswiki.org is one of the best sources for Emacs related info, tutorials, example code, configurations etc and it would be nice to be able to browse it with my N900.

Edit:

Someone with the same error on OSX mentioned updating openssl as solution. Just checked my version and it is 0.9.8zh-1+maemo1+0m5+0cssu0

http://d.hatena.ne.jp/shammer/20160216/p1

brew update
brew upgrade openssl
sudo mv /usr/bin/openssl /usr/bin/openssl.0.9.8zg
brew link openssl --force
sudo ln -s /usr/local/bin/openssl /usr/bin/openssl

t-b 2016-08-11 20:20
Re: cannot browse to https://emacswiki.org
 
"Solved" the connection issue by storing the website offline. Used HTTrack to copy it and chose Mirror Web Site (412 MB).
Works fine with eww (use eww-open-file), searching the local data doesn't work though so can only be used for browsing.

Still hope someone will provide a better solution for this problem.

paolo_3_1415926 2016-08-12 11:38
Re: cannot browse to https://emacswiki.org
 
At a cursory glance, the issue seems to be related to the fact that emacswiki.org supports only TLS1.1 and TLS1.2 - for comparison, archlinux.org supports TLS1.0, TLS1.1 and TLS1.2. Combining this with the fact that my Nokia N9 sports an ancient libssl 0.9.8r (which does support up to TLS 1.0) means that I cannot establish a connection to emacswiki.

If the above is correct, then the solution is indeed to bump up the openssl version to something more reasonable (fixing many security vulns at the same time).

As a side note, while many could argue that not connecting to emacswiki is not the end of the world, not supporting TLS 1.1 and up could be a very severe issue for at least the N9...

peterleinchen 2016-08-12 18:18
Re: cannot browse to https://emacswiki.org
 
Sounds reasonable.
But would that also explain then non-possible connection from N9 browser to https://talk.maemo.org? (whereas https://maemo.org works fine with grob)

paolo_3_1415926 2016-08-13 05:04
Re: cannot browse to https://emacswiki.org
 
It looks like we are dealing with two separate issues here. Talk.maemo.org is accessible via other browsers (checked with Firefox here) and:

Code:
~ $ wget -d --secure-protocol=TLSv1 https://talk.maemo.org
Setting --secure-protocol (secureprotocol) to TLSv1
DEBUG output created by Wget 1.10.2 on linux-gnu.

--08:08:33--  https://talk.maemo.org/
          => `index.html'
Risoluzione di talk.maemo.org in corso... 213.128.137.28
Caching talk.maemo.org => 213.128.137.28
Connessione a talk.maemo.org|213.128.137.28:443... connesso.
Created socket 3.
Releasing 0x0005eba0 (new refcount 1).
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x0005fb08
certificate:
  subject: /C=DE/CN=talk.maemo.org
  issuer:  /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Class 1 DV Server CA
X509 certificate successfully verified and matches host talk.maemo.org

---request begin---
GET / HTTP/1.0
User-Agent: Wget/1.10.2
Accept: */*
Host: talk.maemo.org
Connection: Keep-Alive

---request end---
HTTP richiesta inviata, aspetto la risposta...
---response begin---
HTTP/1.1 200 OK
Date: Sat, 13 Aug 2016 04:58:32 GMT
Server: Apache/2.2.22 (Ubuntu)
X-Powered-By: PHP/5.3.10-1ubuntu3.21
Set-Cookie: bbsessionhash=fb940df846eec7d733d7a015bc7d92f3; path=/; HttpOnly
Set-Cookie: bblastvisit=1471064312; expires=Sun, 13-Aug-2017 04:58:32 GMT; path=/; secure
Set-Cookie: bblastactivity=0; expires=Sun, 13-Aug-2017 04:58:32 GMT; path=/; secure
Cache-Control: private
Pragma: private
X-UA-Compatible: IE=7
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=ISO-8859-1

---response end---
200 OK

Stored cookie talk.maemo.org -1 (ANY) / <session> <insecure> [expiry none] bbsessionhash fb940df846eec7d733d7a015bc7d92f3

Stored cookie talk.maemo.org -1 (ANY) / <permanent> <secure> [expiry 2017-08-13 07:58:32] bblastvisit 1471064312

Stored cookie talk.maemo.org -1 (ANY) / <permanent> <secure> [expiry 2017-08-13 07:58:32] bblastactivity 0
Lunghezza: non specificato [text/html]

    [ <=>                                                                                                                                                      ] 54,306        --.--K/s           

Closed 3/SSL 0x5fb08
08:08:35 (600.27 KB/s) - "index.html" salvato [54306]
In short, the issue seems to be with grob itself.

t-b 2016-08-13 10:49
Re: cannot browse to https://emacswiki.org
 
Another workaround is installing an alternative OS. I tried it with Iceweasel on Easy Debian and no problem to access any of the aforementioned sites.

paolo_3_1415926 2016-08-13 11:29
Re: cannot browse to https://emacswiki.org
 
Quote:
Originally Posted by t-b (Post 1512451)
Another workaround is installing an alternative OS. I tried it with Iceweasel on Easy Debian and no problem to access any of the aforementioned sites.
Yes, that can be a solution for the short term but that might quickly become tiresome.


All times are GMT. The time now is 08:06.

vBulletin® Version 3.8.8