maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N9 / N950 (https://talk.maemo.org/forumdisplay.php?f=51)
-   -   Problems while while sending https requests (https://talk.maemo.org/showthread.php?t=100608)

Sunset_Shimmer 2018-12-30 12:32

Problems while while sending https requests
 
I used pip and found that it could not install any package now.
The error showed in the log is:
TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:600)
It seems that MeeGo has some problem while sending https requests.
The same problem also happened when I visited Github,https://talk.maemo.org,pypi.org,and many other websites that using https(TLS1.2???).
How can I solve it?The wiki said Opera Mini do not have the problem,bou there is no Opera MINI for MeeGo but Opera Mobile Lab.
How can I get it?
Thanks.

Macros 2018-12-30 16:37

Re: Problems while making https requests
 
You can find Opera Mini in Openrepos
It is Opera Mini.

The problem with SSL and websites using it come from expired certificates. I haven't found a convenient way yet to solve it.
The only thing you can do: Find out what root certificate the website uses. Obtain it by googling and install it on the N9.

If anybody knows a website with a nice list of current certificates for the N9 I would be very thankful Maybe we can create such a list by ourselves. A wiki page?

Sunset_Shimmer 2018-12-31 09:03

Re: Problems while making https requests
 
Well,I am in China so the Opera Turbo seems not to work quickly here.
Thanks.
And the wiki said that there IS A TLS PROBLEM with N9.
http://wiki.maemo.org/Resurrect_your_N9
Quote:

Additionally more and more websites require TLS 1.2 - which the meego browser does not support; however, Opera mini does
There is even NO problem when I visited pypi.org on my Nokia 3050 with Opera Mini 8 Java version,but n9 does.It can not be a certificate problem.

nieldk 2018-12-31 14:31

Re: Problems while making https requests
 
Quote:

Originally Posted by Sunset_Shimmer (Post 1552172)
Well,I am in China so the Opera Turbo seems not to work quickly here.
Thanks.
And the wiki said that there IS A TLS PROBLEM with N9.
http://wiki.maemo.org/Resurrect_your_N9

There is even NO problem when I visited pypi.org on my Nokia 3050 with Opera Mini 8 Java version,but n9 does.It can not be a certificate problem.

It most certainly can be a certificate problem, some root certificates are revoked since 2009, and new have been issued. Neither of these are then correct in the installed root certificates on the N9 !

It can absolutely also be missing TLSv1.2 (and v1.3) support in openssl.

Macros 2018-12-31 15:07

Re: Problems while while sending https requests
 
You can check if its a certificate problem or a TLS problem with openssl (from a PC with current certificates).

Code:

openssl s_client -connect talk.maemo.org:443 -tls1_1
establishes a session, thus you can access talk.maemo.org by installing an updated certificate.

Code:

openssl s_client -connect pypi.org:443 -tls1_1
Fails, so the stock browser of the N9 will no be able to access it.

Edit: Details for pypi.org and TLS 1.2 here.


All times are GMT. The time now is 00:26.

vBulletin® Version 3.8.8