Thread: Idea: N900 security update (openssl, browser etc)
View Single Post
Wikiwide is offline Wikiwide
2019-03-27 , 05:57
Posts: 2,006 | Thanked: 3,351 times | Joined on Jun 2010 @ N900: Battery low. N950: torx 4 re-used once and fine; SIM port torn apart
#51
Everybody is talking a lot. Disputing philosophical points.

Meanwhile, I observe that the best openssl in a Fremantle web-browser can be found in QML-Browser [which doesn't get inside my internet banking, for whatever reason].

Originally Posted by Android_808 View Post
There's some work in Leste repo on updating maemo-security-certman to use openssl 1.1.0. Not sure if that will help out as well in the long run to keep components and certificates up to date. Some Leste components like that could be backported to Fremantle to aid in testing.
About half of my Internet Banking operations can be done in MicroB, Fennec is just as bad at interpreting HTML/JS UI as MicroB [with added Fennec slowness], and Opera is the last resort [despite me having to input login and password on a white page, where even "login" button's location has to be guesstimated] which somehow works.

Some websites, like Bandcamp, work only in Fennec. Some EBay web pages [like "View order details"] refuse to work in either of the mobile browsers.

Should I finally find some time [I have five tasks to do this week, plus busy Friday and Saturday and Sunday, plus busy half-of-week every week, plus on-going uncertainties in real life], I would like to gently look at what is happening with MicroB.

Because I am aghast at how it has its own willful option for Rotation, when I would have expected it to adhere to system-wide Orientation lock: Enabled/Disabled.

Because, if libmozjs, and maybe libxul, inside microb-engine can be upgraded, then Javascript compatibility could be improved, though it would require meticulous re-reading.

Originally Posted by jonwil View Post
ok I confirmed that yes microb-engine is using its own crypto code (NSS) and not openssl so we need to look into that.
It does however tap into the maemosec stuff for its root certificates (makes sense, that way there is only one set of root certificates for the entire device)
See https://en.wikipedia.org/wiki/Network_Security_Services Which means that upgrading SSL/TLS in MicroB would require editing the same package: microb-engine.

So, what's the problem? Go to https://github.com/jonwil/microb-engine-ff24 and read source code, I think that's the latest version? Try to compile it if you dare, or even package it for Extras-Devel auto-builder. See if there are any improvements that can be made.

Thank you. Best wishes.
~~~~~~~~~~~~~~~~~
Per aspera ad astra...
 

The Following 3 Users Say Thank You to Wikiwide For This Useful Post: