July 2004 - Dillo-dev - lists.mailman3.com

[Dillo-dev]Re: HTTPS
by Jorge Arellano Cid July 14, 2004

July 14, 2004

Hi Garret, I just finished uploading my patches to the dpis (those that were independent from your code but that required a merge) and the tarball tree you sent me. It comes with some minor modifications ... > Let me know what you think of the coding style, etc. Very clean and compliant with our Naming&Coding in general. I did minor changes, like keeping it inside 80 columns and switching "if(" to "if (" (not a requirement but just to be consistent with the rest of Dillo). Only in one function I needed to reindent to 3 spaces... Unto less trivial stuff, Makefile.am was modified so dpiutil.h gets in the tarball produced with `make dist`. It would be great if you can add some SSL library detection routine to configure.in so https.c uses the no_ssl_support() function when the libarry is not present (or detected). > Also, if you could give me some direction on how to implement the prompt for > unverified certificates (and the code/location to save them to), it would be > greatly appreciated. I'm working on this. Maybe tomorrow... For those that feel curious, you can get the latest CVS and test the new dpis. Just remember to install them after typing make! :-) More seriously, kill dpid and any running dpi before: 'make install' (or 'make install-strip'). Best Jorge.- PS: great start for 0.8.3-pre!

3 2

[Dillo-dev]Plugin infrastructure
by Garrett Kajmowicz July 14, 2004

July 14, 2004

Something with the DPI instrastructure needs to be considered - what to do if a plugin needs to prompt the user for some information. The need for this first came about while developping the https plugin - there needs to be a way to prompt the user in the event that the foreign system isn't trusted. This can currently be done through the use of direct calls to Gtk (I assume), but this is not the best result. It requires that everybody who needs to do user prompting write their own dialogs. It creates additional dependancies for the dpis. And it makes code upgrades more difficult - Should Dillo switch to another toolkit in the future for whatever reason (perhaps Gtk2?), all of the DPIs need to be rewritten. And in the event of multiple instances of Dillo running, it becomes impossible to determine which instance the prompt is for. My proposed solution to this problem is to create a new dpi command which is used to prompt the user for what to do. It should allow (require/default?) modal dialog boxes so that the prompt is associated with the Dillo instance the plugin is using. I am suggesting that the dpi command be 'prompt_user'. There would be one manditory field, 'type' which would indicate the type of prompt to use. Example values might be 'dialog' or 'file_save'. These types would be extensible. From there, additional tags would be allocated based on the type of prompt. For example, a 'file_save' prompt might have a default_filename tag. A 'dialog' would likely have a title, a message, and up to 3 button texts. In all cases, the responce should be a dpi message of type 'user_response' with a 'response' tag holding the value of the user input. At least this is my proposal. I'd like some feedback on it, and especially suggestions or better ideas. - Garrett Kajmowicz

4 6

Fwd: Re: [Dillo-dev]Plugin infrastructure
by Garrett Kajmowicz July 13, 2004

July 13, 2004

> In the discussions before introduction of dpi was the point UI could > entierely be done using standart html, rendered by dillo itself. > > Maybe we could use this here. > > I would see two (new) dpi commands: > -Pop a new dillo window (maybe with some args: modal, no toolbar, no > addressbar..., set its size, url) > -Make a window reload > > So dpi could make a window pop for asking anything about certificates, > with a standart html form in it. It would allow to change window title > (through <title>) and make the gui customisable for future needs, and > even be portable for gtk->other toolkit change. > > I thought of the 'reload window' feature not directly for https, but for > download dpi. This would allow us to update the status of current > downloads; shown in a dedicated window, somewhat ala Firefox, but again, > entierely in html. That is very interesting, but causes two problems. First of all, from what I have seen , it looks like it would be difficult to implement modal dialog boxes. This is important for security warnings so that they are not hidden or confused with other Dillo warnings. Secondly, this approach causes some problems. I am approaching this from the perspective of the https filter dpi, but I assume that the same problem would apply to any other related dpi. Firstly, a filter dpi runs in its own process for each call, not as a server. Thus every time a call is made to the https filter dpi, it runs in its entirety. This makes it difficult to handle a response from the user because the dpi is then required to write a web server capable of at the very least parsing http GET requests, which means opening up a socket and so forth. Needless to say, handling that is somewhat of a challenge from a filter dpi perspective. Secondly, for the https application, cookie/post/get datais likely to be sent, which means that any rerequest would have to be able to pass that data on exactly. Third, the https verification needs to be done after the ssl session is estabilshed, but before the http request is made (for security reasons). Thus any complicated scheme could result in multiple connections being made. Fourthly, I don't like it. That's the most important one of all :-) The html prompt window isn't a bad idea, but causes a lot of coding headaches on the dpi other end. But that's just my thought. If you think that an html prompt window would work, I'd appreciate a modified "hello" filter dpi as an example from which I could implement the required code. Thanks for the feedback - Garrett Kajmowicz -------------------------------------------------------

2 1

[Dillo-dev]0.8.2 - No PNG support, but config cound PNG available (attachment)
by Geek July 13, 2004

July 13, 2004

Hi, I just compiled and installed 0.8.2 on my Debian stable and gave it a shakedown. It doesn't display PNG images. 0.8.1 and earlier, no problems. I have attached the config.log file Thanks for any assistance. -- Gregg t3h g33k http://geek.scorpiorising.ca

1 0

RE: [Dillo-dev]Plugin infrastructure
by Eric Gaudet July 12, 2004

July 12, 2004

Dillo's html rendering capabilities are what we should use for advanced forms. We don't want to duplicate the form widgets into a native-gtk version like mozilla does with xul. The pageflow, the forms, images etc ought to be in html, even if it's a dpi serving them. Having a login/password modal box seems to be what people are used to, so I can see why we'd like to have that. I can imagine dpis other than https needing a login/password box, but I'm not sure I can imagine that for non-login purposes. In any case, anything more complicated than one string, one or two text boxes with lables (possibly hidden for passwords) and 1 or 2 buttons certainly belongs to a dedicated html page the dpi would build. I could live with an intermediate html login page for https or any other dpi myself. Best, EG > -----Original Message----- > From: dillo-dev-admin(a)auriga.wearlab.de > [mailto:dillo-dev-admin@auriga.wearlab.de] On Behalf Of > Garrett Kajmowicz > Sent: Monday, July 12, 2004 3:26 PM > To: dillo-dev(a)auriga.wearlab.de > Subject: Re: [Dillo-dev]Plugin infrastructure > > > I just came up with two other dialog box types we might need: > > A window with alterable caption/message text and either one > or two text boxes > with associated labels. One or both of the boxes should be > able to be set in > "password" mode. > > I'm not sure if that counts as one or two, so I'm inflating > my estimates to > look more impressive :-) > > - Garrett Kajmowicz > > _______________________________________________ > Dillo-dev mailing list > Dillo-dev(a)lists.auriga.wearlab.de > http://lists.auriga.wearlab.de/cgi-> bin/mailman/listinfo/dillo-dev > >

1 0

[Dillo-dev]sparc success for 0.8.2
by Riccardo Mottola July 12, 2004

July 12, 2004

Hey, I just wanted to report that the final release of dillo compiles and seems to work fine here on solaris 6 -Riccardo

1 0

[Dillo-dev]HTTPS
by Garrett Kajmowicz July 12, 2004

July 12, 2004

OK - I have created a preliminary HTTPS implementation using openssl. It checks to see if a site certificate chain is valid. Unfortunately, I'm not sure how to create a dialog to prompt the user, so the "ask the user" function just returns continue. Should I use glib/gtk or some dpi communication message? The totality of the dpi stuff I have done is about 15k or so. Please let me know if you are interested and I will email it to you post haste. - Garrett Kajmowicz

2 1

[Dillo-dev]HTTPS
by Garrett Kajmowicz July 10, 2004

July 10, 2004

Is anybody currently actively working on HTTPS support? If not, how much work would be involved? I have some basic experience working with OpenSSL. Unfortunately, I have almost no gtk experience (I'm a Qt kind of person). I have some spare time, and would be willing to help, if I could, though I've never worked on a web browser before. Closest I have come is writing PHP. - Garrett Kajmowicz

1 0

[Dillo-dev]Re: Remote control of displayed URL
by Ian Walberg July 9, 2004

July 9, 2004

Jorge, I have a kiosk type setup where I need to be able to reset dillo to a given URL from another programme and then allow the user to navigate on their own. I really do not care how this is achieved but I do not want to restart dilio with a specific URL each time. Thanks Ian -----Original Message----- From: dillo-dev-admin(a)auriga.wearlab.de [mailto:dillo-dev-admin@auriga.wearlab.de] On Behalf Of dillo-dev-request(a)auriga.wearlab.de Sent: 09 July 2004 05:27 To: dillo-dev(a)auriga.wearlab.de Subject: Dillo-dev digest, Vol 1 #462 - 1 msg Send Dillo-dev mailing list submissions to dillo-dev(a)lists.auriga.wearlab.de To subscribe or unsubscribe via the World Wide Web, visit http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev or, via email, send a message with subject or body 'help' to dillo-dev-request(a)lists.auriga.wearlab.de You can reach the person managing the list at dillo-dev-admin(a)lists.auriga.wearlab.de When replying, please edit your Subject line so it is more specific than "Re: Contents of Dillo-dev digest..." Today's Topics: 1. Re: Remote control of displayed URL (Jorge Arellano Cid) --__--__-- Message: 1 Date: Thu, 8 Jul 2004 08:26:48 -0400 (CLT) From: Jorge Arellano Cid <jcid(a)dillo.org> To: Dillo mailing list <dillo-dev(a)lists.auriga.wearlab.de> Subject: Re: [Dillo-dev]Remote control of displayed URL Hi Ian, On Tue, 6 Jul 2004, Ian Walberg wrote: > I would like to be able to command dillo via a socket to a specific > URL from another application. > > Can this be done already? Yes it can be done. The specific dpi to provide for that service is not written yet, but the bookmarks-dpi commands dillo to open and refresh URLs all the time. > I tried a simple server plugin but did not get the > results I was looking for. Please explain further what you want to do. It may be a couple of days to write a specific server and get it working depending on what is required. > Thanks No problem. Cheers Jorge.- --__--__-- _______________________________________________ Dillo-dev mailing list Dillo-dev(a)lists.auriga.wearlab.de http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev End of Dillo-dev Digest

1 0

[Dillo-dev]Remote control of displayed URL
by Ian Walberg July 8, 2004

July 8, 2004

I would like to be able to command dillo via a socket to a specific URL from another application. Can this be done already? I tried a simple server plugin but did not get the results I was looking for. Thanks Ian

2 1