October 2014 - Dillo-dev - lists.mailman3.com

SSL in the browser

by eocene＠gmx.com

I put up a new version that checks various locations for certificates and permits a location to be specified during configuration. It may not make any difference for osx, but maybe it will help the BSDs. http://www.dillo.org/test/ssl_in_browser.diff

Oct. 27, 2014

SSL in the browser

by james.from.wellington＠gmail.com

Firefox keeps them in a database called cert8.db in <user>/Library/Application Support/Firefox/Profiles/*/ Safari keeps them in /System/Library/Keychains/SystemCACertificates.keychain Neither of these formats is legible to OpenSSL. These comments are about Firefox 32.0.3, and OSX 10.6.8 which is now obsolete. Later versions may do things differently. On 10/26/14, eocene <eocene at gmx.com> wrote: > James wrote: >> Every certificate that doesn't have something at the root of its chain, as >> it should. I'm on osx and there is no /etc/ssl/certs, so I had no roots >> until I started loading them. > > Where does OSX keep them? > > I'd looked on the web a bit in the past in case there was any simple > consensus out there on the matter of where to check, but didn't find > anything. > > I'll see where curl checks. Whatever they do is probably a good idea. > > > _______________________________________________ > Dillo-dev mailing list > Dillo-dev at dillo.org > http://lists.dillo.org/cgi-bin/mailman/listinfo/dillo-dev >

Oct. 26, 2014

SSL in the browser

by eocene＠gmx.com

James wrote: > Every certificate that doesn't have something at the root of its chain, as it should. I'm on osx and there is no /etc/ssl/certs, so I had no roots until I started loading them. Where does OSX keep them? I'd looked on the web a bit in the past in case there was any simple consensus out there on the matter of where to check, but didn't find anything. I'll see where curl checks. Whatever they do is probably a good idea.

Oct. 26, 2014

SSL in the browser

by eocene＠gmx.com

James wrote: > I've got gmail going, using the ~/.dillo/certs certificate store. It > took a bit of poking around, so I'm attaching my notes to myself in > case they're useful for someone else. Is the code complaining about every certificate by default, or was gmail specifically giving you trouble?

Oct. 26, 2014

SSL in the browser

by james.from.wellington＠gmail.com

I've got gmail going, using the ~/.dillo/certs certificate store. It took a bit of poking around, so I'm attaching my notes to myself in case they're useful for someone else. On 10/23/14, Johannes Hofmann <johannes.hofmann at gmx.de> wrote: > On Tue, Oct 21, 2014 at 04:42:24PM +0000, eocene wrote: >> Jorge wrote: >> > Oh, as our mailsearch doesn't work anymore, is there >> > and URL to the original thread (Gmane style) or something? >> > >> > I'd like to remember what the main point of having SSL inside >> > the browser were. I'm getting old. ;) >> >> Looking briefly, I couldn't find relevant discussion. Possibly it >> was off list. My recollection is that, at the time, it had to do with >> seeing how SSL was becoming more and more central to browsing with >> things like 'HTTPS Everywhere' and 'HTTP Strict Transport Security' >> coming along and the issue of privacy gaining increasing public >> awareness. >> >> As for this effort now, I started just by wondering what it would >> look like if I integrated Benjamin's code and took out the windows >> stuff. It was working pretty well very quickly. And now I like how >> much more respectful of servers and resources Dillo can be when >> HTTPS is integrated with the http_max_conns queuing and >> http_persistent_conns. I think Johannes mentioned something about >> Dillo and Tor not working together so well with HTTPS in a dpi, >> but I don't know the details there. > > There is a potential loophole if you start dillo in a torified > environment and dpid is running outside. Then https connections go > via the non-torified https plugin. It's a small detail, but it > happened to me. > I'm mostly interested in getting SSL support from unmaintained > experimental state to properly supported and maintained option. > > Cheers, > Johannes > > _______________________________________________ > Dillo-dev mailing list > Dillo-dev at dillo.org > http://lists.dillo.org/cgi-bin/mailman/listinfo/dillo-dev >

Oct. 26, 2014

assert failed when using text search while page still loading

by sgeerken＠dillo.org

I've problems to reproduce it, but I'm guessing ... On Do, Okt 23, 2014, eocene wrote: > (gdb) bt > #0 0xb778a424 in __kernel_vsyscall () > #1 0xb70b2661 in *__GI_raise (sig=6) > at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 > #2 0xb70b5a92 in *__GI_abort () at abort.c:92 > #3 0xb70ab878 in *__GI___assert_fail ( > assertion=0x816049e "i >= 0 && this->num - i > 0", > file=0x816048e "../lout/misc.hh", line=167, > function=0x8160540 "T* lout::misc::SimpleVector<T>::getRef(int) const [with T = dw::Textblock::Line]") at assert.c:81 > #4 0x080a73f6 in lout::misc::SimpleVector<dw::Textblock::Line>::getRef ( > this=0x905df50, i=-1) at ../lout/misc.hh:167 > #5 0x080a8447 in dw::Textblock::TextblockIterator::getAllocation ( > this=0x885ef98, start=0, end=5, allocation=0xbff2e818) > at textblock_iterator.cc:288 A line is missing, but everything else seems OK. I guess that this has to do with the new line breaking (introduced with release 3.0.3), where some words are not immediately assigned to a line. I'll soon work on this. Sebastian

Oct. 24, 2014

assert failed when using text search while page still loading

by james.from.wellington＠gmail.com

Here's a swag: - the search and the assembly of the page are in separate threads - the search finds the word - layout hasn't been done yet - so there is no line number to find Presumably, if things were earlier in the assembly of the page, the search would refuse to start, because it couldn't see the text to search. Suggested bodge: whatever chain of pointers the search follows, in order to decide whether to start, keep more of them private inside the page assembler, for longer, so that the searcher can't see this transient state. In the data structure, document the set of things that must be true before it can be published to other threads. On 10/24/14, eocene <eocene at gmx.com> wrote: > > (gdb) bt > #0 0xb778a424 in __kernel_vsyscall () > #1 0xb70b2661 in *__GI_raise (sig=6) > at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 > #2 0xb70b5a92 in *__GI_abort () at abort.c:92 > #3 0xb70ab878 in *__GI___assert_fail ( > assertion=0x816049e "i >= 0 && this->num - i > 0", > file=0x816048e "../lout/misc.hh", line=167, > function=0x8160540 "T* lout::misc::SimpleVector<T>::getRef(int) const > [with T = dw::Textblock::Line]") at assert.c:81 > #4 0x080a73f6 in lout::misc::SimpleVector<dw::Textblock::Line>::getRef ( > this=0x905df50, i=-1) at ../lout/misc.hh:167 > #5 0x080a8447 in dw::Textblock::TextblockIterator::getAllocation ( > this=0x885ef98, start=0, end=5, allocation=0xbff2e818) > at textblock_iterator.cc:288 > #6 0x080c65f7 in dw::core::Iterator::scrollTo (it1=0x885ef98, > it2=0x948efe0, > start=0, end=5, hpos=dw::core::HPOS_INTO_VIEW, > vpos=dw::core::VPOS_CENTER) > at iterator.cc:108 > #7 0x080c621e in dw::core::DeepIterator::scrollTo (it1=0x88e86e8, > it2=0x885efb8, start=0, end=5, hpos=dw::core::HPOS_INTO_VIEW, > vpos=dw::core::VPOS_CENTER) at iterator.hh:229 > #8 0x080c629a in dw::core::CharIterator::scrollTo (it1=0x89c6e60, > it2=0x8872900, hpos=dw::core::HPOS_INTO_VIEW, > vpos=dw::core::VPOS_CENTER) > at iterator.hh:265 > #9 0x080c5bcb in dw::core::FindtextState::search (this=0x8a02a40, > key=0x88dbd70 "dillo", caseSens=false, backwards=false) at > findtext.cc:120 > #10 0x08057cad in dw::core::Layout::search (this=0x8a02970, > str=0x88dbd70 "dillo", caseSens=false, backwards=0) at > ../dw/layout.hh:444 > #11 0x080579e5 in a_UIcmd_findtext_search (bw=0x8ae1940, > key=0x88dbd70 "dillo", case_sens=0, backward=0) at uicmd.cc:1484 > #12 0x0808c7c3 in Findbar::search_cb (vfb=0x8a08808) at findbar.cc:86 > #13 0x081075e1 in Fl_Widget::do_callback (this=0x8882020, o=0x8882020, > arg=0x8a08808) at Fl_Widget.cxx:328 > #14 0x080e305d in do_callback (this=0x8882020) at ../FL/Fl_Widget.H:840 > #15 Fl_Button::handle (this=0x8882020, event=12) at Fl_Button.cxx:164 > #16 0x080503c9 in TipWinButton::handle (this=0x8882020, e=12) at > tipwin.cc:158 > #17 0x08050536 in CustButton::handle (this=0x8882020, e=12) at > tipwin.cc:194 > #18 0x080e4b64 in send (o=o at entry=0x8882020, event=event at entry=12) > at Fl_Group.cxx:98 > #19 0x080e5755 in Fl_Group::handle (this=0x8a08808, event=12) > at Fl_Group.cxx:185 > #20 0x0808cd72 in Findbar::handle (this=0x8a08808, event=12) at > findbar.cc:192 > #21 0x080e4b64 in send (o=o at entry=0x8a08808, event=event at entry=12) > at Fl_Group.cxx:98 > #22 0x080e5755 in Fl_Group::handle (this=0x88e9218, event=12) > at Fl_Group.cxx:185 > #23 0x08052f2f in UI::handle (this=0x88e9218, event=12) at ui.cc:788 > #24 0x080dc5d2 in send (event=event at entry=12, to=to at entry=0x88e9218, > window=<optimized out>) at Fl.cxx:1143 > #25 0x080dd421 in Fl::handle_ (e=12, window=0x8806268) at Fl.cxx:1401 > #26 0x080dd368 in Fl::handle_ (e=8, window=0x8806268) at Fl.cxx:1379 > #27 0x0810bbc0 in fl_handle (thisevent=...) at Fl_x.cxx:2144 > #28 0x0810d89e in do_queued_events () at Fl_x.cxx:210 > #29 0x0810d93f in fl_wait (time_to_wait=0) at Fl_x.cxx:235 > #30 0x080de3d2 in Fl::wait (time_to_wait=<optimized out>, > time_to_wait at entry=<error reading variable: Could not find type for > DW_OP_GNU_const_type>) at Fl.cxx:566 > #31 0x080de46e in Fl::run () at Fl.cxx:589 > #32 0x0804f933 in main (argc=1, argv=0xbff2f214) at dillo.cc:586 > > I see that it's unhappy in > Textblock::TextblockIterator::getAllocation() where index was 34 and > lineIndex = textblock->findLineOfWord (index); results in -1, which > the getRef() doesn't want at all... > > > _______________________________________________ > Dillo-dev mailing list > Dillo-dev at dillo.org > http://lists.dillo.org/cgi-bin/mailman/listinfo/dillo-dev >

Oct. 24, 2014

assert failed when using text search while page still loading

by eocene＠gmx.com

(gdb) bt #0 0xb778a424 in __kernel_vsyscall () #1 0xb70b2661 in *__GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 #2 0xb70b5a92 in *__GI_abort () at abort.c:92 #3 0xb70ab878 in *__GI___assert_fail ( assertion=0x816049e "i >= 0 && this->num - i > 0", file=0x816048e "../lout/misc.hh", line=167, function=0x8160540 "T* lout::misc::SimpleVector<T>::getRef(int) const [with T = dw::Textblock::Line]") at assert.c:81 #4 0x080a73f6 in lout::misc::SimpleVector<dw::Textblock::Line>::getRef ( this=0x905df50, i=-1) at ../lout/misc.hh:167 #5 0x080a8447 in dw::Textblock::TextblockIterator::getAllocation ( this=0x885ef98, start=0, end=5, allocation=0xbff2e818) at textblock_iterator.cc:288 #6 0x080c65f7 in dw::core::Iterator::scrollTo (it1=0x885ef98, it2=0x948efe0, start=0, end=5, hpos=dw::core::HPOS_INTO_VIEW, vpos=dw::core::VPOS_CENTER) at iterator.cc:108 #7 0x080c621e in dw::core::DeepIterator::scrollTo (it1=0x88e86e8, it2=0x885efb8, start=0, end=5, hpos=dw::core::HPOS_INTO_VIEW, vpos=dw::core::VPOS_CENTER) at iterator.hh:229 #8 0x080c629a in dw::core::CharIterator::scrollTo (it1=0x89c6e60, it2=0x8872900, hpos=dw::core::HPOS_INTO_VIEW, vpos=dw::core::VPOS_CENTER) at iterator.hh:265 #9 0x080c5bcb in dw::core::FindtextState::search (this=0x8a02a40, key=0x88dbd70 "dillo", caseSens=false, backwards=false) at findtext.cc:120 #10 0x08057cad in dw::core::Layout::search (this=0x8a02970, str=0x88dbd70 "dillo", caseSens=false, backwards=0) at ../dw/layout.hh:444 #11 0x080579e5 in a_UIcmd_findtext_search (bw=0x8ae1940, key=0x88dbd70 "dillo", case_sens=0, backward=0) at uicmd.cc:1484 #12 0x0808c7c3 in Findbar::search_cb (vfb=0x8a08808) at findbar.cc:86 #13 0x081075e1 in Fl_Widget::do_callback (this=0x8882020, o=0x8882020, arg=0x8a08808) at Fl_Widget.cxx:328 #14 0x080e305d in do_callback (this=0x8882020) at ../FL/Fl_Widget.H:840 #15 Fl_Button::handle (this=0x8882020, event=12) at Fl_Button.cxx:164 #16 0x080503c9 in TipWinButton::handle (this=0x8882020, e=12) at tipwin.cc:158 #17 0x08050536 in CustButton::handle (this=0x8882020, e=12) at tipwin.cc:194 #18 0x080e4b64 in send (o=o at entry=0x8882020, event=event at entry=12) at Fl_Group.cxx:98 #19 0x080e5755 in Fl_Group::handle (this=0x8a08808, event=12) at Fl_Group.cxx:185 #20 0x0808cd72 in Findbar::handle (this=0x8a08808, event=12) at findbar.cc:192 #21 0x080e4b64 in send (o=o at entry=0x8a08808, event=event at entry=12) at Fl_Group.cxx:98 #22 0x080e5755 in Fl_Group::handle (this=0x88e9218, event=12) at Fl_Group.cxx:185 #23 0x08052f2f in UI::handle (this=0x88e9218, event=12) at ui.cc:788 #24 0x080dc5d2 in send (event=event at entry=12, to=to at entry=0x88e9218, window=<optimized out>) at Fl.cxx:1143 #25 0x080dd421 in Fl::handle_ (e=12, window=0x8806268) at Fl.cxx:1401 #26 0x080dd368 in Fl::handle_ (e=8, window=0x8806268) at Fl.cxx:1379 #27 0x0810bbc0 in fl_handle (thisevent=...) at Fl_x.cxx:2144 #28 0x0810d89e in do_queued_events () at Fl_x.cxx:210 #29 0x0810d93f in fl_wait (time_to_wait=0) at Fl_x.cxx:235 #30 0x080de3d2 in Fl::wait (time_to_wait=<optimized out>, time_to_wait at entry=<error reading variable: Could not find type for DW_OP_GNU_const_type>) at Fl.cxx:566 #31 0x080de46e in Fl::run () at Fl.cxx:589 #32 0x0804f933 in main (argc=1, argv=0xbff2f214) at dillo.cc:586 I see that it's unhappy in Textblock::TextblockIterator::getAllocation() where index was 34 and lineIndex = textblock->findLineOfWord (index); results in -1, which the getRef() doesn't want at all...

Oct. 23, 2014

SSL in the browser

by johannes.hofmann＠gmx.de

On Tue, Oct 21, 2014 at 04:42:24PM +0000, eocene wrote: > Jorge wrote: > > Oh, as our mailsearch doesn't work anymore, is there > > and URL to the original thread (Gmane style) or something? > > > > I'd like to remember what the main point of having SSL inside > > the browser were. I'm getting old. ;) > > Looking briefly, I couldn't find relevant discussion. Possibly it > was off list. My recollection is that, at the time, it had to do with > seeing how SSL was becoming more and more central to browsing with > things like 'HTTPS Everywhere' and 'HTTP Strict Transport Security' > coming along and the issue of privacy gaining increasing public > awareness. > > As for this effort now, I started just by wondering what it would > look like if I integrated Benjamin's code and took out the windows > stuff. It was working pretty well very quickly. And now I like how > much more respectful of servers and resources Dillo can be when > HTTPS is integrated with the http_max_conns queuing and > http_persistent_conns. I think Johannes mentioned something about > Dillo and Tor not working together so well with HTTPS in a dpi, > but I don't know the details there. There is a potential loophole if you start dillo in a torified environment and dpid is running outside. Then https connections go via the non-torified https plugin. It's a small detail, but it happened to me. I'm mostly interested in getting SSL support from unmaintained experimental state to properly supported and maintained option. Cheers, Johannes

Oct. 23, 2014

SSL in the browser

by andreas＠kemnade.info

Hi, On Tue, 21 Oct 2014 11:29:06 -0300 Jorge Arellano Cid <jcid at dillo.org> wrote: > Hi corvid, > > On Mon, Oct 20, 2014 at 11:47:35PM +0000, eocene wrote: > > I wrote: > > > http://www.dillo.org/test/ssl_in_browser.diff > > > > Fixed a couple of bugs, added a couple of features, new version up. > > Oh, as our mailsearch doesn't work anymore, is there > and URL to the original thread (Gmane style) or something? > > I'd like to remember what the main point of having SSL inside > the browser were. I'm getting old. ;) > here is a list of subjects which contain https, maybe that helps a bit. 2003-June.txt:Subject: [Dillo-dev] HTTPS support 2003-March.txt:Subject: [Dillo-dev] https approaches? 2003-March.txt:Subject: [Dillo-dev] Re: https approaches? 2003-November.txt:Subject: [Dillo-dev] Re: https dpi 2003-November.txt:Subject: [Dillo-dev] HTTPS Patch 2003-November.txt:Subject: [Dillo-dev] tabs, https, ... 2003-November.txt:Subject: [Dillo-dev] Small bug with combined frames/tabs/https patch and gcc 2.9x 2003-November.txt:Subject: [Dillo-dev] Small bug with combined frames/tabs/https patch 2003-November.txt:Subject: [Dillo-dev] [PATCH] HTTPS version 2. 2003-October.txt:Subject: [Dillo-dev] HTTPS patch 2003-October.txt:Subject: [Dillo-dev] HTTPS Patch 2004-February.txt:Subject: [Dillo-dev] Re: https dpi 2004-January.txt:Subject: [Dillo-dev] Re: https dpi 2004-July.txt:Subject: [Dillo-dev]https 2004-July.txt:Subject: [Dillo-dev]HTTPS 2004-July.txt:Subject: [Dillo-dev]Re: HTTPS 2004-July.txt:Subject: [Dillo-dev]dpip dialog for https (and dpis in general) 2004-July.txt:Subject: [Dillo-dev]https patch 2004-July.txt:Subject: [Dillo-dev]dpip dialog for https (and dpis in general) 2004-July.txt:Subject: [Dillo-dev]More https goodness 2004-July.txt:Subject: [Dillo-dev]Replying to lists (was: dpip dialog for https (and dpis in general)) 2004-July.txt:Subject: [Dillo-dev]More https goodness 2004-July.txt:Subject: [Dillo-dev]HTTPS certificate support 2004-July.txt:Subject: [Dillo-dev]HTTPS Cleanup 2004-June.txt:Subject: [Dillo-dev]https (eg for posting to ps2 bulletin boards) 2004-March.txt:Subject: [Dillo-dev]Re: https hungs dillo up... 2004-May.txt:Subject: [Dillo-dev]https (eg for posting to ps2 bulletin boards) 2004-November.txt:Subject: [Dillo-dev]https by lynx -source 2004-September.txt:Subject: [Dillo-dev]https 2005-February.txt:Subject: [Dillo-dev]testing https plugin gave problems 2005-January.txt:Subject: [Dillo-dev]https, ssl & certificates 2005-July.txt:Subject: [Dillo-dev]cookies dpi over https and dpi framework 2005-June.txt:Subject: [Dillo-dev]cookies dpi over https and dpi framework 2007-October.txt:Subject: [Dillo-dev] https and OpenBSD 2008-April.txt:Subject: [Dillo-dev] [PATCH]: Fixing https step 1: Have a basic dpi dialog 2008-April.txt:Subject: [Dillo-dev] [PATCH]: Fixing https step 1: Have a basic dpi 2008-April.txt:Subject: [Dillo-dev] [PATCH]: Fixing https step 1: Have a basic dpi dialog 2008-April.txt:Subject: [Dillo-dev] [PATCH]: Fixing https step 1: Have a basic dpi 2008-March.txt:Subject: [Dillo-dev] https plugin status 2008-March.txt:Subject: [Dillo-dev] [PATCH]: send the https dpi plugin debug messages to the 2008-March.txt:Subject: [Dillo-dev] https plugin status 2008-March.txt:Subject: [Dillo-dev] [PATCH]: Fixing https step 1: Have a basic dpi dialog 2008-March.txt:Subject: [Dillo-dev] [PATCH]: Fixing https step 1: Have a basic dpi 2008-March.txt:Subject: [Dillo-dev] [PATCH]: Fixing https step 1: Have a basic dpi dialog 2008-March.txt:Subject: [Dillo-dev] https plugin status 2008-March.txt:Subject: [Dillo-dev] [PATCH]: Fixing https step 1: Have a basic dpi 2008-March.txt:Subject: [Dillo-dev] https plugin status 2008-March.txt:Subject: [Dillo-dev] [PATCH]: Fixing https step 1: Have a basic dpi dialog 2008-March.txt:Subject: [Dillo-dev] https plugin status 2008-November.txt:Subject: [PATCH] Update the GPL version in the OpenSSL exception clause in dpi/https.c 2008-November.txt:Subject: [Dillo-dev] A warning about HTTPS and proxies 2008-October.txt:Subject: [PATCH] https: Improve the plugin warnings when SSL is disabled. 2008-October.txt:Subject: [Dillo-dev] https error handling 2008-October.txt:Subject: [PATCH] Update the GPL version in the OpenSSL exception clause in dpi/https.c 2009-July.txt:Subject: [Dillo-dev] [patch] check for dpip_tag == NULL in https.c 2009-June.txt:Subject: patch: Re: [Dillo-dev] https through a proxy 2009-May.txt:Subject: [Dillo-dev] https through a proxy 2009-May.txt:Subject: patch: Re: [Dillo-dev] https through a proxy 2010-January.txt:Subject: [Dillo-dev] experimental patch: gnutls for the https dpi 2010-October.txt:Subject: [Dillo-dev] Https remote certificate cannot be verified 2011-December.txt:Subject: [Dillo-dev] IPv6 and HTTPS (Re: release candidate for dillo-3.0.2) 2011-December.txt:Subject: [Dillo-dev] IPv6 and HTTPS (Re: release candidate for 2012-October.txt:Subject: [Dillo-dev] https unpleasantness 2013-February.txt:Subject: [Dillo-dev] https related crash 2013-March.txt:Subject: [Dillo-dev] https related crash Greetings Andreas Kemnade

Oct. 21, 2014