- Dillo-dev - lists.mailman3.com

Re: [Dillo-dev] Dillo 0.8.5 with gmail

by Francis Daly

On Sat, Jan 14, 2006 at 12:09:10AM -0500, Richard wrote: Hi there, > The gmail website is using Twarte Certificate Authority for https > certificates. I did not configure the https DPI to recognize Twarte (I don't > know if it is even possible). So each time I go to the gmail login page, > dillo pops up the warning dialog box asking the user whether or not to > proceed with an unrecognized certificate. [snip] > There are too many dialog boxes that get poped up and some of them > get dropped and are not shown to the user. That makes sense. The right answer will probably involve keeping a cache of certificates which the user has clicked to trust, and then not popping up the dialog for the same certificate twice. The quick answer for gmail is to avoid the dialog box in the first place, by adding the issuer cert locally. Get the vsign3.pem file from, for example, an openssl distribution (It's small, and text, so I've pasted it below for convenience). Copy it to .dillo/certs (or /etc/ssl/certs, or wherever your ssl libraries look ("grep cert" in the output of "strace -f dillo" when accessing https may help)) under a convenient name, and then symlink a suitable hash name to it "openssl x509 -noout -hash -in vsign3.pem" gives me 7651b327, so I "ln -s vsign3.pem 7651b327.0" That should allow you to verify the www.google.com certificate, and also the mail.google.com one. It will still give one dialog, because the www.googleadservices.com certificate was issued by another company -- but that can be clicked away easily enough :-) With cookies suitably set, I can authenticate and read mail handily enough in the "basic view". There is a separate problem with signing out -- dillo finds a redirect loop which prevents it happening. Presumably setting cookies to "session" and killing the cookies dpi when dillo exits will brute-force through that issue, until a proper fix is decided upon. All the best, f -- Francis Daly francis(a)daoine.org Oh, the Verisign certificate: -----BEGIN CERTIFICATE----- MIICPDCCAaUCEHC65B0Q2Sk0tjjKewPMur8wDQYJKoZIhvcNAQECBQAwXzELMAkG A1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFz cyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTk2 MDEyOTAwMDAwMFoXDTI4MDgwMTIzNTk1OVowXzELMAkGA1UEBhMCVVMxFzAVBgNV BAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAzIFB1YmxpYyBQcmlt YXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDJXFme8huKARS0EN8EQNvjV69qRUCPhAwL0TPZ2RHP7gJYHyX3KqhE BarsAx94f56TuZoAqiN91qyFomNFx3InzPRMxnVx0jnvT0Lwdd8KkMaOIG+YD/is I19wKTakyYbnsZogy1Olhec9vn2a/iRFM9x2Fe0PonFkTGUugWhFpwIDAQABMA0G CSqGSIb3DQEBAgUAA4GBALtMEivPLCYATxQT3ab7/AoRhIzzKBxnki98tsX63/Do lbwdj2wsqFHMc9ikwFPwTtYmwHYBV4GSXiHx0bH/59AhWM1pF+NEHJwZRDmJXNyc AA9WjQKZ7aKQRUzkuxCkPfAyAw7xzvjoyVGM5mKf5p/AfbdynMk2OmufTqj/ZA1k -----END CERTIFICATE-----

Jan. 15, 2006

Re: Current color control??

by Beartooth

On Fri, 13 Jan 2006 13:37:31 -0300, Jorge Arellano Cid wrote: > On Fri, Jan 13, 2006 at 10:53:59AM -0500, Beartooth wrote: [....] >> I have Dillo set as my default browser (under Fedora Core 4); every once >> in a while I get some site that's unreadable, because the text and >> background are too near the same color. .... > > This is usually a problem when CSS is used and _also_ old style > color directives in a messed way. One way to solve this is to set > force_my_colors=YES in dillorc; but every page will render in the same > colors. A better approach is to set a: > > "Force my Colors {on/off}" > > menuitem in the bug-meter menu for instance. This is easy to > develop. All right, I read http://www.dillo.org/dillo-help.html and http://www.dillo.org/help/bug_meter.html -- but developing stuff is way beyond my linux skills. I can just about recognize a line of code (or at least guess with better than 50% odds that it is one) IFF it bites me on the nose or the big toe; I couldn't write so much as a bash script if my life depended on it. Otoh, yes, it sure would be a nice feature if one who could, did -- and made sure to mention it on this list ... Pretty please, somebody? -- Beartooth Stickster, Neo-Redneck Linux Enthusiast A wanderstaff like an Elvish rope should be long, and strong, and light -- and very smooth.

Jan. 14, 2006

Re: [Dillo-dev] Dillo 0.8.5 with gmail

by robert w hall

There's also a problem with the caching when in https IIRC. You have to keep manually refreshing or drop out of SSL as soon as you can. (These tricks used to be enough to get into the playstation2-linux.com site - though I do hear reports that even these aren't now sufficient!) Bob at said, In message <a146ff9b0601132109kc0988ffid53078a4d594673e(a)mail.gm ail.com>, Richard <judicator3(a)gmail.com> writes > Hi again, > > So I think I have found the reason why dillo cannot log into gmail > and the problem is general enough to affect other websites. > -- robert w hall

Jan. 14, 2006

Re: [Dillo-dev] Dillo 0.8.5 with gmail

by Richard

Hi again, So I think I have found the reason why dillo cannot log into gmail and the problem is general enough to affect other websites. The gmail website is using Twarte Certificate Authority for https certificates. I did not configure the https DPI to recognize Twarte (I don't know if it is even possible). So each time I go to the gmail login page, dillo pops up the warning dialog box asking the user whether or not to proceed with an unrecognized certificate. For each image and element that are downloaded with https from the gmail login page, a new https DPI process gets forked and causes the warning dialog box to pop up again. There are too many dialog boxes that get poped up and some of them get dropped and are not shown to the user. As a result there are several https DPI processes hanging around still waiting for an answer from the user. One of those https DPI processes is the one that is sending the HTTP POST request to login to gmail. Best Regards Richard Ta-Min On 1/13/06, Richard <judicator3(a)gmail.com> wrote: > > Hello > > Thanks for the quick response. > > Most probably. Disable javascript in Firefox and try to log in. > > That's a good starting point. > > > Yes I tried that with firefox and JS disabled. Gmail is smart enough to > send you a version of the HTML page that does not require JS and you can log > in. So JS is probably not the issue why I cannot login with dillo. I had > some more time yesterday to look into the problem. It seems for whatever > reason, dillo is not sending the form's POST HTTP request when I click on > the "Sign In" button of the login form. I'll look into the problem. If it is > truly a bug I'll let you guys know. > > Good. Is JS your expertise area? > > > Not exactly. I am working of some other project right now, but later I may > have the necessary time to devote in learning. I'll keep the JS issue in the > back of my mind. > > Best regards > Richard Ta-Min > >

Jan. 14, 2006

Re: [Dillo-dev] Dillo 0.8.5 with gmail

by Richard

Hello Thanks for the quick response. Most probably. Disable javascript in Firefox and try to log in. > That's a good starting point. Yes I tried that with firefox and JS disabled. Gmail is smart enough to send you a version of the HTML page that does not require JS and you can log in. So JS is probably not the issue why I cannot login with dillo. I had some more time yesterday to look into the problem. It seems for whatever reason, dillo is not sending the form's POST HTTP request when I click on the "Sign In" button of the login form. I'll look into the problem. If it is truly a bug I'll let you guys know. Good. Is JS your expertise area? Not exactly. I am working of some other project right now, but later I may have the necessary time to devote in learning. I'll keep the JS issue in the back of my mind. Best regards Richard Ta-Min

Jan. 13, 2006

Re: [Dillo-dev] Current color control??

by Jorge Arellano Cid

Hi, On Fri, Jan 13, 2006 at 10:53:59AM -0500, Beartooth wrote: > I had my newsreader search 'color', but all I found was an exchange from > 2003, and I doubt that's current. > > I have Dillo set as my default browser (under Fedora Core 4); every once > in a while I get some site that's unreadable, because the text and > background are too near the same color. My next move is to try the same > URL in another browser; and that usually solves it. > > Can I make Dillo do whatever it is that the others do to remedy this, or > not do whatever it does if it's creating it? This is usually a problem when CSS is used and _also_ old style color directives in a messed way. One way to solve this is to set force_my_colors=YES in dillorc; but every page will render in the same colors. A better approach is to set a: "Force my Colors {on/off}" menuitem in the bug-meter menu for instance. This is easy to develop. -- Cheers Jorge.-

Jan. 13, 2006

[jcid@dillo.org: Re: [Dillo-dev] Dillo 0.8.5 with gmail]

by Jorge Arellano Cid

-- Cheers Jorge.-

Jan. 13, 2006

Re: [Dillo-dev] Dillo 0.8.5 with gmail

by Globe Trotter

Hi, I don't believe that dillo supports javascript and ever will. The author seems to believe that a browser should be as stripped down and non-functional as possible or as bloated as possible (such as mozilla or firefox), with nothing in between. I would like that something in between. I think a lot of us on this mailing list (me at least) would be very appreciative if you could make support for it. You may consider teaming up with http://teki.jpn.ph/pc/software/index-e.shtml which provides unofficial versions of dillo with additions. Be forewarned that dillo is going to change to fltk so you may want to wait for that to happen first. There is no point in wasting time and creating something that will go away. Apparently, two copies with fltk exist, but have never been released. They are supposed to be released in the next version. Many thanks and best wishes! > > --- Richard <judicator3(a)gmail.com> wrote: > > > Hello, > > > > I have compiled and installed Dillo 0.8.5 and enabled the https DPI. I am > > trying to use Dillo to log in to gmail. I have made sure that cookies are > > enabled for .gmail.com. I am able to get the gmail login page which is > > served through https but I cannot log in to my account. > > > > After clicking on the "Sign In" button and accepting all the certificate > > warnings messages, I am not redirected to my mailbox and I am stuck on the > > gmail login page. Does dillo support javascript ? and is that the reason > why > > I cannot login to gmail ? If javascript is the stopper that prevents dillo > > from being used on gmail, hotmail or yahoo etc... then I am willing to > > devote some time to get something like SpiderMonkey or some other JS engine > > to work with Dillo. > > > > I was running dillo from the command line and below is the output I got > from > > the console. Notice that dillo seems to die in the https.filter.dpi. I have > > looked at the mailing archives and I think I saw other people being able to > > at least login to gmail. So I am not sure what is going on in my case. Is > > there a later unstable version of Dillo I should use in order to login to > > gmail ? > > ============================================================== > > Dpi_parse_token: [<dpi cmd='dialog' msg='The remote certificate cannot be > > verified20' alt1='Continue' alt2='Cancel'>] > > a_Dpiapi_dialog: > > dpip_tag: <dpi cmd='dialog' msg='The remote certificate cannot be > > verified20' alt1='Continue' alt2='Cancel'> > > Dpi_parse_token: [<dpi cmd='start_send_page' url=' > > https://mail.google.com/mail/images/corner_tl.gif'>] > > { exiting https.dpi} > > Dpi: [Dpi_process_io] IOClose > > Nav_open_url: Url=>https://www.google.com/accounts/ServiceLoginAuth< > > main.c:154: get_command: dpid tag is NULL > > : main.c:328: main: get_command failed > > : {In https.filter.dpi} > > Dpi_parse_token: [<dpi cmd='dialog' msg='The remote certificate cannot be > > verified20' alt1='Continue' alt2='Cancel'>] > > a_Dpiapi_dialog: > > dpip_tag: <dpi cmd='dialog' msg='The remote certificate cannot be > > verified20' alt1='Continue' alt2='Cancel'> > > { exiting https.dpi} > > Dpi_parse_token: [<dpi cmd='start_send_page' url=' > > https://mail.google.com/mail/images/corner_tr.gif'>] > > Dpi: [Dpi_process_io] IOClose > > ============================================================== > > > > Thanks > > Best regards > > Richard Ta-Min > > > _______________________________________________ > > Dillo-dev mailing list > > Dillo-dev(a)dillo.org > > http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev > > > > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

Jan. 13, 2006

Current color control??

by Beartooth

I had my newsreader search 'color', but all I found was an exchange from 2003, and I doubt that's current. I have Dillo set as my default browser (under Fedora Core 4); every once in a while I get some site that's unreadable, because the text and background are too near the same color. My next move is to try the same URL in another browser; and that usually solves it. Can I make Dillo do whatever it is that the others do to remedy this, or not do whatever it does if it's creating it? -- Beartooth Stickster, Neo-Redneck Linux Enthusiast A wanderstaff like an Elvish rope should be long, and strong, and light -- and very smooth.

Jan. 13, 2006

Dillo 0.8.5 with gmail

by Richard

Hello, I have compiled and installed Dillo 0.8.5 and enabled the https DPI. I am trying to use Dillo to log in to gmail. I have made sure that cookies are enabled for .gmail.com. I am able to get the gmail login page which is served through https but I cannot log in to my account. After clicking on the "Sign In" button and accepting all the certificate warnings messages, I am not redirected to my mailbox and I am stuck on the gmail login page. Does dillo support javascript ? and is that the reason why I cannot login to gmail ? If javascript is the stopper that prevents dillo from being used on gmail, hotmail or yahoo etc... then I am willing to devote some time to get something like SpiderMonkey or some other JS engine to work with Dillo. I was running dillo from the command line and below is the output I got from the console. Notice that dillo seems to die in the https.filter.dpi. I have looked at the mailing archives and I think I saw other people being able to at least login to gmail. So I am not sure what is going on in my case. Is there a later unstable version of Dillo I should use in order to login to gmail ? ============================================================== Dpi_parse_token: [<dpi cmd='dialog' msg='The remote certificate cannot be verified20' alt1='Continue' alt2='Cancel'>] a_Dpiapi_dialog: dpip_tag: <dpi cmd='dialog' msg='The remote certificate cannot be verified20' alt1='Continue' alt2='Cancel'> Dpi_parse_token: [<dpi cmd='start_send_page' url=' https://mail.google.com/mail/images/corner_tl.gif'>] { exiting https.dpi} Dpi: [Dpi_process_io] IOClose Nav_open_url: Url=>https://www.google.com/accounts/ServiceLoginAuth< main.c:154: get_command: dpid tag is NULL : main.c:328: main: get_command failed : {In https.filter.dpi} Dpi_parse_token: [<dpi cmd='dialog' msg='The remote certificate cannot be verified20' alt1='Continue' alt2='Cancel'>] a_Dpiapi_dialog: dpip_tag: <dpi cmd='dialog' msg='The remote certificate cannot be verified20' alt1='Continue' alt2='Cancel'> { exiting https.dpi} Dpi_parse_token: [<dpi cmd='start_send_page' url=' https://mail.google.com/mail/images/corner_tr.gif'>] Dpi: [Dpi_process_io] IOClose ============================================================== Thanks Best regards Richard Ta-Min

Jan. 13, 2006