Welcome, Guest. Please login or register.

Author Topic: Help with Miamissl  (Read 4913 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline AndyFCTopic starter

Help with Miamissl
« on: January 05, 2019, 05:41:25 PM »
I've had a chance to use my A1200 today, fixing a network issue which I traced to a faulty ethernet cable. I now want to overcome SSL limitations/warnings in ibrowse and have tried amissl but I still get warnings and suspect its because I'm using MiamiDX.

I've downloaded Miamissl now but can't install it because of the encryption library. I've found and downloaded the non US version (I live in the UK) but don't know how to install it. The Miami ssl instructions say to refer to the readme which comes with the encryption library but the one I found doesn't come with this file.  Can someone help direct me how to install it please?
« Last Edit: January 05, 2019, 05:47:24 PM by AndyFC »
A1200 in DIY Tower. 3.2 ROMs (softkicking 3.2.2), OS 3.2.2 with ClassicWB, CF card, CD RW and IDE to SD adapter running off the internal IDE port (using the A4000 4-port IDE adapter from Amigakit), Pistorm 32 lite with Pi4/2GB/Emu68 or Blizzard 1230-IV, with 32MB 60ns RAM and 50MHz 68882 FPU. 3COM PCMCIA Network card running with Miami DX.
MorphOS on PowerMac G5 and ATI 9600 pro
 

Offline giZmo350

  • Lifetime Member
  • Hero Member
  • *****
  • Join Date: Apr 2005
  • Posts: 2055
  • Country: 00
  • Thanked: 29 times
  • Gulfport, Miss
    • Show only replies by giZmo350
Re: Help with Miamissl
« Reply #1 on: January 05, 2019, 05:55:29 PM »
Remember that there's settings for SSL in IBrowse. Preferences->Settings...->Security
If you use MiamiSSL select the "Use MiamiSSL" and if you use AmiSSL, unselect it and select SSLv2 and SSLv3 support. Did you try that? Might help.  ;)
A500: 2MB Chip, 8MB Fast, IndiECS, MiniMegi, IDE4ZorroII on Z-500, KS1.3/KS3.1, WB3.1&BWB
 
A2000HD: 2MB Chip, 128MB Fast, P5:Blizz 2060@50MHz, PCD-50B/4GBCF, XSurf100, RapidRoad, IndiECS, Matze RTG, MiniMegi, CD-RW, SunRize AD516, WB3.9
 
A1200: 2MB Chip, 64MB Fast, 4GBCF, GVP Typhoon 030 @40MHz w/FPU, Subway USB, EasyNet Ethernet, Indi AGA MKI, FastATA MK-IV, Internal Slim CD/DVD-RW, WB3.5

Surfing The Web With AMIGA Is Fun Again!
 

Offline AndyFCTopic starter

Re: Help with Miamissl
« Reply #2 on: January 05, 2019, 06:39:38 PM »
I didn't kniw about that setting so will try tomorrow. Thank you.
A1200 in DIY Tower. 3.2 ROMs (softkicking 3.2.2), OS 3.2.2 with ClassicWB, CF card, CD RW and IDE to SD adapter running off the internal IDE port (using the A4000 4-port IDE adapter from Amigakit), Pistorm 32 lite with Pi4/2GB/Emu68 or Blizzard 1230-IV, with 32MB 60ns RAM and 50MHz 68882 FPU. 3COM PCMCIA Network card running with Miami DX.
MorphOS on PowerMac G5 and ATI 9600 pro
 

Offline D00kie

  • Jr. Member
  • **
  • Join Date: Apr 2003
  • Posts: 68
    • Show only replies by D00kie
    • http://www.tigger1.demon.co.uk
Re: Help with Miamissl
« Reply #3 on: January 05, 2019, 08:50:14 PM »
Hi Andy,

Owing to Internet security issues last year (Heartbleed, etc), most web servers only allow TLS 1.2 connections. It's a newer negotiation and encryption protocol than SSL 2 or 3. I do not believe any Amiga TCP stack supports it.

My workaround is to use the NetSurf browser because it implements its' own security. It's definitely not as quick or stable as IBrowse or AWeb, and it's pretty resource-hungry. Sites look and work much better with it because of the CSS support.
Haiku is a joke
What a waste of freaking time
I have eggs to suck
 

Offline kolla

Re: Help with Miamissl
« Reply #4 on: January 07, 2019, 02:19:18 AM »
Supporting ssl/tls is not a tcp stack issue anyways (unless you want to talk ipsec and dnssec), and there is AmiSSL 4 that solves the issues. The problem is that all client software must be rewritten to support AmiSSL 4, and that has yet to happen.
B5D6A1D019D5D45BCC56F4782AC220D8B3E2A6CC
---
A3000/060CSPPC+CVPPC/128MB + 256MB BigRAM/Deneb USB
A4000/CS060/Mediator4000Di/Voodoo5/128MB
A1200/Blz1260/IndyAGA/192MB
A1200/Blz1260/64MB
A1200/Blz1230III/32MB
A1200/ACA1221
A600/V600v2/Subway USB
A600/Apollo630/32MB
A600/A6095
CD32/SX32/32MB/Plipbox
CD32/TF328
A500/V500v2
A500/MTec520
CDTV
MiSTer, MiST, FleaFPGAs and original Minimig
Peg1, SAM440 and Mac minis with MorphOS
 

Offline AndyFCTopic starter

Re: Help with Miamissl
« Reply #5 on: January 07, 2019, 10:19:21 PM »
@giZmo350 I  checked Ibrowse and the settings are as you describe for AmiSSL.
@D00kie I'll try netsurf again but performance was quite poor on my system last time.

Thanks for the advice.
« Last Edit: January 07, 2019, 10:21:58 PM by AndyFC »
A1200 in DIY Tower. 3.2 ROMs (softkicking 3.2.2), OS 3.2.2 with ClassicWB, CF card, CD RW and IDE to SD adapter running off the internal IDE port (using the A4000 4-port IDE adapter from Amigakit), Pistorm 32 lite with Pi4/2GB/Emu68 or Blizzard 1230-IV, with 32MB 60ns RAM and 50MHz 68882 FPU. 3COM PCMCIA Network card running with Miami DX.
MorphOS on PowerMac G5 and ATI 9600 pro
 

Offline Thomas

Re: Help with Miamissl
« Reply #6 on: January 08, 2019, 10:20:24 AM »

In order to get TLS support with AmiSSL 3 and IBrowse you need to follow this advice: https://www.ibrowse-dev.net/news.php?id=1455900472


Offline giZmo350

  • Lifetime Member
  • Hero Member
  • *****
  • Join Date: Apr 2005
  • Posts: 2055
  • Country: 00
  • Thanked: 29 times
  • Gulfport, Miss
    • Show only replies by giZmo350
Re: Help with Miamissl
« Reply #7 on: January 08, 2019, 10:52:14 AM »

In order to get TLS support with AmiSSL 3 and IBrowse you need to follow this advice: https://www.ibrowse-dev.net/news.php?id=1455900472

That's true. However, this post is a bit confusing. AndyFC, did you get MiamiSSL installed or are you attempting to use AmiSSL now. If using AmiSSL yes, follow Thomas' advice. Also, some advice here using AmiSSL.

http://eab.abime.net/showthread.php?t=94577
A500: 2MB Chip, 8MB Fast, IndiECS, MiniMegi, IDE4ZorroII on Z-500, KS1.3/KS3.1, WB3.1&BWB
 
A2000HD: 2MB Chip, 128MB Fast, P5:Blizz 2060@50MHz, PCD-50B/4GBCF, XSurf100, RapidRoad, IndiECS, Matze RTG, MiniMegi, CD-RW, SunRize AD516, WB3.9
 
A1200: 2MB Chip, 64MB Fast, 4GBCF, GVP Typhoon 030 @40MHz w/FPU, Subway USB, EasyNet Ethernet, Indi AGA MKI, FastATA MK-IV, Internal Slim CD/DVD-RW, WB3.5

Surfing The Web With AMIGA Is Fun Again!
 

Offline AndyFCTopic starter

Re: Help with Miamissl
« Reply #8 on: January 08, 2019, 12:25:09 PM »
To help, here's the order of events:
I didn't have any SSL installed until recently and, using IBrowse, I was getting errors when accessing websites which need to run in https.
I installed Amissl 3.6 and then upgraded to the latest package for version 4 off Aminet but still get errors in browsers (mainly tried Ibrowse but also Aweb)
I've then tried MiamiSSL but can't get the encryption key installed/recognised which was the trigger for this thread.

I probably won't get a chance to try again until the weekend so will update you when I've tried the new advice. Overall this is a hobby machine which I want to play with and get working as well as possible, I just like to see what my 25-year old machine can do; it's not stopping me from doing anything critical.
A1200 in DIY Tower. 3.2 ROMs (softkicking 3.2.2), OS 3.2.2 with ClassicWB, CF card, CD RW and IDE to SD adapter running off the internal IDE port (using the A4000 4-port IDE adapter from Amigakit), Pistorm 32 lite with Pi4/2GB/Emu68 or Blizzard 1230-IV, with 32MB 60ns RAM and 50MHz 68882 FPU. 3COM PCMCIA Network card running with Miami DX.
MorphOS on PowerMac G5 and ATI 9600 pro
 

Offline giZmo350

  • Lifetime Member
  • Hero Member
  • *****
  • Join Date: Apr 2005
  • Posts: 2055
  • Country: 00
  • Thanked: 29 times
  • Gulfport, Miss
    • Show only replies by giZmo350
Re: Help with Miamissl
« Reply #9 on: January 08, 2019, 01:27:12 PM »
Hi again Andy, Since you installed AmiSSL 3.6 first (required), may I assume that you have seen this thread over at EAB?

http://eab.abime.net/showthread.php?t=85894

If not, read thru the whole thread. Follow page 3 closely. It should help with installing AmiSSL V4.2.

Also, release notes here...  http://aminet.net/package/util/libs/AmiSSL-4.2

Remember that iBrowse V2.4 will utilize AmiSSL v4.2 but can't take full advantage of the modernized OpenSSL 1.1.x until iBrowse has been recompiled for it - Ibrowse 2.5.

Not sure, but you may want to ensure that all traces of MiamiSSL are deleted. Maybe even delete all SSL versions and start over. Yeeeeee! We love Amiga!  ;)

A500: 2MB Chip, 8MB Fast, IndiECS, MiniMegi, IDE4ZorroII on Z-500, KS1.3/KS3.1, WB3.1&BWB
 
A2000HD: 2MB Chip, 128MB Fast, P5:Blizz 2060@50MHz, PCD-50B/4GBCF, XSurf100, RapidRoad, IndiECS, Matze RTG, MiniMegi, CD-RW, SunRize AD516, WB3.9
 
A1200: 2MB Chip, 64MB Fast, 4GBCF, GVP Typhoon 030 @40MHz w/FPU, Subway USB, EasyNet Ethernet, Indi AGA MKI, FastATA MK-IV, Internal Slim CD/DVD-RW, WB3.5

Surfing The Web With AMIGA Is Fun Again!
 

Offline kolla

Re: Help with Miamissl
« Reply #10 on: January 09, 2019, 08:27:33 AM »
The whole exercise is borderline pointless though, as tls 1.0 and even 1.1 are highly deprecated and number of websites supporting them are dropping fast. Even with everything set up with IBrowse and AmiSSL, expect to see error messages and not being able to access websites. The only solution is that software (IBrowse etc) are updated.
B5D6A1D019D5D45BCC56F4782AC220D8B3E2A6CC
---
A3000/060CSPPC+CVPPC/128MB + 256MB BigRAM/Deneb USB
A4000/CS060/Mediator4000Di/Voodoo5/128MB
A1200/Blz1260/IndyAGA/192MB
A1200/Blz1260/64MB
A1200/Blz1230III/32MB
A1200/ACA1221
A600/V600v2/Subway USB
A600/Apollo630/32MB
A600/A6095
CD32/SX32/32MB/Plipbox
CD32/TF328
A500/V500v2
A500/MTec520
CDTV
MiSTer, MiST, FleaFPGAs and original Minimig
Peg1, SAM440 and Mac minis with MorphOS
 

Offline First Ninja

Re: Help with Miamissl
« Reply #11 on: January 09, 2019, 09:10:00 AM »
[...] until iBrowse has been recompiled for it - Ibrowse 2.5.

Speaking of which - how is the Ibrowse development doing? Are there any clues as to when 2.5 be publicly available?
Karate, Jerry. Karate. It's the lifetime pursuit of balance and harmony.
 

Offline AndyFCTopic starter

Re: Help with Miamissl
« Reply #12 on: January 12, 2019, 01:39:37 PM »
Adding the env variable worked without having to uninstall anything. Thanks for your help all.
A1200 in DIY Tower. 3.2 ROMs (softkicking 3.2.2), OS 3.2.2 with ClassicWB, CF card, CD RW and IDE to SD adapter running off the internal IDE port (using the A4000 4-port IDE adapter from Amigakit), Pistorm 32 lite with Pi4/2GB/Emu68 or Blizzard 1230-IV, with 32MB 60ns RAM and 50MHz 68882 FPU. 3COM PCMCIA Network card running with Miami DX.
MorphOS on PowerMac G5 and ATI 9600 pro