Welcome, Guest. Please login or register.
Amiga Kit Amiga Store Iridium Banner AMIStore App Store A600 Memory

AuthorTopic: Help with Miamissl  (Read 547 times)

0 Members and 1 Guest are viewing this topic.

Offline AndyFC

Help with Miamissl
« on: January 05, 2019, 05:41:25 PM »
I've had a chance to use my A1200 today, fixing a network issue which I traced to a faulty ethernet cable. I now want to overcome SSL limitations/warnings in ibrowse and have tried amissl but I still get warnings and suspect its because I'm using MiamiDX.

I've downloaded Miamissl now but can't install it because of the encryption library. I've found and downloaded the non US version (I live in the UK) but don't know how to install it. The Miami ssl instructions say to refer to the readme which comes with the encryption library but the one I found doesn't come with this file.  Can someone help direct me how to install it please?
« Last Edit: January 05, 2019, 05:47:24 PM by AndyFC »
A1200 in DIY Tower. 3.0 ROMS (but 3.1 in RAM), 3.5" HD and CD Rom running off the internal IDE port (using a cable from Amigakit), Blizzard 1230-IV, with 32MB 60ns RAM and 50MHz 68882 FPU. 3COM PCMCIA Network card running with Miami DX over Powerline adapters. https://www.youtube.com/watch?v=1PrGdL6XjmE
 

Offline giZmo350

Re: Help with Miamissl
« Reply #1 on: January 05, 2019, 05:55:29 PM »
Remember that there's settings for SSL in IBrowse. Preferences->Settings...->Security
If you use MiamiSSL select the "Use MiamiSSL" and if you use AmiSSL, unselect it and select SSLv2 and SSLv3 support. Did you try that? Might help.  ;)
A500 2MB Chip, 10MB Fast, IndiECS, MiniMegi, A590-4GBHDD, ROM Switch w/KS1.3/KS3.1
 
A2000HD 2MB Chip, 128MB Fast, P5:Blizz 2060@50MHz, PCD-50B/4GBCF, XSurf100, RapidRoad, IndiECS, Matze RTG, MiniMegi, CD-RW, SunRize AD516, Toaster2K, Toaster Flyer, WB3.9
 
A1200, 2MB Chip, 64MB Fast, 4GBCF, GVP Typhoon 40MHz, Subway USB, EasyNet WiFi, Indi AGA MKI, FastATA MK-IV, Internal Slim CD/DVD-RW, WB3.5 - It WAS KickAss Fast!
 

Offline AndyFC

Re: Help with Miamissl
« Reply #2 on: January 05, 2019, 06:39:38 PM »
I didn't kniw about that setting so will try tomorrow. Thank you.
A1200 in DIY Tower. 3.0 ROMS (but 3.1 in RAM), 3.5" HD and CD Rom running off the internal IDE port (using a cable from Amigakit), Blizzard 1230-IV, with 32MB 60ns RAM and 50MHz 68882 FPU. 3COM PCMCIA Network card running with Miami DX over Powerline adapters. https://www.youtube.com/watch?v=1PrGdL6XjmE
 

Offline D00kie

Re: Help with Miamissl
« Reply #3 on: January 05, 2019, 08:50:14 PM »
Hi Andy,

Owing to Internet security issues last year (Heartbleed, etc), most web servers only allow TLS 1.2 connections. It's a newer negotiation and encryption protocol than SSL 2 or 3. I do not believe any Amiga TCP stack supports it.

My workaround is to use the NetSurf browser because it implements its' own security. It's definitely not as quick or stable as IBrowse or AWeb, and it's pretty resource-hungry. Sites look and work much better with it because of the CSS support.
Haiku is a joke
What a waste of freaking time
I have eggs to suck
 

Offline kolla

Re: Help with Miamissl
« Reply #4 on: January 07, 2019, 02:19:18 AM »
Supporting ssl/tls is not a tcp stack issue anyways (unless you want to talk ipsec and dnssec), and there is AmiSSL 4 that solves the issues. The problem is that all client software must be rewritten to support AmiSSL 4, and that has yet to happen.
B5D6A1D019D5D45BCC56F4782AC220D8B3E2A6CC
 

Offline AndyFC

Re: Help with Miamissl
« Reply #5 on: January 07, 2019, 10:19:21 PM »
@giZmo350 I  checked Ibrowse and the settings are as you describe for AmiSSL.
@D00kie I'll try netsurf again but performance was quite poor on my system last time.

Thanks for the advice.
« Last Edit: January 07, 2019, 10:21:58 PM by AndyFC »
A1200 in DIY Tower. 3.0 ROMS (but 3.1 in RAM), 3.5" HD and CD Rom running off the internal IDE port (using a cable from Amigakit), Blizzard 1230-IV, with 32MB 60ns RAM and 50MHz 68882 FPU. 3COM PCMCIA Network card running with Miami DX over Powerline adapters. https://www.youtube.com/watch?v=1PrGdL6XjmE
 

Offline Thomas

Re: Help with Miamissl
« Reply #6 on: January 08, 2019, 10:20:24 AM »

In order to get TLS support with AmiSSL 3 and IBrowse you need to follow this advice: https://www.ibrowse-dev.net/news.php?id=1455900472


Offline giZmo350

Re: Help with Miamissl
« Reply #7 on: January 08, 2019, 10:52:14 AM »

In order to get TLS support with AmiSSL 3 and IBrowse you need to follow this advice: https://www.ibrowse-dev.net/news.php?id=1455900472

That's true. However, this post is a bit confusing. AndyFC, did you get MiamiSSL installed or are you attempting to use AmiSSL now. If using AmiSSL yes, follow Thomas' advice. Also, some advice here using AmiSSL.

http://eab.abime.net/showthread.php?t=94577
A500 2MB Chip, 10MB Fast, IndiECS, MiniMegi, A590-4GBHDD, ROM Switch w/KS1.3/KS3.1
 
A2000HD 2MB Chip, 128MB Fast, P5:Blizz 2060@50MHz, PCD-50B/4GBCF, XSurf100, RapidRoad, IndiECS, Matze RTG, MiniMegi, CD-RW, SunRize AD516, Toaster2K, Toaster Flyer, WB3.9
 
A1200, 2MB Chip, 64MB Fast, 4GBCF, GVP Typhoon 40MHz, Subway USB, EasyNet WiFi, Indi AGA MKI, FastATA MK-IV, Internal Slim CD/DVD-RW, WB3.5 - It WAS KickAss Fast!
 

Offline AndyFC

Re: Help with Miamissl
« Reply #8 on: January 08, 2019, 12:25:09 PM »
To help, here's the order of events:
I didn't have any SSL installed until recently and, using IBrowse, I was getting errors when accessing websites which need to run in https.
I installed Amissl 3.6 and then upgraded to the latest package for version 4 off Aminet but still get errors in browsers (mainly tried Ibrowse but also Aweb)
I've then tried MiamiSSL but can't get the encryption key installed/recognised which was the trigger for this thread.

I probably won't get a chance to try again until the weekend so will update you when I've tried the new advice. Overall this is a hobby machine which I want to play with and get working as well as possible, I just like to see what my 25-year old machine can do; it's not stopping me from doing anything critical.
A1200 in DIY Tower. 3.0 ROMS (but 3.1 in RAM), 3.5" HD and CD Rom running off the internal IDE port (using a cable from Amigakit), Blizzard 1230-IV, with 32MB 60ns RAM and 50MHz 68882 FPU. 3COM PCMCIA Network card running with Miami DX over Powerline adapters. https://www.youtube.com/watch?v=1PrGdL6XjmE
 

Offline giZmo350

Re: Help with Miamissl
« Reply #9 on: January 08, 2019, 01:27:12 PM »
Hi again Andy, Since you installed AmiSSL 3.6 first (required), may I assume that you have seen this thread over at EAB?

http://eab.abime.net/showthread.php?t=85894

If not, read thru the whole thread. Follow page 3 closely. It should help with installing AmiSSL V4.2.

Also, release notes here...  http://aminet.net/package/util/libs/AmiSSL-4.2

Remember that iBrowse V2.4 will utilize AmiSSL v4.2 but can't take full advantage of the modernized OpenSSL 1.1.x until iBrowse has been recompiled for it - Ibrowse 2.5.

Not sure, but you may want to ensure that all traces of MiamiSSL are deleted. Maybe even delete all SSL versions and start over. Yeeeeee! We love Amiga!  ;)

A500 2MB Chip, 10MB Fast, IndiECS, MiniMegi, A590-4GBHDD, ROM Switch w/KS1.3/KS3.1
 
A2000HD 2MB Chip, 128MB Fast, P5:Blizz 2060@50MHz, PCD-50B/4GBCF, XSurf100, RapidRoad, IndiECS, Matze RTG, MiniMegi, CD-RW, SunRize AD516, Toaster2K, Toaster Flyer, WB3.9
 
A1200, 2MB Chip, 64MB Fast, 4GBCF, GVP Typhoon 40MHz, Subway USB, EasyNet WiFi, Indi AGA MKI, FastATA MK-IV, Internal Slim CD/DVD-RW, WB3.5 - It WAS KickAss Fast!
 

Offline kolla

Re: Help with Miamissl
« Reply #10 on: January 09, 2019, 08:27:33 AM »
The whole exercise is borderline pointless though, as tls 1.0 and even 1.1 are highly deprecated and number of websites supporting them are dropping fast. Even with everything set up with IBrowse and AmiSSL, expect to see error messages and not being able to access websites. The only solution is that software (IBrowse etc) are updated.
B5D6A1D019D5D45BCC56F4782AC220D8B3E2A6CC
 

Offline First Ninja

Re: Help with Miamissl
« Reply #11 on: January 09, 2019, 09:10:00 AM »
[...] until iBrowse has been recompiled for it - Ibrowse 2.5.

Speaking of which - how is the Ibrowse development doing? Are there any clues as to when 2.5 be publicly available?
 

Offline AndyFC

Re: Help with Miamissl
« Reply #12 on: January 12, 2019, 01:39:37 PM »
Adding the env variable worked without having to uninstall anything. Thanks for your help all.
A1200 in DIY Tower. 3.0 ROMS (but 3.1 in RAM), 3.5" HD and CD Rom running off the internal IDE port (using a cable from Amigakit), Blizzard 1230-IV, with 32MB 60ns RAM and 50MHz 68882 FPU. 3COM PCMCIA Network card running with Miami DX over Powerline adapters. https://www.youtube.com/watch?v=1PrGdL6XjmE