Amiga.org
Amiga News and Community Announcements => Amiga News and Community Announcements => Amiga Software News => Topic started by: eliyahu on February 08, 2017, 03:40:32 AM
-
via the amissl team (https://github.com/jens-maus/amissl/releases/tag/4.0)....
Version 4.0 of the AmiSSL library for Amiga-based operating systems and the first public open-source based release of AmiSSL is now available. Version 4.0 is a new major release which comes with full compatibility to the OpenSSL 1.1.x line which includes important security related fixes and comes with new encryption ciphers which are required nowadays to connect to modern SSL-based services (e.g. HTTPS). However, due to fundamental changes in the API between the old AmiSSLv3 and new v4 versions and the large changes between the old OpenSSL 0.9.x and the new OpenSSL 1.1.x line applications have to be recompiled with the updated AmiSSL SDK to take full advantage of the modernized OpenSSL 1.1.x API. Besides that fundamental change, AmiSSLv4 can be installed on top of a AmiSSLv3 installation while still ensuring that applications compiled for AmiSSLv3 will continue to work properly.
Requirements
AmigaOS 4.0+/PPC or AmigaOS 3.0+/68020+
Changes
- Updated OpenSSL backend to full compatibility to latest OpenSSL 1.1.0d (26 Jan 2017) version.
- Updated root certificate bundle to latest Mozilla-based bundle provided by https://curl.haxx.se/ca/
- Removed whole IsCipherAvailable() API and reenabled IDEA, MDC2 and RC5 ciphers as the protecting patents have expired during 2012 and 2015.
- Enabled all PPC ASM optimizations in OpenSSL.
- Switched build system to exclusively use GCC-based cross compilers for all platforms using proper baserel support for using the amissl shared library in a multi-application environment.
Download here... (https://github.com/jens-maus/amissl/releases/tag/4.0)
-
This is fantastic!
-
As a side note, I can not download the file using Amiga.
-
As a side note, I can not download the file using Amiga.
Up on aminet:
http://aminet.net/package/util/libs/AmiSSL-4.0
-
As a side note, I can not download the file using Amiga.
As another side note: You can! you have to set the correct env-variable to be compatible with TLS1 :D
setenv save amissl/ssl_client_version tls1
and the show can go on... copy the env-variable from env:amissl/ to envarc:amissl/ to be available on each startup ....
-
As another side note: You can! you have to set the correct env-variable to be compatible with TLS1 :D
So, that's why I couldn't get onto many sites with IBrowse. Thanks for that :)
One thing: That that command makes a variable called save. You have to make a directory in ENV: called amissl, and then use the command without save include.
-
This is kinda creepy... I visited the site on Monday or Tuesday. No news posted since release of Ibrowse 2.4.
Then this happens, and I notice
Quote:
However, please not that IBrowse 2.4 will not be able to make use of this, but you should install it over AmiSSL v3 anyway, as applications will start to be released that use it (YAM, for example). IBrowse 2.5 (when released) will require AmiSSL v4, and was been adapted to use it some months ago.
[/B]http://www.ibrowse-dev.net/news.php?id=1486495499
-
One thing: That that command makes a variable called save. You have to make a directory in ENV: called amissl, and then use the command without save include.
YES! You are right! a directory called amissl must be available in env: and also in envarc:
sorry, i forgott! Thanks for clarification :)
-
YES! You are right! a directory called amissl must be available in env: and also in envarc:
sorry, i forgott! Thanks for clarification :)
The IBrowse site has the same error.
For everyone who needs the work around, this is correct (tested for AOS3):
makedir env:amissl
setenv amissl/ssl_client_version tls1
copy env:amissl envarc:amissl
Just make sure that in IBrowse AmiSSL 2 and 3 are enabled.
-
So, that's why I couldn't get onto many sites with IBrowse. Thanks for that :)
Installed this a few months ago, instantly became able to check many sites that previously I had no longer been able to. Gmail, Wikipedia, etc. Surprising how many sites still do work on good 'ole Ibrowse 2.4, once this change is made.
Now to just hold my breath for Ibrowse 2.5, lol. :hammer:
-
Now to just hold my breath for Ibrowse 2.5, lol. :hammer:
I wish it could put words on proper places and have better layout of pages, but I guess that will never become reality with fast browsers like IBrowse or AWeb.
-
The IBrowse site has the same error.
For everyone who needs the work around, this is correct (tested for AOS3):
makedir env:amissl
setenv amissl/ssl_client_version tls1
copy env:amissl envarc:amissl
Just make sure that in IBrowse AmiSSL 2 and 3 are enabled.
To save an environment variable with a pathn element to you just do:
setenv save foo/bar/bash "something"
No needs to create directories, no need to copy files.
eg
10.AmigaOS4:> setenv save foo/bar/bash "something"
10.AmigaOS4:> getenv foo/bar/bash
something
That's on AmigaOS 4 but I'm fairly sure that's standard on OS3 as well.
-
That's on AmigaOS 4 but I'm fairly sure that's standard on OS3 as well.
On AOS3 this doesn't work. Setenv save variable value will make a variable called save, hence the approach I posted. That's why people were having problems with the workaround as posted on the IBrowse site, see here on EAB: http://eab.abime.net/showpost.php?p=1139680&postcount=10
-
Thank you SSL team. this is important!
-
maybe someone can fix the 'speed' option on the aos3 version. It hangs on the (first) line: 'Doing md2 262144 times on 16 size blocks:'
-
On AOS3 this doesn't work.
Of course it works. Just did that 3 days ago. But to be more precise Andy meant "the most recent version of AmigaOS Release 3" which translates to AmigaOS 3.9 (chances 3.5 would work as well are good). If your're still using an even more ancient version of AmigaOS, then it might not work (i.e. 3.1 or 3.0).
-
The "save" was introduced in SetEnv v45.0 I think, rather quirky thing to add as it breaks compatibility and is not at all intuitive.
So, with 3.9 there was C:SetEnv, v45.0, but in addition there is the built-in resident SetEnv in shell. If I recall correctly, the SetEnv in the shell v44+ behaves like C:SetEnv 45.0, but only ThoR knows for sure.
I suppose C:SetEnv was made for those who for whatever reason, cannot update the kickstart with the ROM update, it is suggested to make C:SetEnv resident, by replacing the internal (v40) shell command:
Resident C:SetEnv PURE REPLACE
-
Of course it works.
You're absolutely right. I should've mentioned that I meant 3.0 (and probably 3.1). On 3.0 it really does fail, though.
-
As another side note: You can! you have to set the correct env-variable to be compatible with TLS1 :D
setenv save amissl/ssl_client_version tls1
and the show can go on... copy the env-variable from env:amissl/ to envarc:amissl/ to be available on each startup ....
Yes, and this is the related original news item from the IBrowse devs:
http://www.ibrowse-dev.net/news.php?id=1455900472