Welcome, Guest. Please login or register.
Amiga Kit Amiga Store Hollywood MAL AMIStore App Store A600 Memory

AuthorTopic: NetSurf OS3 official development builds  (Read 4424 times)

0 Members and 1 Guest are viewing this topic.

Offline chris

Re: NetSurf OS3 official development builds
« Reply #15 on: April 07, 2018, 08:50:01 PM »
Quote from: utri007;838306
Both amiga.org and Amigaworld.net? Hard to believe?


Common owner.... but I've never seen them redirect to https on any browser, including NetSurf.  Maybe deleting your cache will fix it?
"Miracles we do at once, the impossible takes a little longer" - AJS on Hyperion
Avatar picture is Tabitha by Eric W Schwartz
 

Offline utri007

Re: NetSurf OS3 official development builds
« Reply #16 on: April 07, 2018, 09:22:38 PM »
Quote from: chris;838315
Common owner.... but I've never seen them redirect to https on any browser, including NetSurf.  Maybe deleting your cache will fix it?


Cache deleted. Amiga.org was OK, but amigaworld.net asked accept morph.zone certificate??

After that going baack to amiga.org was impossible, though I only waited about 2 minits.
ACube Sam 440ep Flex 800mhz, 1gb ram and 240gb hd and OS4.1FE
A1200 Micronic tower, OS3.9, Apollo 060 66mhz, xPert Merlin, Delfina Lite and Micronic Scandy, 500Gb hd, 66mb ram, DVD-burner and WLAN.
A1200 desktop, OS3.9, Blizzard 060 66mhz, 66mb ram, Ide Fix Express with 160Gb HD and WLAN
A500 OS2.1, GVP+HD8 with 4mb ram, 1mb chip ram and 4gb HD
Commodore CDTV KS3.1, 1mb chip, 4mb fast ram and IDE HD
 

Offline utri007

Re: NetSurf OS3 official development builds
« Reply #17 on: April 07, 2018, 10:00:05 PM »
Tested it again, amiga.org OK -> aminet.net OK -> amigaworld.net certifigate error morph.zone - > amigans.net certifiaget error paypal.com??

Maybe ssl should be disabled until it works again? Other hand, nobody use 68k netsurf for any serious stuf, so maybe ssl is just not needed?
ACube Sam 440ep Flex 800mhz, 1gb ram and 240gb hd and OS4.1FE
A1200 Micronic tower, OS3.9, Apollo 060 66mhz, xPert Merlin, Delfina Lite and Micronic Scandy, 500Gb hd, 66mb ram, DVD-burner and WLAN.
A1200 desktop, OS3.9, Blizzard 060 66mhz, 66mb ram, Ide Fix Express with 160Gb HD and WLAN
A500 OS2.1, GVP+HD8 with 4mb ram, 1mb chip ram and 4gb HD
Commodore CDTV KS3.1, 1mb chip, 4mb fast ram and IDE HD
 

Offline chris

Re: NetSurf OS3 official development builds
« Reply #18 on: April 09, 2018, 06:42:37 AM »
Quote from: utri007;838318
Tested it again, amiga.org OK -> aminet.net OK -> amigaworld.net certifigate error morph.zone - > amigans.net certifiaget error paypal.com??


Ok, the certificate errors are likely because OpenSSL doesn't work properly.

Quote
Maybe ssl should be disabled until it works again? Other hand, nobody use 68k netsurf for any serious stuf, so maybe ssl is just not needed?


Given it's beta, it can stay broken until somebody* fixes it.

* Most probably me, given that nobody else appears to have the slightest interest in looking at it.
"Miracles we do at once, the impossible takes a little longer" - AJS on Hyperion
Avatar picture is Tabitha by Eric W Schwartz
 

Offline kolla

Re: NetSurf OS3 official development builds
« Reply #19 on: April 09, 2018, 09:57:41 AM »
For what it is worth...
* the certificate used on amigaworld.net expired 1582 days ago
* the certificate used on amiga.org it is not even issued to amiga.org, nor contain amiga.org as alternate name
* the certificate used on amigans.net is issued to and signed by localhost.localdomain

Any sane browse will explicitly _not work_ with the above domains.

These *three* domains show all signs of being run by amateurs :)

(I'm sure the list will grow)

Please use some real-life, well-maintained and functional domains/sites for testing TLS/SSL.
« Last Edit: April 09, 2018, 10:06:46 AM by kolla »
B5D6A1D019D5D45BCC56F4782AC220D8B3E2A6CC
---
A3000/060CSPPC+CVPPC/128MB + 256MB BigRAM/Deneb USB
A4000/CS060/Mediator4000Di/Voodoo5/128MB
A1200/Blz1260/IndyAGA/192MB
A1200/Blz1260/64MB
A1200/Blz1230III/32MB
A1200/ACA1221
A600/V600v2/Subway USB
A600/Apollo630/32MB
A600/A6095
CD32/SX32/32MB/Plipbox
CD32/TF328
A500/V500v2
A500/MTec520
CDTV
MiSTer, MiST, FleaFPGAs and original Minimig
Peg1, SAM440 and Mac minis with MorphOS
 

Offline eliyahu

Re: NetSurf OS3 official development builds
« Reply #20 on: April 09, 2018, 03:53:59 PM »
@kolla

just as an FYI.... if you see anything around the site that needs fixing -- especially from a security point of view -- please PM @amigakit to let matthew know. thanks!

-- eliyahu
"How do you know I’m mad?" said Alice.
"You must be," said the Cat, "or you wouldn’t have come here."
 

Offline utri007

Re: NetSurf OS3 official development builds
« Reply #21 on: April 09, 2018, 05:43:42 PM »
Quote from: kolla;838363
For what it is worth...
* the certificate used on amigaworld.net expired 1582 days ago
* the certificate used on amiga.org it is not even issued to amiga.org, nor contain amiga.org as alternate name
* the certificate used on amigans.net is issued to and signed by localhost.localdomain

Any sane browse will explicitly _not work_ with the above domains.

These *three* domains show all signs of being run by amateurs :)

(I'm sure the list will grow)

Please use some real-life, well-maintained and functional domains/sites for testing TLS/SSL.


Check pictures, it was asking morph.zone and paypal.com certifikates. I'm prety sure tahat earlier it asked amiga.org and amigaworld.net certifigates. I can't understat how / it decided to ask those paypal / morph certifigates.
ACube Sam 440ep Flex 800mhz, 1gb ram and 240gb hd and OS4.1FE
A1200 Micronic tower, OS3.9, Apollo 060 66mhz, xPert Merlin, Delfina Lite and Micronic Scandy, 500Gb hd, 66mb ram, DVD-burner and WLAN.
A1200 desktop, OS3.9, Blizzard 060 66mhz, 66mb ram, Ide Fix Express with 160Gb HD and WLAN
A500 OS2.1, GVP+HD8 with 4mb ram, 1mb chip ram and 4gb HD
Commodore CDTV KS3.1, 1mb chip, 4mb fast ram and IDE HD
 

Offline kolla

Re: NetSurf OS3 official development builds
« Reply #22 on: April 09, 2018, 09:22:39 PM »
Quote from: utri007;838378
Check pictures, it was asking morph.zone and paypal.com certifikates.


Yes... I am guessing missing CA certificates installed in/for your browser.

Quote

I'm prety sure tahat earlier it asked amiga.org and amigaworld.net certifigates. I can't understat how / it decided to ask those paypal / morph certifigates.


It asks for those because there is content on the amigaworld.net page from those pages - like the https://library.morph.zone/logo.png on the amigaworld.net article regarding MorphOS 3.10 release, and a paypal logo under "Support us!" on the amigans.net page. Nothing magic here.
B5D6A1D019D5D45BCC56F4782AC220D8B3E2A6CC
---
A3000/060CSPPC+CVPPC/128MB + 256MB BigRAM/Deneb USB
A4000/CS060/Mediator4000Di/Voodoo5/128MB
A1200/Blz1260/IndyAGA/192MB
A1200/Blz1260/64MB
A1200/Blz1230III/32MB
A1200/ACA1221
A600/V600v2/Subway USB
A600/Apollo630/32MB
A600/A6095
CD32/SX32/32MB/Plipbox
CD32/TF328
A500/V500v2
A500/MTec520
CDTV
MiSTer, MiST, FleaFPGAs and original Minimig
Peg1, SAM440 and Mac minis with MorphOS
 

Offline kolla

Re: NetSurf OS3 official development builds
« Reply #23 on: April 09, 2018, 09:34:02 PM »
Quote from: eliyahu;838372
@kolla

just as an FYI.... if you see anything around the site that needs fixing -- especially from a security point of view -- please PM @amigakit to let matthew know. thanks!

-- eliyahu

Really? You expect me and others to remember this?

No, I don't go there - the site owners should get the feces together - this stuff is rudimentary and obvious. I have earlier tried to use the "contact us" that is linked to at the bottom of this page, without seeing any response nor action. I have also tried using the addresses specified in whois ("Tech Email: contact@a-eon.com") in futile attempts at reporting issues regarding fubar DNS etc. (http://amigaworld.net/modules/newbb/viewtopic.php?mode=viewtopic&topic_id=452&forum=7&start=380&viewmode=flat&order=0#761384) which led to absolutely nothing - if these obvious contact points don't work, then "amateurs" is a fitting description IMO.
« Last Edit: April 09, 2018, 11:27:32 PM by kolla »
B5D6A1D019D5D45BCC56F4782AC220D8B3E2A6CC
---
A3000/060CSPPC+CVPPC/128MB + 256MB BigRAM/Deneb USB
A4000/CS060/Mediator4000Di/Voodoo5/128MB
A1200/Blz1260/IndyAGA/192MB
A1200/Blz1260/64MB
A1200/Blz1230III/32MB
A1200/ACA1221
A600/V600v2/Subway USB
A600/Apollo630/32MB
A600/A6095
CD32/SX32/32MB/Plipbox
CD32/TF328
A500/V500v2
A500/MTec520
CDTV
MiSTer, MiST, FleaFPGAs and original Minimig
Peg1, SAM440 and Mac minis with MorphOS
 

Offline wawrzon

Re: NetSurf OS3 official development builds
« Reply #24 on: April 10, 2018, 07:23:34 PM »
i think a decent browser behaviour today would be to (decently) warn the user the site was not secure and navigate towards it nevertheless. im using different browers across my systems and all they do moreless the same, as chrome atm, they mention the handicap.
 

Offline wawrzon

Re: NetSurf OS3 official development builds
« Reply #25 on: April 10, 2018, 07:32:00 PM »
Quote from: eliyahu;838372
@kolla

just as an FYI.... if you see anything around the site that needs fixing -- especially from a security point of view -- please PM @amigakit to let matthew know. thanks!

-- eliyahu


lets not delude us. the sites are as good as unmaintained, thats sure. about as much as moobuny once was. and they are probably about as secure. who cares. free world.. and such. lets just not act as if there was any staff to take actions. let alone anyone qualified to do that. even though people here claim to hold positions in it industry.