iBrowse 2.4, Ami SSL 3.6 and this forum

[beller]

Getting iBrowse up and running again on my 3.1.4 systems.  Installed AmiSSL 3.6 and 4 and I'm using Roadshow for my connection.  All of the Amiga.org forums let me in without a problem but this form hangs with a complaint about the SSL certificates and locks me out....

Any fixes or does someone need to look at the certificate for the forum?

[beller]

What TCP/IP stack are you using?  I'm using RoadShow which looks like it might be the issue.  They is no fix listed...

[beller]

Thanks....I did that fix.   I think it a conflict with Roadshow’w stack and iBrowse.  How much longer until we get 2.5?

[beller]

That may be the issue...I'm using 3.1.4

[beller]

That may be the issue...I'm using 3.1.4

Are you certain that you have the env var set up correctly and IBrowse security configured correctly?

In IBrowse go to the Menu > Preferences > Settings...
Make sure both 'SSL v2 support' and 'SSLv3 support' are enabled
Save the settings.

There was some confusion about the setenv command as it differs between the OS3.9 version and OS3.1. The OS3.9 version can create directories in ENV: and the 3.1 version not. You can set it up manually though quite simply:

Create a new directory (drawer in ENVARC: called AmiSSL (ENVARC: lives in SYS:Prefs/Env-Archive)

Use your favourite text editor to create a text file containing four characters as follows (without quotes) : 'tls1'

Save this text file into your newly created AmiSSL directory with the filename 'SSL_CLIENT_VERSION'  (without quoues)

So to summarise, in the path 'SYS:Prefs/Env-Archive/AmiSSL' there is a 4 byte file called 'SSL_CLIENT_VERSION' the content of which is 'tls1'.

That is it. You can now reboot and it should work. If you don't want to reboot just copy that AmiSSL drawer over to ENV: and restart IBrowse.

I was quite certain that I had completed all of the steps you list and i just confirmed that I had.  I installed AmiSSL 4.3 on top of the previous installation....I'm still told the remote server is using an encryption protocol not supported by iBrowse.

[beller]

The instructions I've seen called for installing AmiSSL 3.6 and then 4.3  I uninstalled and tried 3.6 alone and when it didn't work I reinstalled 4.3. 

[beller]

Lets double check it's working. Open a shell and type in:

getenv amissl/ssl_client_version

The result should be tls1

By the way, is this a clean 3.1.4 install you're running? Some env handlers are crappy, but I use env-handler 1.13 by Stephan Rupprecht and I've never had any bother. I don't know whether 3.1.4 actually comes with it's own env handler or not, but if it does then obviously stick with that one.

And the result.....tis1

[beller]

Lets double check it's working. Open a shell and type in:

getenv amissl/ssl_client_version

The result should be tls1

By the way, is this a clean 3.1.4 install you're running? Some env handlers are crappy, but I use env-handler 1.13 by Stephan Rupprecht and I've never had any bother. I don't know whether 3.1.4 actually comes with it's own env handler or not, but if it does then obviously stick with that one.

And the result.....tis1

You mean tls1 yes and not tis1? TEE ELL ESS WON

Oh...yea...small type and old eyes...looked like an i and not an l! ha

[beller]

Did you get this sorted then? If not then I forgot to mention for you to check that the AmiSSL assign exists. I can't really think of anything else at this point.

I can get in the forum but not via a secure https connection.   The typo was the overall issue...thanks for the help!