Amiga.org
Amiga computer related discussion => Amiga Software Issues and Discussion => Topic started by: mechy on February 19, 2016, 05:51:32 PM
-
Found this news.. it may be of interest if you use ibrowse and have the annoying ssl problem:
19 Feb 2016 IBrowse 2.4, AmiSSL 3.6 and the POODLE attack I'm sure you are all well aware that many secure websites are normally not reachable with IBrowse 2.4 any longer, due to servers shutting off SSLv2 and SSLv3 connections due to the POODLE attack. However, there is a solution...
This is delayed advice, as I have only just realised it was possible: contrary to the previous news item, you should enable both "SSLv2 support" and "SSLv3 support" on the "Security" page of the IBrowse preferences. You must then also enter the following command in a shell:
setenv save AmiSSL/SSL_CLIENT_VERSION tls1
This will force any most applications that use AmiSSL, including IBrowse, to disable both SSLv2 and SSLv3, and use more secure TLSv1 connections instead.
This issue will be properly addressed in IBrowse 2.5 and a new version of AmiSSL.
-
Thanks Mechy! Good to know! Now, when might we see IBrowse 2.5 and a new version of AmiSSL? I hope soon... any devs actively working on these? Thanks again! BTW, this will make OM's day!
-
This issue will be properly addressed in IBrowse 2.5 and a new version of AmiSSL.
Good sir! I say! You can't just post something like this and not give more details! :lol:
-
Good sir! I say! You can't just post something like this and not give more details! :lol:
That is all there is on the IB news page.. it was passed to me so i passed it here ;) wish there were more details. Far as i know the guy who did amissl 3.6 is not updating it, as there are some problems he said. When you read this though it makes me think someone else is working on it.
http://www.ibrowse-dev.net/news.php
-
That is all there is on the IB news page.. it was passed to me so i passed it here ;) wish there were more details. Far as i know the guy who did amissl 3.6 is not updating it, as there are some problems he said. When you read this though it makes me think someone else is working on it.
http://www.ibrowse-dev.net/news.php
There's work going on regarding a new version of AmiSSL.
You can check it here:
https://github.com/jens-maus/amissl
-
AFAIK the person doing the updates to AmiSSL is this guy:
http://www.warpdt.co.uk/
If so, I heartily approve! Last I heard was that he had a new version, but was stuck waiting on the rest of the IBrowse team to move forward...
-
AFAIK the person doing the updates to AmiSSL is this guy:
http://www.warpdt.co.uk/
If so, I heartily approve! Last I heard was that he had a new version, but was stuck waiting on the rest of the IBrowse team to move forward...
He should be called the WarpDeveloper :) - a pun intended. Nice.
-
I can't take the credit regarding AmiSSL - most of the work has been done by Jens Maus, and several others have been involved. It's true that development did stall, but to cut a long story short I stepped in recently to help fix everything as the code was broken and simply didn't work. Now it is working again, the AmiSSL team have regained their motivation, as you can see from GitHub :).
AmiSSL is not dependent on IBrowse and can be released at any time. However, IBrowse is if course dependent on AmiSSL - it would be foolish to release IBrowse 2.5 until the SSL issues were fixed and that means a new AmiSSL.
I didn't realise until yesterday, while reworking the SSL code in IBrowse, that IBrowse 2.4 and AmiSSL 3.6 could already handle TLSv1 connections - IBrowse 2.4 explicitly disables it for a reason I am unsure of. Wish I'd figured that out earlier as I could have published the "fix" as soon as POODLE hit and sites began to shut off SSLv3, but better late than never!
-
Will there be any improvements in HTML5 rendering in IB2.5?
And is the PowerPC AmigaOS4.1 version planed?
-
I can't take the credit regarding AmiSSL - most of the work has been done by Jens Maus, and several others have been involved. It's true that development did stall, but to cut a long story short I stepped in recently to help fix everything as the code was broken and simply didn't work. Now it is working again, the AmiSSL team have regained their motivation, as you can see from GitHub :).
AmiSSL is not dependent on IBrowse and can be released at any time. However, IBrowse is if course dependent on AmiSSL - it would be foolish to release IBrowse 2.5 until the SSL issues were fixed and that means a new AmiSSL.
I didn't realise until yesterday, while reworking the SSL code in IBrowse, that IBrowse 2.4 and AmiSSL 3.6 could already handle TLSv1 connections - IBrowse 2.4 explicitly disables it for a reason I am unsure of. Wish I'd figured that out earlier as I could have published the "fix" as soon as POODLE hit and sites began to shut off SSLv3, but better late than never!
Thanks for letting us know, i look forward to a new release of Amissl! Its getting harder to get around the net in ibrowse on my 4k ;)
-
Will there be any improvements in HTML5 rendering in IB2.5?
And is the PowerPC AmigaOS4.1 version planed?
No and yes. HTML engine is very much unchanged - 2.5 will come in native OS4 and OS3 flavours. The OS4 port was completed long ago.
-
Thanks for letting us know, i look forward to a new release of Amissl! Its getting harder to get around the net in ibrowse on my 4k ;)
Note that existing apps will not automatically be able to make use of the new AmiSSL. Programs need to be recompiled using the new headers, due to changes in the OpenSSL API (this has always been the case and intention - there is no way around that, so AmiSSL v3 was designed this way).
-
Wait! Does this mean we'll actually see v2.5 sometime this century? :)
Do tell! Have the various permissions issues been sorted out?
-
One thing for sure as soon as IBrowse 2.5 gets released I'll definitely register it at once to support future development.
-
One thing for sure as soon as IBrowse 2.5 gets released I'll definitely register it at once to support future development.
+1
-
@Sir_Lucas
same here. i've seen the AOS4-native betas in action at amiwest, and heavens, is that thing fast. i'll be more than happy to shell out whatever oliver, et al, will ask in terms of payment. i'm thrilled to see a release might actually happen!
-- eliyahu
-
@Sir_Lucas
i'll be more than happy to shell out whatever oliver, et al, will ask in terms of payment. i'm thrilled to see a release might actually happen!
-- eliyahu
Same as me. What's more, I am quite positive that there are more people like us.
-
Wait! Does this mean we'll actually see v2.5 sometime this century? :)
Do tell! Have the various permissions issues been sorted out?
Ohh now you jinxed it by implying hope :roflmao:
Who knows when or what we will see,but i wouldnt mind a update after all this time.
-
Ohh now you jinxed it by implying hope :roflmao:
Oops. :)
@ futaura
I think I last paid for IBrowse more than 15 years ago, so I wouldn't mind showing some financial appreciation for the developers, hint hint. Hope we have something to buy soon.
Thinking more medium-term, have you considered an unstable/nightly build branch, like Debian sid or Firefox Aurora?
-
No and yes. HTML engine is very much unchanged - 2.5 will come in native OS4 and OS3 flavours. The OS4 port was completed long ago.
Does it support CSS? If not what is point to have NG OS version? Lightning fast aminet?
-
Does it support CSS? If not what is point to have NG OS version? Lightning fast aminet?
What's the point in owning an Amiga, let alone six? Surely a PC/Mac is better?
Move along.
-
I think I last paid for IBrowse more than 15 years ago, so I wouldn't mind showing some financial appreciation for the developers, hint hint. Hope we have something to buy soon.
Thinking more medium-term, have you considered an unstable/nightly build branch, like Debian sid or Firefox Aurora?
It has been considered, but not viable for now.Indeed, my next mission is to sort things out with Stefan as we have been out of touch for the last couple of years, partly because IBrowse development stalled while waiting for AmiSSL. I can hardly believe it will soon be 10 years since IBrowse 2.4 was released!
-
Put it on Amistore for a good price, should sell very well!
Chris
-
I might be wrong, it's been a long time, but wasn't a CSS engine partially done already ?
-
I might be wrong, it's been a long time, but wasn't a CSS engine partially done already ?
I think the parser was the written for IB3.0, but not everything else that is needed after that - i.e. layout/rendering and JS/DOM.
-
I think a new version of IBrowse calls for the appropriate use of this meme. ;)
(http://hd.wallpaperswide.com/thumbs/shut_up_and_take_my_money-t2.jpg)
-
(http://hd.wallpaperswide.com/thumbs/shut_up_and_take_my_money-t2.jpg)
I share this thought ;)
-
I think a new version of IBrowse calls for the appropriate use of this meme. ;)
(http://hd.wallpaperswide.com/thumbs/shut_up_and_take_my_money-t2.jpg)
Hahahahah, you've nailed it Mike.