AmiSSL Released
 

https://eab.abime.net/attachment.php...1&d=1667373051



Author: AmiSSL Open Source Team


AmiSSL v5.5 OS3/OS4: Download


AmiSSL v5: is a new major release which has been updated with full compatibility with OpenSSL 3.0. This includes important security relatedfixes, a built-in HTTP(S) client and comes with the latest encryption ciphers which are required nowadays to connect to modern SSL-based services such as HTTPS and SSH.


Changes:
- Updated OpenSSL backend to full compatibility with the latest OpenSSL 3.0.7 (1.11.2022) version, which includes:
- Added RIPEMD160 to the default provider.
- Fixed regressions introduced in 3.0.6 version.
- Fixed two buffer overflows in punycode decoding functions. ([CVE-2022-3786]) and ([CVE-2022-3602])
- Improved and simplified random number seeding routines.
- The AMISSL_NO_STATIC_FUNCTIONS preprocessor symbol has been added to the SDK, mainly for use with VBCC (see SDK documentation - #66).

Requirements:
AmigaOS 4.0+/PPC, AmigaOS 3.0+/68020+ or MorphOS

Hello,

Does it change anything for the https site ?
Tried with ibrowse, always the same issue (i m not sure to understand everything :help)

IBrowser but also AWeb and Voyager could access https site also with old AmiSSL, just do the right thing on Amiga OS, delete everything on your system and do this:

- Install AmiSSL in SYS:Internet/AmiSSL/ (or where do you want)

Add this in User-Startup:
;BEGIN AmiSSL
Assign AmiSSL: "SYS:Internet/AmiSSL"
If Exists AmiSSL:Libs
Assign LIBS: AmiSSL:Libs ADD
EndIf
Path AmiSSL: ADD
;END AmiSSL

- Created the folder "AmiSSL" in "SYS:Prefs/Env-Archive/"
- Run the command "setenv save AmiSSL/SSL_CLIENT_VERSION tls1"
- Done this will be created file "SSL_CLIENT_VERSION" in SYS:Prefs/Env-Archive/AmiSSL/
- File "SSL_CLIENT_VERSION" create inside written file "tls1"

- Verify that file "SSL_CLIENT_VERSION" was saved in SYS:Prefs/Env-Archive/AmiSSL/
- Reboot. It should work.

can't reach https too !!!

With Snoopdos, i see Aweb is looking for libs:amissl/amisslv097g.library

Would be amisslv111a.library, what's wrong ?

Ok

Done, works for some site.
but if i want to connect to:
Ibrowse or to amigaimpact.org i have SSL Connect error !!!!

Amigasystem Could you try with these site please.

Thanks.

It only works on sites with TLS v1.0 encryption, sites using TLS v1.1 or v1.2 need to use the latest AmiSSL, so have to be compiled using it also.

iBrowse 2.4 is therefore stuck at TLS v1.0 - iBrowse version 2.5, when released, will be compiled against the newer AmiSSL so should work on all sites.

Yes, you must copy amisslv097g.library in SYS:Internet/AmiSSL/Libs/AmiSSL/

amisslv097g.library is located in AmiSSL-3.6-68k.lha

As it says indigolemon not all https sites are supported, you can still easily go on amigaimpact.org with NetSurf by Arti.

Ok, thanks i understand.

But Netsurf is slow even with a 060, hope ibrowse 2.5 will be realised ....soon

Regards.

Thanks for the clarification.

Yes ! it's working now :great

All right, if you want to go upstairs on your own "amigaimpact.org" with iBrowser or aWeb, without waiting iBrowse 2.5 you can do it through "pici.picidae.net" :D

Yes, you're right.

Already tested with picidae.net, it works.
awaiting ibrowse 2.5 :great

Okay, I'm happy for you.

Thank very much. now it works with this guide

Ok, thank you for successfully testing it ;)

So it's no longer in fashion, that you install each AmiSSL version on top of each other starting from the oldest? :-)

I guess it's faster to install the newest and manually copy the different SSL engines into amissl:libs/amissl

Yes, Amiga is a Stand-Alone OS, you can do everything by installing or simply copying the new one, and if necessary add what you need from the old releases as it happens with AmiSSL; i have always done so in order to better understand the Amiga System.

ok all done, i hope who aweb is at moment the best browser for classic amiga, runs very fast, maybe with vampire or 040/060 the best choise is chris netsurf with truetype fonts because support modern css and html 4.01, i attemp full support at javascript not ibrowse 2.5 :)

all best

Guys, I'm confused. I have followed the instructions above (although I had to create the setenv thing manually) and I've also added a few files from earlier versions of AmiSSL. I'm using OS3.1 by the way.


I have it assigned in user-startup, and the path is:


SYS:Internet/AmiSSL



and in there, are the Libs, Certs, Private and Usercerts directories.


In that Libs there is the the AmiSSLmaster.library and another Amissl directory, which has the various library files in it - does that sound correct?


Only when I try to access a site like Gmail, AWeb tells me I need AmiSSL installed. :-/


Any clues? Thanks :-)