AmiSSL 4

[Robbie]

A great day is upon us! I see that an updated AmiSSL is now on Aminet. Brilliant news for the usability of the Amiga online. However, I think i'm right in that any software we have has to be recompiled to take advantage of it?

Anyway, thanks to all involved!

[Thorham]

Originally Posted by Robbie

However, I think i'm right in that any software we have has to be recompiled to take advantage of it?

You're probably correct. Tried it with IBrowse2.4, and it doesn't use any of the new protocols.

[trixster]

Wow, that is great news!

Would recompiling something like IBrowse be a big, complicated job?

[Thorham]

Originally Posted by trixster

Would recompiling something like IBrowse be a big, complicated job?

According to the IBrowse site, support has already been added to IBrowse 2.5, but who knows when that will become available.

Don't know how useful this is right now, though. There's a simple work around to get onto secure sites. Only when a site insists on things like SHA256 will you be unable to get onto the site.

[trixster]

Well ibrowse 2.4 was released in 2006... so it can't be too long a wait for 2.5!

[Thorham]

Originally Posted by trixster

Well ibrowse 2.4 was released in 2006... so it can't be too long a wait for 2.5!

I hope it'll be soon, because it really is the best browser for 68k.

[Pat the Cat]

AFAIK Ibrowse AKA Stefan Burstrom were waiting on a legit AmiSSL implementation and I can understand why.

I was checking the site just a couple days ago, no mention of 2.5. So I think it will be much less wait than 11 years.

Given that it's a major security upgrade, I daresay they will want to test thoroughly before releasing any updates of their own.

However, please not that IBrowse 2.4 will not be able to make use of this, but you should install it over AmiSSL v3 anyway, as applications will start to be released that use it (YAM, for example). IBrowse 2.5 (when released) will require AmiSSL v4, and was been adapted to use it some months ago.

http://www.ibrowse-dev.net/news.php?id=1486495499

[liviux76]

Originally Posted by Pat the Cat

AFAIK Ibrowse AKA Stefan Burstrom were waiting on a legit AmiSSL implementation and I can understand why.

I was checking the site just a couple days ago, no mention of 2.5. So I think it will be much less wait than 11 years.

Given that it's a major security upgrade, I daresay they will want to test thoroughly before releasing any updates of their own.



http://www.ibrowse-dev.net/news.php?id=1486495499

Somewhere on this forum I've read that iBrowse 2.5 is already out for the beta testers.

Unfortunately I don't know when it will be released and the workaround I've tried to get onto secure sites doesn't work for me and for many people...

That's a shame because it is certainly the best browser for Amiga 68k.

[spudje]

Just a question from the end-user perspective. Does this mean, if compiled with this library software will be able to connect securly using latest SSL and most of TLS protocol?

[Thorham]

Originally Posted by liviux76

the workaround I've tried to get onto secure sites doesn't work for me and for many people

I assume you mean this:

setenv save AmiSSL/SSL_CLIENT_VERSION tls1

The idea is correct, but the line is wrong (it makes an environment variable called save, which is wrong).

This is correct (for AOS3, probably AOS2 as well):

makedir env:amissl
setenv amissl/ssl_client_version tls1
copy env:amissl envarc:amissl

Just make sure that in IBrowse AmiSSL 2 and 3 are enabled.

Originally Posted by spudje

Does this mean, if compiled with this library software will be able to connect securly using latest SSL and most of TLS protocol?

As far as I know, support has to be added.

[liviux76]

Originally Posted by Thorham

I assume you mean this:

setenv save AmiSSL/SSL_CLIENT_VERSION tls1

The idea is correct, but the line is wrong (it makes an environment variable called save, which is wrong).

This is correct (for AOS3, probably AOS2 as well):

makedir env:amissl
setenv amissl/ssl_client_version tls1
copy env:amissl envarc:amissl

Just make sure that in IBrowse AmiSSL 2 and 3 are enabled.

As far as I know, support has to be added.

I am at work now but probably that's the line I've added to my user-startup file... I'll try your suggestion and I'll let you know.
Thanks for your help.

[Thorham]

Originally Posted by liviux76

but probably that's the line I've added to my user-startup file

You don't have to add this to the startup-sequence. Just type these lines in the command line, and you're done. It's permanent.

[nogginthenog]

Originally Posted by liviux76

Somewhere on this forum I've read that iBrowse 2.5 is already out for the beta testers.

It's been available for about 2 years. Unfortunately there have been issues getting to go ahead from the original author (IIRC he was AWOL for quite some time).

The good news is that things are finally moving forward. The source has has been recently moved to from CVS to a private GIT server.

There is a branch for AmiSSL 4 but AFAIK it is not available yet.

[liviux76]

Originally Posted by Thorham

You don't have to add this to the startup-sequence. Just type these lines in the command line, and you're done. It's permanent.

You are the man!
It worked like a charm!

I had that line in my s:user-startup file in the "AmiSSL Section" just after the "Assign" but in fact it didn't work.
Now I am able to browse https:// websites, THANKS!

[liviux76]

Originally Posted by nogginthenog

It's been available for about 2 years. Unfortunately there have been issues getting to go ahead from the original author (IIRC he was AWOL for quite some time).

The good news is that things are finally moving forward. The source has has been recently moved to from CVS to a private GIT server.

There is a branch for AmiSSL 4 but AFAIK it is not available yet.

Great news!

[trixster]

I think I must be doing something wrong. I have added those lines but Ibrowse still says "Amissl either not installed or too old".

I have amissl assigned to sys:internet/amissl and have installed amissl 4 over my old amissl installation. Any idea what the issue might be? Ibrowse is set to ssl2 and ssl3.

[powrslave]

I got an error during install about a line in the code and a directory not existing.
Will install snapit.lha and try to post a screenshot.

[Robbie]

Originally Posted by powrslave

I got an error during install about a line in the code and a directory not existing.
Will install snapit.lha and try to post a screenshot.

I had the same thing happen. This is if you don't already have a copy of AmiSSL installed. I got around it by manually creating the directory it couldn't find.

[Sir_Lucas]

Originally Posted by powrslave

I got an error during install about a line in the code and a directory not existing.
Will install snapit.lha and try to post a screenshot.

Instlall AmiSSL 3.6 first, then on top of that install AmiSSL 4.0
Don't unpack the archives on your PC. Unpack them on your Amiga.

[liviux76]

Originally Posted by Sir_Lucas

Instlall AmiSSL 3.6 first, then on top of that install AmiSSL 4.0
Don't unpack the archives on your PC. Unpack them on your Amiga.

I already had the V.3.6 installed and the installer detected it and suggested to use that directory as installation folder.

I had an error decompressing the archive with unarc and I had to extract the files from the lha file using Dopus.