On Sun, Oct 03, 2021 at 20:54:34 +0100, David Higton wrote:
> Is there a way to make the RISC OS version of NS use the central CA cert
> bundle, InetDbase:CertData, rather than its own?
We honour a ca_bundle configuration option which defaults to
NetSurf:Resources.ca-bundle but you can change to whatever path you want.
> Which, it should be mentioned, is long out of date.
We should probably update that then.
> I try to maintain a central CA bundle, rather than having multiple ones
> that are not necessarily maintained up to date.
That is reasonable. Not everyone does that sadly. Of course, modern operating
systems manage a system-wide CA bundle for the user automatically. If there
were an emerging standard for that on RISC OS then we could probably come up
with a fallback mechanism to try that before using the built-in bundle.
D.
--
Daniel Silverstone http://www.netsurf-browser.org/
PGP mail accepted and encouraged. Key Id: 3CCE BABE 206C 3B69
_______________________________________________
netsurf-dev mailing list -- netsurf-dev@netsurf-browser.org
To unsubscribe send an email to netsurf-dev-leave@netsurf-browser.org
Monday, 4 October 2021
Sunday, 3 October 2021
Fetch_NS
In article <a24acd7559.DaveMeUK@BeagleBoard-xM>,
David Higton <dave@davehigton.me.uk> wrote:
> In message <5975ccea71dave@triffid.co.uk>
> Dave <dave@triffid.co.uk> wrote:
> >I have made the changes, but the error is the same.
> >
> >The full error message courtesy of Reporter is:
> >
> >** WimpError ** from unknown task
> > Error : &00000000
> > Message: file LATEST missing or empty at line 6
> OK, open the InetDbase:CertData file and tell us the date you'll see
> near the top (it's the 4th line in mine).
> Mine says:
> ## Certificate data from Mozilla as of: Thu Sep 30 03:12:05 2021 GMT
> David
Thanks for the advice David. :-)
Mine is/was:
Certificate data from Mozilla as of: Wed Jan 1 04:12:10 2020 GMT
I downloaded and tried your updater, but unfortunately it errored out.
!Reporter"
----------
[WindowManager/] %Obey HostFS::HardDisc4.$.Apps.!UpdCaCert.!Run
No writeable memory at this address
** Error **
Error : &00000411
Maybe something to do with... I'm on RISC OS 6.20
Thereafter...
Downloaded the cacert.pem and did as you noted in your follow up posting.
So I now have the new CertData in place...
Certificate data from Mozilla as of: Thu Sep 30 03:12:05 2021 GMT.
Rebooted RISC OS...
Tried to run "Fetch_NS and still the same error message...
** WimpError ** from unknown task
Error : &00000000
Message: file LATEST missing or empty at line 6
What next he cried?
Had a lightbulb... :-/
RISC OS 6.20 has an !Internet.Files.CertData in
...HardDisc4.$.!Boot.Resources.!Internet.files.CertData
But it also has a
...HardDisc4.$.!Boot.Choices.Default.Internet.Files.CertData
I replaced that one as well, thereafter, Fetch_NS downloaded the 5313/zip
okay.
Again.
Thanks for the advice, appreciated.
Dave
Apologies for vanishing mid chat last night. (Medical reasons).
D.
--
Dave Triffid
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
David Higton <dave@davehigton.me.uk> wrote:
> In message <5975ccea71dave@triffid.co.uk>
> Dave <dave@triffid.co.uk> wrote:
> >I have made the changes, but the error is the same.
> >
> >The full error message courtesy of Reporter is:
> >
> >** WimpError ** from unknown task
> > Error : &00000000
> > Message: file LATEST missing or empty at line 6
> OK, open the InetDbase:CertData file and tell us the date you'll see
> near the top (it's the 4th line in mine).
> Mine says:
> ## Certificate data from Mozilla as of: Thu Sep 30 03:12:05 2021 GMT
> David
Thanks for the advice David. :-)
Mine is/was:
Certificate data from Mozilla as of: Wed Jan 1 04:12:10 2020 GMT
I downloaded and tried your updater, but unfortunately it errored out.
!Reporter"
----------
[WindowManager/] %Obey HostFS::HardDisc4.$.Apps.!UpdCaCert.!Run
No writeable memory at this address
** Error **
Error : &00000411
Maybe something to do with... I'm on RISC OS 6.20
Thereafter...
Downloaded the cacert.pem and did as you noted in your follow up posting.
So I now have the new CertData in place...
Certificate data from Mozilla as of: Thu Sep 30 03:12:05 2021 GMT.
Rebooted RISC OS...
Tried to run "Fetch_NS and still the same error message...
** WimpError ** from unknown task
Error : &00000000
Message: file LATEST missing or empty at line 6
What next he cried?
Had a lightbulb... :-/
RISC OS 6.20 has an !Internet.Files.CertData in
...HardDisc4.$.!Boot.Resources.!Internet.files.CertData
But it also has a
...HardDisc4.$.!Boot.Choices.Default.Internet.Files.CertData
I replaced that one as well, thereafter, Fetch_NS downloaded the 5313/zip
okay.
Again.
Thanks for the advice, appreciated.
Dave
Apologies for vanishing mid chat last night. (Medical reasons).
D.
--
Dave Triffid
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
Re: Fetch_NS
In message <ddfac27559.DaveMeUK@BeagleBoard-xM>
David Higton <dave@davehigton.me.uk> wrote:
> In message <6160be7559.DaveMeUK@BeagleBoard-xM>
> David Higton <dave@davehigton.me.uk> wrote:
>
[snip]
> Following up my own post: it looks like my CertData file must have
> contained an invalid certificate (even though it was only 3 months out
> of data), because replacing that has fixed the problem.
>
> I have updated a couple of lines in !Boot.Choices.Fetch_NS.Settings.
> These are the new ones:
>
> Set Fetch_NS$Url https://ci.netsurf-browser.org/builds/riscos/
>
> Set Fetch_NS$Opt --ca-certificate=InetDbase:CertData -qO
>
> First one is to use https rather than http. Second one is to use the
> central InetDbase:CertData file rather than a separate (and non-
> maintained) copy.
Thanks for that, David. The first line had already been changed in my copy
of the file from the last time this error occurred so the second line was
the fix for me.
Updates for the CertData file are also available in the ROOL nightly beta
HardDisc4.
Fred
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
David Higton <dave@davehigton.me.uk> wrote:
> In message <6160be7559.DaveMeUK@BeagleBoard-xM>
> David Higton <dave@davehigton.me.uk> wrote:
>
[snip]
> Following up my own post: it looks like my CertData file must have
> contained an invalid certificate (even though it was only 3 months out
> of data), because replacing that has fixed the problem.
>
> I have updated a couple of lines in !Boot.Choices.Fetch_NS.Settings.
> These are the new ones:
>
> Set Fetch_NS$Url https://ci.netsurf-browser.org/builds/riscos/
>
> Set Fetch_NS$Opt --ca-certificate=InetDbase:CertData -qO
>
> First one is to use https rather than http. Second one is to use the
> central InetDbase:CertData file rather than a separate (and non-
> maintained) copy.
Thanks for that, David. The first line had already been changed in my copy
of the file from the last time this error occurred so the second line was
the fix for me.
Updates for the CertData file are also available in the ROOL nightly beta
HardDisc4.
Fred
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
Re: Fetch_NS
In message <a24acd7559.DaveMeUK@BeagleBoard-xM>
David Higton <dave@davehigton.me.uk> wrote:
>In message <5975ccea71dave@triffid.co.uk>
> Dave <dave@triffid.co.uk> wrote:
>
>>I have made the changes, but the error is the same.
>>
>>The full error message courtesy of Reporter is:
>>
>>** WimpError ** from unknown task
>> Error : &00000000
>> Message: file LATEST missing or empty at line 6
>
>OK, open the InetDbase:CertData file and tell us the date you'll see
>near the top (it's the 4th line in mine).
>
>Mine says:
>
>## Certificate data from Mozilla as of: Thu Sep 30 03:12:05 2021 GMT
And if yours is earlier than this year, then go get this file:
https://curl.se/ca/cacert.pem
The correct file should be a little over 200000 bytes. If the one
you download is, put it in the InetDbase: directory, delete the old
CertData file, and rename the new one as CertData.
David
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
David Higton <dave@davehigton.me.uk> wrote:
>In message <5975ccea71dave@triffid.co.uk>
> Dave <dave@triffid.co.uk> wrote:
>
>>I have made the changes, but the error is the same.
>>
>>The full error message courtesy of Reporter is:
>>
>>** WimpError ** from unknown task
>> Error : &00000000
>> Message: file LATEST missing or empty at line 6
>
>OK, open the InetDbase:CertData file and tell us the date you'll see
>near the top (it's the 4th line in mine).
>
>Mine says:
>
>## Certificate data from Mozilla as of: Thu Sep 30 03:12:05 2021 GMT
And if yours is earlier than this year, then go get this file:
https://curl.se/ca/cacert.pem
The correct file should be a little over 200000 bytes. If the one
you download is, put it in the InetDbase: directory, delete the old
CertData file, and rename the new one as CertData.
David
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
Re: Fetch_NS
In message <5975ccea71dave@triffid.co.uk>
Dave <dave@triffid.co.uk> wrote:
>I have made the changes, but the error is the same.
>
>The full error message courtesy of Reporter is:
>
>** WimpError ** from unknown task
> Error : &00000000
> Message: file LATEST missing or empty at line 6
OK, open the InetDbase:CertData file and tell us the date you'll see
near the top (it's the 4th line in mine).
Mine says:
## Certificate data from Mozilla as of: Thu Sep 30 03:12:05 2021 GMT
David
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
Dave <dave@triffid.co.uk> wrote:
>I have made the changes, but the error is the same.
>
>The full error message courtesy of Reporter is:
>
>** WimpError ** from unknown task
> Error : &00000000
> Message: file LATEST missing or empty at line 6
OK, open the InetDbase:CertData file and tell us the date you'll see
near the top (it's the 4th line in mine).
Mine says:
## Certificate data from Mozilla as of: Thu Sep 30 03:12:05 2021 GMT
David
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
Re: Fetch_NS
In article <ac4cc97559.DaveMeUK@BeagleBoard-xM>,
David Higton <dave@davehigton.me.uk> wrote:
> In message <5975c6fce7dave@triffid.co.uk>
> Dave <dave@triffid.co.uk> wrote:
> >In article <ddfac27559.DaveMeUK@BeagleBoard-xM>,
> > David Higton <dave@davehigton.me.uk> wrote:
> >> In message <6160be7559.DaveMeUK@BeagleBoard-xM>
> >> David Higton <dave@davehigton.me.uk> wrote:
> >
> >> >Hi all,
> >> > I used to use Fetch_NS daily. Recently it has stopped working,
> >> >complaining of an incorrectly formatted filename - of course it's
> >> >incorrectly formatted because it's the empty string. The error is
> >> >coming from Fetch_NS.Resources.SetLatest.
> >> > I'm trying to analyse why it isn't working, but the code is
> >> >crunched, or very nearly so, which means I'm struggling to
> >> >understand it.
> >> >
> >> >Has it stopped working for anyone else? If so, do you have a
> >> >solution?
> >
> >> Following up my own post: it looks like my CertData file must have
> >> contained an invalid certificate (even though it was only 3 months out
> >> of data), because replacing that has fixed the problem.
> >
> >> I have updated a couple of lines in !Boot.Choices.Fetch_NS.Settings.
> >> These are the new ones:
> >
> >> Set Fetch_NS$Url https://ci.netsurf-browser.org/builds/riscos/
> >
> >> Set Fetch_NS$Opt --ca-certificate=InetDbase:CertData -qO
> >
> >> First one is to use https rather than http. Second one is to use the
> >> central InetDbase:CertData file rather than a separate (and non-
> >> maintained) copy.
> >
> >> David
> >
> >Ooeer! slight aside but similar problem... I've not updated Netsurf
> >recently so prompted by the above notes thought I better do it.
> >
> >Error from Fetch_NS
> > Error : &00000000
> > Message: file LATEST missing or empty at line 6
> >
> >I have no idea what that is, or where it originates from...
> >
> >Any ideas please how to fix whatever it is?
> Make the changes described above, for a start.
> The problem is caused by a bundle of certificate authority certificates
> being out of date.
> If that still doesn't fix it, come back to us here.
> David
I have made the changes, but the error is the same.
The full error message courtesy of Reporter is:
** WimpError ** from unknown task
Error : &00000000
Message: file LATEST missing or empty at line 6
Thanks
Dave
With regard to the error message.
The only place in the !AppDir that I can find a Line 6 is in...
"HostFS::HardDisc4.$.Net.!Fetch_NS.Resources.SetLatest" A Basic file.
D.
--
Dave Triffid
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
David Higton <dave@davehigton.me.uk> wrote:
> In message <5975c6fce7dave@triffid.co.uk>
> Dave <dave@triffid.co.uk> wrote:
> >In article <ddfac27559.DaveMeUK@BeagleBoard-xM>,
> > David Higton <dave@davehigton.me.uk> wrote:
> >> In message <6160be7559.DaveMeUK@BeagleBoard-xM>
> >> David Higton <dave@davehigton.me.uk> wrote:
> >
> >> >Hi all,
> >> > I used to use Fetch_NS daily. Recently it has stopped working,
> >> >complaining of an incorrectly formatted filename - of course it's
> >> >incorrectly formatted because it's the empty string. The error is
> >> >coming from Fetch_NS.Resources.SetLatest.
> >> > I'm trying to analyse why it isn't working, but the code is
> >> >crunched, or very nearly so, which means I'm struggling to
> >> >understand it.
> >> >
> >> >Has it stopped working for anyone else? If so, do you have a
> >> >solution?
> >
> >> Following up my own post: it looks like my CertData file must have
> >> contained an invalid certificate (even though it was only 3 months out
> >> of data), because replacing that has fixed the problem.
> >
> >> I have updated a couple of lines in !Boot.Choices.Fetch_NS.Settings.
> >> These are the new ones:
> >
> >> Set Fetch_NS$Url https://ci.netsurf-browser.org/builds/riscos/
> >
> >> Set Fetch_NS$Opt --ca-certificate=InetDbase:CertData -qO
> >
> >> First one is to use https rather than http. Second one is to use the
> >> central InetDbase:CertData file rather than a separate (and non-
> >> maintained) copy.
> >
> >> David
> >
> >Ooeer! slight aside but similar problem... I've not updated Netsurf
> >recently so prompted by the above notes thought I better do it.
> >
> >Error from Fetch_NS
> > Error : &00000000
> > Message: file LATEST missing or empty at line 6
> >
> >I have no idea what that is, or where it originates from...
> >
> >Any ideas please how to fix whatever it is?
> Make the changes described above, for a start.
> The problem is caused by a bundle of certificate authority certificates
> being out of date.
> If that still doesn't fix it, come back to us here.
> David
I have made the changes, but the error is the same.
The full error message courtesy of Reporter is:
** WimpError ** from unknown task
Error : &00000000
Message: file LATEST missing or empty at line 6
Thanks
Dave
With regard to the error message.
The only place in the !AppDir that I can find a Line 6 is in...
"HostFS::HardDisc4.$.Net.!Fetch_NS.Resources.SetLatest" A Basic file.
D.
--
Dave Triffid
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
Re: Fetch_NS
In message <5975c6fce7dave@triffid.co.uk>
Dave <dave@triffid.co.uk> wrote:
>In article <ddfac27559.DaveMeUK@BeagleBoard-xM>,
> David Higton <dave@davehigton.me.uk> wrote:
>
> > Following up my own post: it looks like my CertData file must have
> > contained an invalid certificate (even though it was only 3 months out of
> > data), because replacing that has fixed the problem.
>
> > I have updated a couple of lines in !Boot.Choices.Fetch_NS.Settings.
> > These are the new ones:
>
> > Set Fetch_NS$Url https://ci.netsurf-browser.org/builds/riscos/
>
> > Set Fetch_NS$Opt --ca-certificate=InetDbase:CertData -qO
>
> > First one is to use https rather than http. Second one is to use the
> > central InetDbase:CertData file rather than a separate (and non-
> > maintained) copy.
>
> > David
>
> Ooeer! slight aside but similar problem... I've not updated Netsurf
> recently so prompted by the above notes thought I better do it.
>
> Error from Fetch_NS Error : &00000000
> Message: file LATEST missing or empty at line 6
>
> I have no idea what that is, or where it originates from...
>
> Any ideas please how to fix whatever it is?
Slightly longer answer:
The problem is caused by an HTTPS certificate bundle file that contains
an invalid or out of date certificate.
There's a related problem in that there are multiple copies of this
file splattered around some people's systems. There ought to be one
true copy, and it ought to be easy to maintain it. Maintaining one
has to be easier than maintaining more than one, right?
The one we should all be using is InetDbase:CertData (i.e. the file's
name is CertData, and it lives in the InetDbase: directory, which on
my system expands to HardDisc4.$.!Boot.Resources.!Internet.Files, but
if we refer to it as InetDbase:CertData, then it doesn't matter where
or on what drive or filing system you store it, the reference will be
correct). Hence the second of the modifications above.
OK, I don't know how up to date your InetDbase:CertData is, but I can
at least offer you an easy way to update it - provided it is recent
enough in the first place. Go to my web site, https://davehigton.me.uk
and look for UpdCaCert.zip Unzip it, put it somewhere useful (maybe
Apps), and run it. It will update your InetDbase:CertData file, if
and only if a later one is available.
Hope that helps.
If even that doesn't work, it's possible that your InetDbase:CertData
file is out of date, in which case come back to us here and we can tell
you how to fix that. (My app requires a working CertData file to be
able to download the new one. Yes, there is a potential for trouble
there.)
David
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
Dave <dave@triffid.co.uk> wrote:
>In article <ddfac27559.DaveMeUK@BeagleBoard-xM>,
> David Higton <dave@davehigton.me.uk> wrote:
>
> > Following up my own post: it looks like my CertData file must have
> > contained an invalid certificate (even though it was only 3 months out of
> > data), because replacing that has fixed the problem.
>
> > I have updated a couple of lines in !Boot.Choices.Fetch_NS.Settings.
> > These are the new ones:
>
> > Set Fetch_NS$Url https://ci.netsurf-browser.org/builds/riscos/
>
> > Set Fetch_NS$Opt --ca-certificate=InetDbase:CertData -qO
>
> > First one is to use https rather than http. Second one is to use the
> > central InetDbase:CertData file rather than a separate (and non-
> > maintained) copy.
>
> > David
>
> Ooeer! slight aside but similar problem... I've not updated Netsurf
> recently so prompted by the above notes thought I better do it.
>
> Error from Fetch_NS Error : &00000000
> Message: file LATEST missing or empty at line 6
>
> I have no idea what that is, or where it originates from...
>
> Any ideas please how to fix whatever it is?
Slightly longer answer:
The problem is caused by an HTTPS certificate bundle file that contains
an invalid or out of date certificate.
There's a related problem in that there are multiple copies of this
file splattered around some people's systems. There ought to be one
true copy, and it ought to be easy to maintain it. Maintaining one
has to be easier than maintaining more than one, right?
The one we should all be using is InetDbase:CertData (i.e. the file's
name is CertData, and it lives in the InetDbase: directory, which on
my system expands to HardDisc4.$.!Boot.Resources.!Internet.Files, but
if we refer to it as InetDbase:CertData, then it doesn't matter where
or on what drive or filing system you store it, the reference will be
correct). Hence the second of the modifications above.
OK, I don't know how up to date your InetDbase:CertData is, but I can
at least offer you an easy way to update it - provided it is recent
enough in the first place. Go to my web site, https://davehigton.me.uk
and look for UpdCaCert.zip Unzip it, put it somewhere useful (maybe
Apps), and run it. It will update your InetDbase:CertData file, if
and only if a later one is available.
Hope that helps.
If even that doesn't work, it's possible that your InetDbase:CertData
file is out of date, in which case come back to us here and we can tell
you how to fix that. (My app requires a working CertData file to be
able to download the new one. Yes, there is a potential for trouble
there.)
David
_______________________________________________
netsurf-users mailing list -- netsurf-users@netsurf-browser.org
To unsubscribe send an email to netsurf-users-leave@netsurf-browser.org
Subscribe to:
Posts (Atom)