all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: Leo Famulari <leo@famulari.name>
To: Tobias Geerinckx-Rice <tobias.geerinckx.rice@gmail.com>
Cc: guix-devel@gnu.org
Subject: Re: [PATCH] gnu: lynx: Support HTTPS (SSL) connections
Date: Sun, 20 Mar 2016 04:15:02 -0400	[thread overview]
Message-ID: <20160320081502.GA5079@jasmine> (raw)
In-Reply-To: <CAKFHe2QPWF0VXYZNivAc3hV1ZZ2N1Nnrw0j6q5A+T8+fngK-+Q@mail.gmail.com>

On Sat, Mar 19, 2016 at 06:29:12PM +0100, Tobias Geerinckx-Rice wrote:
> Leo,
> 
> On 04/03/2016, Leo Famulari <leo@famulari.name> wrote:
> > On Fri, Mar 04, 2016 at 03:37:46AM +0100, tobias.geerinckx.rice@gmail.com
> > wrote:
> >> From: Tobias Geerinckx-Rice <tobias.geerinckx.rice@gmail.com>
> >>
> >> * gnu/packages/lynx.scm (lynx)[inputs]: Add 'openssl'.
> >> [arguments]: Convert to list; add configure flag for SSL support.
> 
> Scratch that.
> 
> I assumed that since ‘--with-gnutls’ was already present (and detected
> by ./configure, and listed by ldd...), GnuTLS just wasn't enough to
> provide the full HTTPS experience and OpenSSL was required. I was
> wrong.
> 
> > Also, what is role of gnutls once this patch is applied? Does lynx need
> > to refer to both gnutls and openssl?
> 
> The actual solution is a bit silly. All that is actually needed to get
> `lynx https://google.com’ working again is:

With this change, I can access google over https, but not the handful of
other sites I tried. Are you able to access any other sites with https?

> 
> ---
> diff --git a/gnu/packages/lynx.scm b/gnu/packages/lynx.scm
> index 3182b3e..080fbb3 100644
> --- a/gnu/packages/lynx.scm
> +++ b/gnu/packages/lynx.scm
> @@ -57,7 +57,7 @@
>                             "--with-screen=ncurses"
>                             "--with-zlib"
>                             "--with-bzlib"
> -                           "--with-gnutls"
> +                           "--with-gnutls="
>                             ;; "--with-socks5"    ; XXX TODO
>                             "--enable-widec"
>                             "--enable-ascii-ctypes"
> ---
> 
> Yep.
> 
> Is this unusual? Can't say I feel much enthusiasm to read/debug
> autoconf macros...
> 
> > Can you say if you learned anything else... "interesting" about lynx and
> > https support?
> >
> > For example, a couple months ago I was reading our bug reports and saw
> > an old one about https support in w3m (another console browser). I dug a
> > little deeper and realized that https support was completely broken by
> > default. You can see the result in commit 62339e2d493bf87.
> >
> > So, do you know if lynx is still supporting broken ciphers and
> > protocols, or if there are other problems of that nature?
> 
> My main motivation was to have access to HTTPS sites while working on
> my X-less GuixSD box, which works with the patch above. However:
> 
>     ~$ lynx https://www.ssllabs.com/ssltest/viewMyClient.html
>     Looking up www.ssllabs.com
>     Making HTTPS connection to www.ssllabs.com
>     Retrying connection without TLS.
>     Looking up www.ssllabs.com
>     Making HTTPS connection to www.ssllabs.com
>     Alert!: Unable to make secure connection to remote host.
> 
> Not sure I want to dive into this mess.
> 
> Kind regards,
> 
> T G-R

  parent reply	other threads:[~2016-03-20 16:20 UTC|newest]

Thread overview: 11+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-03-04  2:37 [PATCH] gnu: lynx: Support HTTPS (SSL) connections tobias.geerinckx.rice
2016-03-04  3:01 ` Leo Famulari
2016-03-19 17:29   ` Tobias Geerinckx-Rice
2016-03-19 18:41     ` Efraim Flashner
2016-03-19 20:59       ` Tobias Geerinckx-Rice
2016-03-19 21:01       ` Tobias Geerinckx-Rice
2016-03-19 21:23         ` Efraim Flashner
2016-03-19 21:29           ` Tobias Geerinckx-Rice
2016-03-20 21:16         ` Ludovic Courtès
2016-03-20  8:15     ` Leo Famulari [this message]
2016-04-07  1:32       ` Leo Famulari

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20160320081502.GA5079@jasmine \
    --to=leo@famulari.name \
    --cc=guix-devel@gnu.org \
    --cc=tobias.geerinckx.rice@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.