From: Tobias Geerinckx-Rice <tobias.geerinckx.rice@gmail.com>
To: Leo Famulari <leo@famulari.name>
Cc: guix-devel@gnu.org
Subject: Re: [PATCH] gnu: lynx: Support HTTPS (SSL) connections
Date: Sat, 19 Mar 2016 18:29:12 +0100 [thread overview]
Message-ID: <CAKFHe2QPWF0VXYZNivAc3hV1ZZ2N1Nnrw0j6q5A+T8+fngK-+Q@mail.gmail.com> (raw)
In-Reply-To: <20160304030140.GA30676@jasmine>
Leo,
On 04/03/2016, Leo Famulari <leo@famulari.name> wrote:
> On Fri, Mar 04, 2016 at 03:37:46AM +0100, tobias.geerinckx.rice@gmail.com
> wrote:
>> From: Tobias Geerinckx-Rice <tobias.geerinckx.rice@gmail.com>
>>
>> * gnu/packages/lynx.scm (lynx)[inputs]: Add 'openssl'.
>> [arguments]: Convert to list; add configure flag for SSL support.
Scratch that.
I assumed that since ‘--with-gnutls’ was already present (and detected
by ./configure, and listed by ldd...), GnuTLS just wasn't enough to
provide the full HTTPS experience and OpenSSL was required. I was
wrong.
> Also, what is role of gnutls once this patch is applied? Does lynx need
> to refer to both gnutls and openssl?
The actual solution is a bit silly. All that is actually needed to get
`lynx https://google.com’ working again is:
---
diff --git a/gnu/packages/lynx.scm b/gnu/packages/lynx.scm
index 3182b3e..080fbb3 100644
--- a/gnu/packages/lynx.scm
+++ b/gnu/packages/lynx.scm
@@ -57,7 +57,7 @@
"--with-screen=ncurses"
"--with-zlib"
"--with-bzlib"
- "--with-gnutls"
+ "--with-gnutls="
;; "--with-socks5" ; XXX TODO
"--enable-widec"
"--enable-ascii-ctypes"
---
Yep.
Is this unusual? Can't say I feel much enthusiasm to read/debug
autoconf macros...
> Can you say if you learned anything else... "interesting" about lynx and
> https support?
>
> For example, a couple months ago I was reading our bug reports and saw
> an old one about https support in w3m (another console browser). I dug a
> little deeper and realized that https support was completely broken by
> default. You can see the result in commit 62339e2d493bf87.
>
> So, do you know if lynx is still supporting broken ciphers and
> protocols, or if there are other problems of that nature?
My main motivation was to have access to HTTPS sites while working on
my X-less GuixSD box, which works with the patch above. However:
~$ lynx https://www.ssllabs.com/ssltest/viewMyClient.html
Looking up www.ssllabs.com
Making HTTPS connection to www.ssllabs.com
Retrying connection without TLS.
Looking up www.ssllabs.com
Making HTTPS connection to www.ssllabs.com
Alert!: Unable to make secure connection to remote host.
Not sure I want to dive into this mess.
Kind regards,
T G-R
next prev parent reply other threads:[~2016-03-19 17:29 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-03-04 2:37 [PATCH] gnu: lynx: Support HTTPS (SSL) connections tobias.geerinckx.rice
2016-03-04 3:01 ` Leo Famulari
2016-03-19 17:29 ` Tobias Geerinckx-Rice [this message]
2016-03-19 18:41 ` Efraim Flashner
2016-03-19 20:59 ` Tobias Geerinckx-Rice
2016-03-19 21:01 ` Tobias Geerinckx-Rice
2016-03-19 21:23 ` Efraim Flashner
2016-03-19 21:29 ` Tobias Geerinckx-Rice
2016-03-20 21:16 ` Ludovic Courtès
2016-03-20 8:15 ` Leo Famulari
2016-04-07 1:32 ` Leo Famulari
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=CAKFHe2QPWF0VXYZNivAc3hV1ZZ2N1Nnrw0j6q5A+T8+fngK-+Q@mail.gmail.com \
--to=tobias.geerinckx.rice@gmail.com \
--cc=guix-devel@gnu.org \
--cc=leo@famulari.name \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/guix.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.