2024-12-12 14:43 UTC

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0002675NetSurf[All Projects] Generalpublic2019-08-03 15:59
Reporterkensmith 
Assigned To 
SeveritymajorReproducibilityalways 
StatusacknowledgedResolutionopen 
Platformx86 OCOSPuppy Linux (32 bit Linux)OS Version528 K=2.6.33.2
Product Version 
Target VersionFixed in Version 
Summary0002675: All HTTPS results in "Problem with the SSL CA cert "
DescriptionCopy of messages

(17.316434) content/fs_backing_store.c:907 get_store_entry: Failed to find ident 0xeb2bd2de in index
(17.316439) content/fs_backing_store.c:1959 fetch: entry not found
(17.316444) content/fetchers/curl.c:351 fetch_curl_setup: fetch 0x86c1a10, url 'http://www.duckduckgo.com/'
(17.316620) content/urldb.c:686 urldb__host_is_ip_address: WARNING: called with non-host 'www.duckduckgo.com/'
(17.366028) content/fetchers/curl.c:900 fetch_curl_process_headers: HTTP status code 301
(17.366048) content/fetchers/curl.c:911 fetch_curl_process_headers: FETCH_REDIRECT, 'https://duckduckgo.com/'
(17.366053) content/fetchers/curl.c:812 fetch_curl_abort: fetch 0x86c1a10, url 'http://www.duckduckgo.com/'
(17.366076) content/llcache.c:1416 llcache_process_metadata: Retrieving metadata
(17.366081) content/fs_backing_store.c:898 get_store_entry: url:https://duckduckgo.com/
(17.366087) content/fs_backing_store.c:907 get_store_entry: Failed to find ident 0x8547e51e in index
(17.366092) content/fs_backing_store.c:1959 fetch: entry not found
(17.366097) content/fetchers/curl.c:351 fetch_curl_setup: fetch 0x86c8938, url 'https://duckduckgo.com/'
(17.369742) content/fetchers/curl.c:1073 fetch_curl_done: done http://www.duckduckgo.com/
(17.369772) content/fetchers/curl.c:832 fetch_curl_stop: fetch 0x86c1a10, url 'http://www.duckduckgo.com/'
(17.387215) content/fetchers/curl.c:1073 fetch_curl_done: done https://duckduckgo.com/
(17.387232) content/fetchers/curl.c:1118 fetch_curl_done: Unknown cURL response code 77
(17.387237) content/fetchers/curl.c:832 fetch_curl_stop: fetch 0x86c8938, url 'https://duckduckgo.com/'
(17.387305) frontends/gtk/gui.c:513 nsgtk_warning: Problem with the SSL CA cert (path? access rights?)
(17.389194) content/urldb.c:686 urldb__host_is_ip_address: WARNING: called with non-host '/mnt/sda2/software/source/netsurf/netsurf-all-3.8/netsurf/resources/en/welcome.html'
^C
Steps To ReproduceI just completed compile with gtk

run it from directory it was compiled to "/mnt/sda2/...."
try for www.duckduckgo.com
Additional InformationThis is / will be an OS good for limited x86 systems

I have and can use gdb
TagsNo tags attached.
Fixed in CI build #
Reported in CI build #
URL of problem page
Attached Files
  • patch file icon 0001-GTK-prefer-using-curl-s-intrinsic-defaults-for-CURLO.patch (1,605 bytes) 2019-07-27 22:59 -
    From 9530cac283aea238aebf44c506574462924eb86a Mon Sep 17 00:00:00 2001
    From: Samuel Dionne-Riel <samuel@dionne-riel.com>
    Date: Sat, 27 Jul 2019 18:53:31 -0400
    Subject: [PATCH] GTK: prefer using curl's intrinsic defaults for CURLOPT_CA*
    
    On distributions that ship only a ca-bundle in `/etc/ssl`, the
    configuration set at initialization will force curl to look for
    certificates that are not present in this directory.
    
    Removing the setting instead makes curl use its internal default.
    
    The framebuffer frontend will not set this option, and the only
    other frontend that sets it is BeOS.
    
    This issue can be observed (likely among other) on the NixOS Linux
    distribution.
    ---
     frontends/gtk/gui.c | 6 +-----
     1 file changed, 1 insertion(+), 5 deletions(-)
    
    diff --git a/frontends/gtk/gui.c b/frontends/gtk/gui.c
    index 3163be16d..143a1041b 100644
    --- a/frontends/gtk/gui.c
    +++ b/frontends/gtk/gui.c
    @@ -200,15 +200,11 @@ static nserror set_defaults(struct nsoption_s *defaults)
     		nsoption_setnull_charp(downloads_directory, strdup(fname));
     	}
     
    -	/* default path to certificates */
    -	nsoption_setnull_charp(ca_path, strdup("/etc/ssl/certs"));
    -
     	if ((nsoption_charp(cookie_file) == NULL) ||
     	    (nsoption_charp(cookie_jar) == NULL) ||
     	    (nsoption_charp(url_file) == NULL) ||
     	    (nsoption_charp(hotlist_path) == NULL) ||
    -	    (nsoption_charp(downloads_directory) == NULL) ||
    -	    (nsoption_charp(ca_path) == NULL)) {
    +	    (nsoption_charp(downloads_directory) == NULL)) {
     		NSLOG(netsurf, INFO,
     		      "Failed initialising default resource paths");
     		return NSERROR_BAD_PARAMETER;
    -- 
    2.19.2
    
    

-Relationships
+Relationships

-Notes
Vincent Sanders

~0001970

Vincent Sanders (administrator)

the issue appears to be libcurl cannot find any certificates perhaps your certificate path or file is not where libcurl is telling openssl to fetch it from?

In any case this is not a NetSurf issue but rather a libcurl/openssl/config issue
samueldr

~0002026

samueldr (reporter)

Hi!

Are you able to test whether the attached patch fixes the issue with your setup on Puppy Linux?

Thanks!
kinnison

~0002051

kinnison (administrator)

I have applied Samuel's patch, though if the reduced OS doesn't have any SSL CA bundles then this won't help. It may become necessary to add a bundle and set the ca_bundle option.
kensmith

~0002054

kensmith (reporter)

I intend to test this weekend
I looked at where the curl command looked for certs and found an empty directory.
Perhaps more work is needed on my end.
kensmith

~0002060

kensmith (reporter)

Setting the project aside
It appears my computer has some sort of problem so it won't make any more.
I may be back on this topic in distant future.
Meanwhile, let me express a thankyou to all.
I really like the idea of a compact, efficient, non-bloated browser.
+Notes

-Issue History
Date Modified Username Field Change
2019-06-18 15:03 kensmith New Issue
2019-06-21 09:58 Vincent Sanders Status new => acknowledged
2019-06-21 09:58 Vincent Sanders Note Added: 0001970
2019-07-27 22:59 samueldr File Added: 0001-GTK-prefer-using-curl-s-intrinsic-defaults-for-CURLO.patch
2019-07-27 22:59 samueldr Note Added: 0002026
2019-08-01 11:03 kinnison Note Added: 0002051
2019-08-01 14:29 kensmith Note Added: 0002054
2019-08-03 15:59 kensmith Note Added: 0002060
+Issue History