Re: lynx-dev Segfault with https

[Henry Nelson]

> I installed openssl 0.9.7c.  I installed mod_ssl's PEM file where lynx
              ^^^^^^^^^^^^^^(1)            ^^^^^^^^^^^^^(2)
Here: 1) Lynx 2.8.5dev.16, SSL-MM/1.4.1 OpenSSL/0.9.7b.
      2) Don't know "mod_ssl's PEM file".

> can find it.  [Howto verify: connection to https://www.ibm.com goes
> without any warning.]
> 
> Now I try to connect to
> https://mirbsd.bsdadvocacy.org:8890/active/cvsweb.cgi/src/etc/

The problems with this site wrt Lynx are discussed in the thread
"FORCE_SSL_PROMPT:NO" in July, 2003, (see posts by Thorsten Glaser)
and slightly more recently in Sep., 2003, same thread.

My meager understanding was that there was a problem with the port and
with case sensitivity.  A patch has already been submitted??

>   If I answer no: connection succeeds.  End of story.
> 
>   If I answer yes: I'm presented with the same question again.

This is basically the opposite for me.  The _five_ cases are outlined
below.  All of them seem logical and correct to me.
(1)
    "SSL error:unable to get local issuer certificate-Continue? (y)"
y
    "SSL error:host(mirbsd.bsdadvocacy.org:8890)!=
     cert(mirbsd.bsdadvocacy.org)-Continue? (y)"
y
    get the page
(2)
    "SSL error:unable to get local issuer certificate-Continue? (y)"
y
    "SSL error:host(mirbsd.bsdadvocacy.org:8890)!=
     cert(mirbsd.bsdadvocacy.org)-Continue? (y)"
n
    nothing (present page displayed; goto aborted)
(3)
    "SSL error:unable to get local issuer certificate-Continue? (y)"
n
    "SSL error:unable to get local issuer certificate-Continue? (y)"
n
    Alert message => present page displayed (goto aborted)
(4)
    "SSL error:unable to get local issuer certificate-Continue? (y)"
n
    "SSL error:unable to get local issuer certificate-Continue? (y)"
y
    "SSL error:host(mirbsd.bsdadvocacy.org:8890)!=
     cert(mirbsd.bsdadvocacy.org)-Continue? (y)"
y
    get the page
(5)
    "SSL error:unable to get local issuer certificate-Continue? (y)"
n
    "SSL error:unable to get local issuer certificate-Continue? (y)"
y
    "SSL error:host(mirbsd.bsdadvocacy.org:8890)!=
     cert(mirbsd.bsdadvocacy.org)-Continue? (y)"
n
    nothing (present page displayed; goto aborted)

> a) Why?  The trace shows "connection without TSL".  Should not the
> prompt reflect the difference?  Should not the difference be explained
> somewhere?
> 
>      b) If I answer yes: immediate segfault (in some non-trivial place,
>         like inside fopen())
> 
>      c) If I answer no: half of the page is loaded, then I get a segfault.

You lost me.  When did the segfault come in?  After you turned on trace?
Without turning on trace, I get no segfault with any of the five cases above.

__Henry

; To UNSUBSCRIBE: Send "unsubscribe lynx-dev" to address@hidden