Page 3 of 3
Posted: Mon 13 May 2019, 20:03
by greengeek
8Geee wrote:g/g
Is the netsurf binary in usr/bin ?
Yes - it exists as a link to /usr/bin/netsurf-gtk which is also there.
Maybe ssl has something to do with my problem? I have not updated recently.
Posted: Thu 16 May 2019, 23:22
by 8Geee
Just for farts and giggles, I took the Netsurf Pup to my local McD's to check on the free but unsecured wifi. Since I notice that Netsurf has problems with "script-buttons" I thought this might fail.
It did.
No "Accept" button appeared, and thus no connection. Everything else OK up to that point.
Same thing at a local Dunkin' (Donuts). So it remains a secure browser in a back-handed way.
Now if we could get the author(s) to remove SSL3, TLS1.0, and TLS1.1 from the certs, it would pass muster with Qualys Client check.
Regards
8Geee
Update
Posted: Mon 03 Jun 2019, 23:10
by 8Geee
Just visited the "new and improved" Classic (old-fashioned) Yahoo Mail. FF27 rendered this close to html, FF66 rendered properly, and Netsurf3.8 was a lot closer to FF66 than FF27.
And a polite bump... has anyone got connected to free-wifi, or home wifi, or network wifi with NS3.8?
Regards
8Geee
Qualys Client test Netsurf3.8-slacko14.0
Posted: Wed 05 Jun 2019, 21:38
by 8Geee
This is copy paste of the results per jamesbond's request
Some aspects of the page are missing, notably the vunerability checks. What JB posted is very close to my FF66.0.5 results. Netsurf... not good IMHO.
Protocols
TLS 1.3 No
TLS 1.2 Yes*
TLS 1.1 Yes*
TLS 1.0 Yes*
SSL 3 Yes*
SSL 2 No
Cipher Suites (in order of preference)
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) Forward Secrecy 256
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02c) Forward Secrecy 256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028) WEAK 256
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xc024) WEAK 256
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) Forward Secrecy 128
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) Forward Secrecy 128
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) WEAK 128
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xc023) WEAK 128
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f) Forward Secrecy 256
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b) WEAK 256
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e) Forward Secrecy 128
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (0x67) WEAK 128
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) WEAK 256
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) WEAK 256
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) WEAK 128
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009) WEAK 128
TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x39) WEAK 256
TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x33) WEAK 128
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) WEAK 128
TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0xff) -
(1) When a browser supports SSL 2, its SSL 2-only suites are shown only on the very first connection to this site. To see the suites, close all browser windows, then open this exact page directly. Don't refresh.
Protocol Details
Server Name Indication (SNI) Yes
Secure Renegotiation Yes
TLS compression No
Session tickets Yes
OCSP stapling No
Signature algorithms SHA512/RSA, SHA512/DSA, SHA512/ECDSA, SHA384/RSA, SHA384/DSA, SHA384/ECDSA, SHA256/RSA, SHA256/DSA, SHA256/ECDSA, SHA224/RSA, SHA224/DSA, SHA224/ECDSA, SHA1/RSA, SHA1/DSA, SHA1/ECDSA
Named Groups secp256r1, secp521r1, brainpoolP512r1, brainpoolP384r1, secp384r1, brainpoolP256r1, secp256k1, sect571r1, sect571k1, sect409k1, sect409r1, sect283k1, sect283r1
Next Protocol Negotiation Yes
Application Layer Protocol Negotiation No
SSL 2 handshake compatibility No
Regards
8Geee
NetSurf-3.9
Posted: Mon 07 Oct 2019, 13:53
by peebee
NetSurf-3.9
built by AlienBob
Tested and seems OK on 32-bit ScPup, BionicPup32, UPupEE and LxPupSc
http://bear.alienbase.nl/mirrors/people ... 1alien.tgz
Re: NetSurf-3.9
Posted: Mon 07 Oct 2019, 21:46
by Leon
Thanks.
64-bit version
http://bear.alienbase.nl/mirrors/people ... 1alien.tgz
It works in Quirky Beaver64 8.7.1.
Re: NetSurf 3.8
Posted: Tue 08 Oct 2019, 02:04
by Moose On The Loose
OscarTalks wrote:NetSurf Browser version 3.8 was released back in August 2018
It is a small and light browser with some Javascript capability.
I compiled versions of it in Wheezy and Stretch Puppies.
[....]
Correction: Couldn't on open SSL
I compiled 3.8 on puppy Lucid-528. I couldn't get the open SSL to make HTTPS function work.
It wouldn't render SVG graphics so I set it aside.
Posted: Wed 09 Oct 2019, 02:15
by 8Geee
Right, Moose, I have the slackware 14.0 version of Netsurf3.8, and it works OOB on my AtomicPup-19 (Slacko5.7). But sadly, OpenSSL stuff included is VERY weak with many crackable keys. And SVG is a no-go... in fact, lack of handling it messes up webpages. But it is functional and small, just don't expect much unless you have a Raspberry_Pi.
Regards
8Geee
PS: I tried the linux 3.9 version supplied in the forum... clicking on the binary a no-go. I don't know why.
Regards
8Geee
Posted: Wed 09 Oct 2019, 12:53
by Moose On The Loose
8Geee wrote:Right, Moose, I have the slackware 14.0 version of Netsurf3.8, and it works OOB on my AtomicPup-19 (Slacko5.7). But sadly, OpenSSL stuff included is VERY weak with many crackable keys. And SVG is a no-go... in fact, lack of handling it messes up webpages. But it is functional and small, just don't expect much unless you have a Raspberry_Pi.
Regards
8Geee
PS: I tried the linux 3.9 version supplied in the forum... clicking on the binary a no-go. I don't know why.
Regards
8Geee
If it did security in a way that "just works" I may have dug in to see about adding at least a gray box for where the SVG would have gone.
NetSurf 3.9 error
Posted: Tue 24 Dec 2019, 13:07
by HiDeHo
Hi all i have Bionic pup 64 trying to install NetSurf. after i click the Bionic64 installer file from
http://smokey01.com/OscarTalks/netsurf- ... bionic.pet i get this dialogue box asking for a root password. (I don't have encryption or using fido etc so whats going on?)
https://imagebin.ca/v/56Q2VflOusvS
this is preventing NetSurf from installing.