Hi Rodrigo,

On Tue, 27 Aug 2024 23:09:42 +0200
Rodrigo Arias <rodar...@gmail.com> wrote:

> >> >dillo-dev.auriga.wearlab.narkive.com:443
> >> >
> >> >Is this site just broken/misconfigured?  
> >>
> >> Cannot reproduce with LibreSSL 3.9.2 on Linux.
> >> ...
> >> Can you test with the latest LibreSSL 3.9.2?
> >>
> >> Is this it happening with the proxy enabled? Also, which user agent
> >> are you using in curl and Dillo?  
> >
> >It happens with the stock user agent and no proxy, same with curl.
> >I'm running the latest snapshot of OpenBSD, which would have the
> >latest version of LibreSSL.
> >
> >I don't care about that site, my only worry is that the error can
> >crash Dillo.  
> 
> If it happens it is a bug on Dillo side as it is not handling all 
> errors, regardless of the site. I would like to reproduce it to fix
> it.

Certainly. Ideally this should not crash Dillo, no matter how obscure.

> >This could be an OpenBSD specific issue which wouldn't show up on 
> >Linux. 
> >
> It could be, but I would first reject that is not due to mismatch of 
> versions.
> 
> The last LibreSSL as per https://www.libressl.org/ is:
> 
> > The latest stable release is 3.9.2  
> 
> Which should be printed in the first lines when starting Dillo:
> 
> > TLS library: LibreSSL 3.9.2  
> 
> If it says 3.9.0, then Dillo is not using the last release.

I don't know why it shows that version number instead of the latest
one, this is a fresh install of a recent snapshot.

Anyway, I installed 3.9.2 from source and built Dillo against that.
Now it reports the correct version, but the crash still happens the
same.

I guess we would need to hear from some other OpenBSD users to confirm
if this a real issue, or if its something whacky on my end. 

I do have an older OpenBSD system which uses LibreSSL 3.6.0, and it does
not exhibit the problem. But on 3 newer systems here the problem occurs.

Here is an easy way to confirm using only OpenBSD base tools:

$ ftp https://narkive.com/test 
Trying 149.248.211.108...
TLS handshake failure: handshake failed: unexpected EOF

This doesn't happen on any other site that I have seen.

Maybe I should report this to the OpenBSD/LibreSSL people as well, so
I'm CC'ing tb@

Regards,
Alex
_______________________________________________
Dillo-dev mailing list -- dillo-dev@mailman3.com
To unsubscribe send an email to dillo-dev-le...@mailman3.com

Reply via email to