Re: Emacs, GnuTLS, and DST Root CA X3
Jib Style via Cygwin writes: > My final question would be if ca-certificates-letsencrypt will > eventually be merged into ca-certificates? No unless upstream choses to do that, which seems unlikely. The ca-certificates-letsencrypt package will be obsoleted as soon as certificates (or libraries / applications) that need the workaround cease to exist in the wild. I think the maximum lifetime of client certificates is 60 days, but the intermediate cert validity using the cross-signed chain that triggers this problem is much longer than that (for compatibility with older Android versions). Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ DIY Stuff: http://Synth.Stromeko.net/DIY.html -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: Lighttpd and Perl
Hi again, Thanks for the pro tip. I am trying to register with the lighttpd forum, but the activation email has yet to make it to my inbox. Any tips? Thanks, -Andy > On Sep 30, 2021, at 4:28 PM, gs-cygwin@gluelogic.com wrote: > > On Thu, Sep 30, 2021 at 10:07:24AM +, Andy Romens via Cygwin wrote: >> Good morning all, >> >> I am running into a bit of what appears a noob issue with lighttpd. >> >> Short and sweet version is I am transitioning from Apache to lighttpd. >> >> Gotten pretty far, except now I am having issues with parsing. >> >> Our website will run a command in a browser like >> ‘server/cgi-bin/myscript.pl?prod,eventhist’ in the web browser. With Apache, >> it will split everything after the ‘?’ As variables, and return a nicely >> formatted html result page. >> >> However, after switching to lighttpd, it’s not passing those variables >> anymore. When I run the script in Cygwin, it works just fine. >> >> I’ve been banging my head on this problem for a few days now, so any >> assistance would be greatly appreciated. > > I'd suggest starting at > https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.lighttpd.net%2F%23Documentation&data=04%7C01%7C%7C722d1ee7355143db178608d9845939b8%7C84df9e7fe9f640afb435%7C1%7C0%7C637686341017068026%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=hSrAta1EEh35EgYUBixhVNG%2FWc8jbg94uM3mwrq2gX4%3D&reserved=0 > and > carefully reading through the link for "How to get help". Then, you > can post your improved questions in the lighttpd Support Forum, > perhaps with more details about your script. > > When running CGI scripts such as "myscript.pl", lighttpd creates a > standard CGI environment [1], including environment variables such as > QUERY_STRING, so the problem is likely in your Perl script, and likely > a misunderstanding of standard CGI environment variables. > > [1] The Common Gateway Interface (CGI) Version 1.1 > > https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Frfc3875&data=04%7C01%7C%7C722d1ee7355143db178608d9845939b8%7C84df9e7fe9f640afb435%7C1%7C0%7C637686341017068026%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=TBkSGPSbVgIgwjXq7oya4gAKG1ufmm%2F6%2FJgk4bCW3Hc%3D&reserved=0 -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: Emacs, GnuTLS, and DST Root CA X3
Good news! My problem is solved. > From the ca-certificates-letsencrypt-2.50-3 announcement: > > > It may be necessary to also remove trust for the already expired DST > > X3 root CA > > I'm still trying to figure out _how_ to do this, although I'm not sure > whether it should help my situation. I'll report back with the result. This did the trick. Regarding the outdated version of GnuTLS available in Cygwin, I see that these trust anchor changes constitute a workaround. Furthermore, I see that ca-certificates-2.50-4 and ca-certificates-letsencrypt-2.50-4 were released, which automate the above quoted process. Very nice! My final question would be if ca-certificates-letsencrypt will eventually be merged into ca-certificates? I am now happily browsing the web again in Cygwin Emacs. Thank you to this mailing list and those in IRC who helped me debug the problem. I learned a lot about certificate trust chains in the process! -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
[ANNOUNCEMENT] Updated: ca-certificates-2.50-4
The following packages have been uploaded to the Cygwin distribution: * ca-certificates-2.50-4 * ca-certificates-letsencrypt-2.50-4 Mozilla's CA root certificates for use with OpenSSL, NSS, GnuTLS, and other software that handles certificate verification. This update adds the ca-certificates-letsencrypt package, which when installed will make the ISRG R3 intermediate CA a trust anchor and removes trust for the already expired DST X3 root CA (this should strictly not be necessary, but works around bugs present in some libraries in how alternate chains are constructed and verified). This will allow to successfully verify certificates using the Letsencrypt legacy cert chain in certain applications. Install this package when you currently have trouble accessing sites (due to validation complaining about an expired certificate) that had no problems until about September 30 or October 1 2021 depending on your timezone. Please report to the main Cygwin mailing list if you know of an example that still doesn't work for you (with details for reproducing the validation or application error). -- *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to unsubscribe from the cygwin-announce mailing list, look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain@cygwin.com If you need more information on unsubscribing, start reading here: http://sourceware.org/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL. -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: GNU Emacs 28.0.50 crash (emacs-w32)
On 10/6/2021 11:38 AM, Ken Brown via Cygwin wrote: On 10/6/2021 10:22 AM, Jim Reisert AD1C wrote: The test release of GNU Emacs 28.0.50 crashed on me when using emacs-w32. I can repeat this every time. I attached the trace and stackdump. Windows 11 Pro 64-bit Take Command 27.01.24 x64 Opened a text file using emacs-w32 Ctrl-X Ctrl-C to exit Exit Emacs I did not make any changes to the text file Could this be the following problem that I mentioned in the release announcement? Compilation is done asynchronously, with a log in a buffer called *Async-native-compile-log*. If you run emacs-w32 and exit while a compilation is in progress, you might see a dialog box saying that emacs has aborted and asking if you want to attach a debugger. Just say No. If this annoys you, check the compilation buffer before exiting, and wait for the "Compilation finished" message. I'll add one more thing that I didn't know when I wrote that: You can customize the variable native-comp-async-query-on-exit if you want to be warned that there are compilations in process when you exit. Having said that, I'll still try to track down the cause of the crash. Ken -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: GNU Emacs 28.0.50 crash (emacs-w32)
On 10/6/2021 10:22 AM, Jim Reisert AD1C wrote: The test release of GNU Emacs 28.0.50 crashed on me when using emacs-w32. I can repeat this every time. I attached the trace and stackdump. Windows 11 Pro 64-bit Take Command 27.01.24 x64 Opened a text file using emacs-w32 Ctrl-X Ctrl-C to exit Exit Emacs I did not make any changes to the text file Could this be the following problem that I mentioned in the release announcement? Compilation is done asynchronously, with a log in a buffer called *Async-native-compile-log*. If you run emacs-w32 and exit while a compilation is in progress, you might see a dialog box saying that emacs has aborted and asking if you want to attach a debugger. Just say No. If this annoys you, check the compilation buffer before exiting, and wait for the "Compilation finished" message. I'll add one more thing that I didn't know when I wrote that: You can customize the variable native-comp-async-query-on-exit if you want to be warned that there are compilations in process when you exit. Ken -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: GNU Emacs 28.0.50 crash (emacs-w32)
> The test release of GNU Emacs 28.0.50 crashed on me when using > emacs-w32. I can repeat this every time. I attached the trace and > stackdump. Emacs in an X window with this same file did NOT crash. It seems to be something particular to emacs-w32 or a non-X environment. -- Jim Reisert AD1C, , https://www.ad1c.us -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
GNU Emacs 28.0.50 crash (emacs-w32)
The test release of GNU Emacs 28.0.50 crashed on me when using emacs-w32. I can repeat this every time. I attached the trace and stackdump. Windows 11 Pro 64-bit Take Command 27.01.24 x64 Opened a text file using emacs-w32 Ctrl-X Ctrl-C to exit Exit Emacs I did not make any changes to the text file -- Jim Reisert AD1C, , https://www.ad1c.us Backtrace: 0x100608b80 0x1005fe058 0x1004bf5ea 0x1006001ca 0x10060029b 0x100602776 0x10060278a 0x1800640dd 0x18018f508 0x8020f6600 Backtrace: 0x100608b80 0x1005fe058 0x1004bf5ea 0x1006001ca 0x10060029b 0x100602776 0x10060278a 0x1800640dd 0x18018f508 0x10060a258 Backtrace: 0x100608b80 0x1005fe058 0x1004bf5ea 0x1006001ca 0x10060029b 0x100602776 0x10060278a 0x1800640dd 0x18018f508 0x10060a258 emacs-w32.exe.stackdump Description: Binary data -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: Emacs, GnuTLS, and DST Root CA X3
I followed the recent announcements, but unfortunately the problem persists. I tested on two computers, with the following ca-certificates versions: - ca-certificates-2.40-1 - ca-certificates-2.50-1 - ca-certificates-2.50-2 - ca-certificates-2.50-3 - ca-certificates-2.50-3 AND ca-certificates-letsencrypt-2.50-3 In all cases, the result was the same. >From the ca-certificates-letsencrypt-2.50-3 announcement: > It may be necessary to also remove trust for the already expired DST > X3 root CA I'm still trying to figure out _how_ to do this, although I'm not sure whether it should help my situation. I'll report back with the result. Some (non-Cygwin) Emacs users reported that GnuTLS >= 3.6.14 works. -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Prompt wrapping lines problems
Hello,I have the problem described in this page :https://superuser.com/questions/283236/cygwin-bash-prompt-is-wrapping-lines-on-the-same-line I've tried everything to solved this but I didn't succeed. I have to reinstall again a previous version of cygwin... So please, for the next version of cygwin, resolved this in the package, because it totally drive me crazy... Thanks a lot and thanks for your great work for the cygwin software. -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: Emacs, GnuTLS, and DST Root CA X3
On 2021-10-05 02:22, Jib Style via Cygwin wrote: Several days ago, root certificate "DST Root CA X3" expired, breaking TLS for many clients. I believe the lastest version of GnuTLS available on Cygwin (3.6.9, 2 years ago) is impacted. Is anyone able to publish a newer version of this package? This impacts me as I use Cygwin Emacs and can no longer open TLS connections to many hosts for the purposes of web browsing and newsgroups. I believe all other Cygwin Emacs users would be impacted also. Repro steps: 1. Install Cygwin default packages. 2. Install Cygwin package emacs-w32 27.2-1. 3. In Cygwin terminal: emacs -nw -Q 4. In Emacs: M-: (url-retrieve-synchronously "https://gnu.org";) Expected: Emacs should load webpage and return a buffer. Actual: Emacs network security manager says certificate expired/could not be verified. After discussing this in the #emacs Libera.chat IRC, the consensus was that the old GnuTLS version is to blame, and that a newer version would fix the problem. Does anyone have similar issues or tips on how to resolve? Thank you. The latest ca-certificates package from Mozilla has been announced as re-released three times recently to attempt to address all the issues. Please read the latest mailing list announcement: [ANNOUNCEMENT] Updated: ca-certificates-2.50-3 https://cygwin.com/pipermail/cygwin/2021-October/249569.html -- Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada This email may be disturbing to some readers as it contains too much technical detail. Reader discretion is advised. [Data in binary units and prefixes, physical quantities in SI.] -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
