One idea would be to special case the existing https:// support and
replace it with a warning message that https:// was disabled due to a
lack of support for full verification.

I had a quick look and it doesn't seem to need a particularly large
change to the source code, if the only change is to https support.

However, dillo is gtk1.2 - the extra gtk1.2 dependencies somewhat
counteract the benefits of having a "small" web browser in the first
place - especially now that so few other applications on devices likely
to need dillo would actually want gtk1.2 at all.

There is a new upstream version, dillo-2.0:
http://misc.andi.de1.cc/dillo/

This version build-depends on libgtk2.0-dev but although packages are
available on the above site, the package itself fails to build due to a
problem in fltk:

g++ -DHAVE_CONFIG_H -I. -I..   -I/usr/local/include -I/usr/include/freetype2 
-D_THREAD_SAFE -D_REENTRANT -g -O2 -Wall -W -Wno-unused-parameter -MT 
libDw_fltk_a-fltkcomplexbutton.o -MD -MP -MF 
.deps/libDw_fltk_a-fltkcomplexbutton.Tpo -c -o libDw_fltk_a-fltkcomplexbutton.o 
`test -f 'fltkcomplexbutton.cc' || echo './'`fltkcomplexbutton.cc
fltkcomplexbutton.cc:20:25: error: fltk/events.h: No such file or directory
fltkcomplexbutton.cc:21:25: error: fltk/damage.h: No such file or directory
fltkcomplexbutton.cc:22:24: error: fltk/Group.h: No such file or directory
fltkcomplexbutton.cc:23:22: error: fltk/Box.h: No such file or directory
fltkcomplexbutton.cc:155:23: error: fltk/draw.h: No such file or directory

The upstream package does work and it does exclude https:// support:

$ dillo https://launchpad.net
Hi!

  This is the https dpi that just got a request to send
  the following HTTP query:
{
GET / HTTP/1.1
Connection: close
Accept-Charset: utf-8,*;q=0.8
Accept-Encoding: gzip
Host: launchpad.net
Referer: https://launchpad.net/
User-Agent: Dillo/2.0


}

  *** Dillo's prototype plugin for https support is disabled now ***

  If you want to test this alpha support code, just remove
  line 72 from dpi/https.c, recompile and reinstall.

  (beware that this https support is very limited now)

  To use https and SSL, you must have 
  the OpenSSL development libraries installed.  Check your
  O/S distribution provider, or check out
  www.openssl.org


I'll continue looking at how to get the new version to build in unstable.

-- 


Neil Williams
=============
http://www.data-freedom.org/
http://www.linux.codehelp.co.uk/
http://e-mail.is-not-s.ms/

Attachment: pgpRuzasqjFeb.pgp
Description: PGP signature

Reply via email to