NetSurf 3.9

[greengeek]

g/g

Is the netsurf binary in usr/bin ?

Yes - it exists as a link to /usr/bin/netsurf-gtk which is also there.

Maybe ssl has something to do with my problem? I have not updated recently.

[8Geee]

Just for farts and giggles, I took the Netsurf Pup to my local McD's to check on the free but unsecured wifi. Since I notice that Netsurf has problems with "script-buttons" I thought this might fail.

It did.

No "Accept" button appeared, and thus no connection. Everything else OK up to that point.

Same thing at a local Dunkin' (Donuts). So it remains a secure browser in a back-handed way. Now if we could get the author(s) to remove SSL3, TLS1.0, and TLS1.1 from the certs, it would pass muster with Qualys Client check.

Regards
8Geee

[8Geee]

Just visited the "new and improved" Classic (old-fashioned) Yahoo Mail. FF27 rendered this close to html, FF66 rendered properly, and Netsurf3.8 was a lot closer to FF66 than FF27.

And a polite bump... has anyone got connected to free-wifi, or home wifi, or network wifi with NS3.8?

Regards
8Geee

[8Geee]

This is copy paste of the results per jamesbond's request
Some aspects of the page are missing, notably the vunerability checks. What JB posted is very close to my FF66.0.5 results. Netsurf... not good IMHO.

Protocols
TLS 1.3 No
TLS 1.2 Yes*
TLS 1.1 Yes*
TLS 1.0 Yes*
SSL 3 Yes*
SSL 2 No

Cipher Suites (in order of preference)
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)   Forward Secrecy 256
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02c)   Forward Secrecy 256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)  WEAK 256
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xc024)  WEAK 256
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)   Forward Secrecy 128
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b)   Forward Secrecy 128
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)  WEAK 128
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xc023)  WEAK 128
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f)   Forward Secrecy 256
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b)  WEAK 256
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e)   Forward Secrecy 128
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (0x67)  WEAK 128
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)  WEAK 256
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)  WEAK 256
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)  WEAK 128
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)  WEAK 128
TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x39)  WEAK 256
TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x33)  WEAK 128
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)  WEAK 128
TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0xff) -
(1) When a browser supports SSL 2, its SSL 2-only suites are shown only on the very first connection to this site. To see the suites, close all browser windows, then open this exact page directly. Don't refresh.

Protocol Details
Server Name Indication (SNI) Yes
Secure Renegotiation Yes
TLS compression No
Session tickets Yes
OCSP stapling No
Signature algorithms SHA512/RSA, SHA512/DSA, SHA512/ECDSA, SHA384/RSA, SHA384/DSA, SHA384/ECDSA, SHA256/RSA, SHA256/DSA, SHA256/ECDSA, SHA224/RSA, SHA224/DSA, SHA224/ECDSA, SHA1/RSA, SHA1/DSA, SHA1/ECDSA
Named Groups secp256r1, secp521r1, brainpoolP512r1, brainpoolP384r1, secp384r1, brainpoolP256r1, secp256k1, sect571r1, sect571k1, sect409k1, sect409r1, sect283k1, sect283r1
Next Protocol Negotiation Yes
Application Layer Protocol Negotiation No
SSL 2 handshake compatibility No

Regards
8Geee

[peebee]

NetSurf-3.9

built by AlienBob

Tested and seems OK on 32-bit ScPup, BionicPup32, UPupEE and LxPupSc

http://bear.alienbase.nl/mirrors/people ... 1alien.tgz

[Leon]

NetSurf-3.9

built by AlienBob

Tested and seems OK on 32-bit ScPup, BionicPup32, UPupEE and LxPupSc

http://bear.alienbase.nl/mirrors/people ... 1alien.tgz

Thanks.

64-bit version
http://bear.alienbase.nl/mirrors/people ... 1alien.tgz

It works in Quirky Beaver64 8.7.1.

[Moose On The Loose]

NetSurf Browser version 3.8 was released back in August 2018
It is a small and light browser with some Javascript capability.
I compiled versions of it in Wheezy and Stretch Puppies.
[....]

Correction: Couldn't on open SSL

I compiled 3.8 on puppy Lucid-528. I couldn't get the open SSL to make HTTPS function work.
It wouldn't render SVG graphics so I set it aside.

[8Geee]

Right, Moose, I have the slackware 14.0 version of Netsurf3.8, and it works OOB on my AtomicPup-19 (Slacko5.7). But sadly, OpenSSL stuff included is VERY weak with many crackable keys. And SVG is a no-go... in fact, lack of handling it messes up webpages. But it is functional and small, just don't expect much unless you have a Raspberry_Pi.

Regards
8Geee

PS: I tried the linux 3.9 version supplied in the forum... clicking on the binary a no-go. I don't know why.

Regards
8Geee

[Moose On The Loose]

Right, Moose, I have the slackware 14.0 version of Netsurf3.8, and it works OOB on my AtomicPup-19 (Slacko5.7). But sadly, OpenSSL stuff included is VERY weak with many crackable keys. And SVG is a no-go... in fact, lack of handling it messes up webpages. But it is functional and small, just don't expect much unless you have a Raspberry_Pi.

Regards
8Geee

PS: I tried the linux 3.9 version supplied in the forum... clicking on the binary a no-go. I don't know why.

Regards
8Geee

If it did security in a way that "just works" I may have dug in to see about adding at least a gray box for where the SVG would have gone.

[HiDeHo]

Hi all i have Bionic pup 64 trying to install NetSurf. after i click the Bionic64 installer file from http://smokey01.com/OscarTalks/netsurf- ... bionic.pet i get this dialogue box asking for a root password. (I don't have encryption or using fido etc so whats going on?) https://imagebin.ca/v/56Q2VflOusvS

this is preventing NetSurf from installing.