[j-nsp] out-lynxed

Carl Hayter hayter at usc.edu
Wed Sep 15 04:35:23 EDT 2004


On Wed, Sep 15, 2004 at 10:08:30AM +0200, Markus berg (JO/LMF) wrote:
> >% lynx https://download.juniper.net/software/junos/6.4R1.6/jbundle-6.4R1.6-domestic-signed.tgz
> >
> >gets
> >
> >SSL error:unable to get local issuer certificate-Continue? (y)
> >
> >randy
> 
> Using exactly the same URL gives
> 
> 1) the same SSL error, I (y)es it
> 2) the same SSL error AGAIN!, I (y)es it
> 3) login page, I login
> 4) the same SSL error AGAIN!, I (y)es it
> 5) the same SSL error AGAIN!, I (y)es it
> 6) D)ownload, file download begins

i made my perl script work again by enabling referrer and redirects,
and changing a couple links.

lynx also works:

$ lynx --version
Lynx Version 2.8.5rel.1 (04 Feb 2004)
libwww-FM 2.14, SSL-MM 1.4.1, OpenSSL 0.9.7d
Built on linux-gnu Jul  5 2004 15:13:26

and i have no error messages of any sort and can browse just fine.

maybe you're missing a cert?

$ ls -l /etc/ssl/certs/
total 41
lrwxrwxrwx  1 root root    9 Jul  3 08:16 052eae11.0 -> tjhCA.pem
lrwxrwxrwx  1 root root   12 Jul  3 08:16 18d46017.0 -> vsigntca.pem
lrwxrwxrwx  1 root root   12 Jul  3 08:16 1e49180d.0 -> RegTP-6R.pem
lrwxrwxrwx  1 root root   12 Jul  3 08:16 1ef89214.0 -> nortelCA.pem
lrwxrwxrwx  1 root root   11 Jul  3 08:16 1f6c59cd.0 -> ca-cert.pem
lrwxrwxrwx  1 root root   11 Jul  3 08:16 24867d38.0 -> dsa-pca.pem
lrwxrwxrwx  1 root root   10 Jul  3 08:16 2edf7016.0 -> vsign1.pem
lrwxrwxrwx  1 root root   12 Jul  3 08:16 3ecf89a3.0 -> ICE-user.pem
lrwxrwxrwx  1 root root   12 Jul  3 08:16 69ea794f.0 -> RegTP-4R.pem
lrwxrwxrwx  1 root root   10 Jul  3 08:16 6bee6be3.0 -> ICE-CA.pem
lrwxrwxrwx  1 root root   10 Jul  3 08:16 73912336.0 -> dsa-ca.pem
lrwxrwxrwx  1 root root   10 Jul  3 08:16 7651b327.0 -> vsign3.pem
lrwxrwxrwx  1 root root    9 Jul  3 08:16 8c401b31.0 -> timCA.pem
lrwxrwxrwx  1 root root   12 Jul  3 08:16 8caad35e.0 -> pca-cert.pem
lrwxrwxrwx  1 root root   11 Jul  3 08:16 a99c5886.0 -> rsa-cca.pem
lrwxrwxrwx  1 root root   12 Jul  3 08:16 adbec561.0 -> ICE-root.pem
lrwxrwxrwx  1 root root   10 Jul  3 08:16 b5f329fa.0 -> vsign2.pem
lrwxrwxrwx  1 root root   12 Jul  3 08:16 c33a80d4.0 -> thawteCp.pem
lrwxrwxrwx  1 root root   12 Jul  3 08:16 d4e39186.0 -> RegTP-5R.pem
lrwxrwxrwx  1 root root   12 Jul  3 08:16 ddc328ff.0 -> thawteCb.pem
lrwxrwxrwx  1 root root   11 Jul  3 08:16 f3e90025.0 -> factory.pem
lrwxrwxrwx  1 root root   11 Jul  3 08:16 f73e89fd.0 -> vsignss.pem
-rw-r--r--  1 root root 2945 Jul  3 08:15 ICE-CA.pem
-rw-r--r--  1 root root 2314 Jul  3 08:15 ICE-root.pem
-rw-r--r--  1 root root 3240 Jul  3 08:15 ICE-user.pem
-rw-r--r--  1 root root 1201 Jul  3 08:15 RegTP-4R.pem
-rw-r--r--  1 root root 1201 Jul  3 08:15 RegTP-5R.pem
-rw-r--r--  1 root root 1201 Jul  3 08:15 RegTP-6R.pem
-rw-r--r--  1 root root 1953 Jul  3 08:15 ca-cert.pem
-rw-r--r--  1 root root 2264 Jul  3 08:15 dsa-ca.pem
-rw-r--r--  1 root root 2674 Jul  3 08:15 dsa-pca.pem
-rw-r--r--  1 root root  859 Jul  3 08:15 factory.pem
-rw-r--r--  1 root root  900 Jul  3 08:15 nortelCA.pem
-rw-r--r--  1 root root 1953 Jul  3 08:15 pca-cert.pem
-rw-r--r--  1 root root 1017 Jul  3 08:15 rsa-cca.pem
-rw-r--r--  1 root root 1127 Jul  3 08:15 thawteCb.pem
-rw-r--r--  1 root root 1155 Jul  3 08:15 thawteCp.pem
-rw-r--r--  1 root root  753 Jul  3 08:15 timCA.pem
-rw-r--r--  1 root root  871 Jul  3 08:15 tjhCA.pem
-rw-r--r--  1 root root  984 Jul  3 08:15 vsign1.pem
-rw-r--r--  1 root root  989 Jul  3 08:15 vsign2.pem
-rw-r--r--  1 root root  984 Jul  3 08:15 vsign3.pem
-rw-r--r--  1 root root  976 Jul  3 08:15 vsignss.pem
-rw-r--r--  1 root root 1084 Jul  3 08:15 vsigntca.pem

or your lynx defaults are different?  i don't know if you can
configure the default off/on for the flags at compile-time.  or which
flags might be a problem for that matter.  :(

$ lynx --help
USAGE: lynx [options] [file]
Options are:
  -                 receive options and arguments from stdin
  -accept_all_cookies 
                    accept cookies without prompting if Set-Cookie handling
                    is on (off)
  -anonymous        apply restrictions for anonymous account,
                    see also -restrictions
  -assume_charset=MIMEname
                    charset for documents that don't specify it
  -assume_local_charset=MIMEname
                    charset assumed for local files
  -assume_unrec_charset=MIMEname
                    use this instead of unrecognized charsets
  -auth=id:pw       authentication information for protected documents
  -base             prepend a request URL comment and BASE tag to text/html
                    outputs for -source dumps
  -bibhost=URL      local bibp server (default http://bibhost/)
  -book             use the bookmark page as the startfile (off)
  -buried_news      toggles scanning of news articles for buried references (on)
  -cache=NUMBER     NUMBER of documents cached in memory
  -case             enable case sensitive user searching (off)
  -center           toggle center alignment in HTML TABLE (off)
  -cfg=FILENAME     specifies a lynx.cfg file other than the default
  -child            exit on left-arrow in startfile, and disable save to disk
  -cmd_log=FILENAME log keystroke commands to the given file
  -cmd_script=FILENAME
                    read keystroke commands from the given file
                    (see -cmd_log)
  -connect_timeout=N
                    set the N-second connection timeout (18000)
  -cookie_file=FILENAME
                    specifies a file to use to read cookies
  -cookie_save_file=FILENAME
                    specifies a file to use to store cookies
  -cookies          toggles handling of Set-Cookie headers (on)
  -core             toggles forced core dumps on fatal errors (off)
  -crawl            with -traversal, output each page to a file
                    with -dump, format output as with -traversal, but to stdout
  -curses_pads      uses curses pad feature to support left/right shifting (on)
  -debug_partial    incremental display stages with MessageSecs delay (off)
  -delay=NNN        set NNN-second delay at statusline message (0.000)
  -display=DISPLAY  set the display variable for X exec'ed programs
  -display_charset=MIMEname
                    charset for the terminal output
  -dont_wrap_pre    inhibit wrapping of text in <pre> when -dump'ing and
                    -crawl'ing, mark wrapped lines in interactive session (off)
  -dump             dump the first file to stdout and exit
  -editor=EDITOR    enable edit mode with specified editor
  -emacskeys        enable emacs-like key movement (off)
  -enable_scrollback 
                    toggles compatibility with comm programs' scrollback
                    keys (may be incompatible with some curses packages) (off)
  -error_file=FILE  write the HTTP status code here
  -force_empty_hrefless_a 
                    force HREF-less 'A' elements to be empty (close them as
                    soon as they are seen) (off)
  -force_html       forces the first document to be interpreted as HTML (off)
  -force_secure     toggles forcing of the secure flag for SSL cookies (off)
  -forms_options    toggles forms-based vs old-style options menu (on)
  -from             toggle transmission of From headers (on)
  -ftp              disable ftp access (off)
  -get_data         user data for get forms, read from stdin,
                    terminated by '---' on a line
  -head             send a HEAD request (off)
  -help             print this usage message
  -hiddenlinks=[option]
                    hidden links: options are merge, listonly, or ignore
  -historical       toggles use of '>' or '-->' as terminator for comments (off)
  -homepage=URL     set homepage separate from start page
  -image_links      toggles inclusion of links for all images (off)
  -index=URL        set the default index file to URL
  -ismap            toggles inclusion of ISMAP links when client-side
                    MAPs are present (off)
  -link=NUMBER      starting count for lnk#.dat files produced by -crawl (0)
  -localhost        disable URLs that point to remote hosts (off)
  -lss=FILENAME     specifies a lynx.lss file other than the default
  -mime_header      include mime headers and force source dump
  -minimal          toggles minimal versus valid comment parsing (off)
  -newschunksize=NUMBER
                    number of articles in chunked news listings
  -newsmaxchunk=NUMBER
                    maximum news articles in listings before chunking
  -nobold           disable bold video-attribute
  -nobrowse         disable directory browsing
  -nocc             disable Cc: prompts for self copies of mailings (off)
  -nocolor          turn off color support
  -nofilereferer    disable transmission of Referer headers for file URLs (on)
  -nolist           disable the link list feature in dumps (off)
  -nolog            disable mailing of error messages to document owners (on)
  -nonrestarting_sigwinch 
                    make window size change handler non-restarting (off)
  -nopause          disable forced pauses for statusline messages
  -noprint          disable some print functions, like -restrictions=print (off)
  -noredir          don't follow Location: redirection (off)
  -noreferer        disable transmission of Referer headers (off)
  -noreverse        disable reverse video-attribute
  -nostatus         disable the miscellaneous information messages (off)
  -nounderline      disable underline video-attribute
  -number_fields    force numbering of links as well as form input fields (off)
  -number_links     force numbering of links (off)
  -partial          toggles display partial pages while downloading (on)
  -partial_thres    [=NUMBER]
                    number of lines to render before repainting display
                    with partial-display logic (-1)
  -pauth=id:pw      authentication information for protected proxy server
  -popup            toggles handling of single-choice SELECT options via
                    popup windows or as lists of radio buttons (off)
  -post_data        user data for post forms, read from stdin,
                    terminated by '---' on a line
  -preparsed        show parsed text/html with -source and in source view
                    to visualize how lynx behaves with invalid HTML (off)
  -prettysrc        do syntax highlighting and hyperlink handling in source
                    view (off)
  -print            enable print functions (DEFAULT), opposite of -noprint (on)
  -pseudo_inlines   toggles pseudo-ALTs for inlines with no ALT string (on)
  -raw              toggles default setting of 8-bit character translations
                    or CJK mode for the startup character set (off)
  -realm            restricts access to URLs in the starting realm (off)
  -reload           flushes the cache on a proxy server
                    (only the first document affected) (off)
  -restrictions=[options]
                    use -restrictions to see list
  -resubmit_posts   toggles forced resubmissions (no-cache) of forms with
                    method POST when the documents they returned are sought
                    with the PREV_DOC command or from the History List (off)
  -rlogin           disable rlogins (off)
  -scrollbar        toggles showing scrollbar (off)
  -scrollbar_arrow  toggles showing arrows at ends of the scrollbar (on)
  -selective        require .www_browsable files to browse directories
  -short_url        enables examination of beginning and end of long URL in
                    status line (off)
  -show_cursor      toggles hiding of the cursor in the lower right corner (on)
  -show_rate        toggles display of transfer rate (on)
  -soft_dquotes     toggles emulation of the old Netscape and Mosaic bug which
                    treated '>' as a co-terminator for double-quotes and tags (off)
  -source           dump the source of the first file to stdout and exit
  -stack_dump       disable SIGINT cleanup handler (off)
  -startfile_ok     allow non-http startfile and homepage with -validate (off)
  -stdin            read startfile from standard input (off)
  -tagsoup          use TagSoup rather than SortaSGML parser (off)
  -telnet           disable telnets (off)
  -term=TERM        set terminal type to TERM
  -tlog             toggles use of a Lynx Trace Log for the current session (on)
  -tna              turn on "Textfields Need Activation" mode (off)
  -trace            turns on Lynx trace mode (off)
  -trace_mask       customize Lynx trace mode (0)
  -traversal        traverse all http links derived from startfile
  -trim_input_fields trim input text/textarea fields in forms (off)
  -underline_links  toggles use of underline/bold attribute for links (off)
  -underscore       toggles use of _underline_ format in dumps (off)
  -use_mouse        turn on mouse support (off)
  -useragent=Name   set alternate Lynx User-Agent header
  -validate         accept only http URLs (meant for validation)
                    implies more restrictions than -anonymous, but
                    goto is allowed for http and https (off)
  -verbose          toggles [LINK], [IMAGE] and [INLINE] comments 
                    with filenames of these images (on)
  -version          print Lynx version information
  -vikeys           enable vi-like key movement (off)
  -width=NUMBER     screen width for formatting of dumps (default is 80)
  -with_backspaces  emit backspaces in output if -dumping or -crawling
                    (like 'man' does) (off)

hope you get it working.

----
Carl
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 185 bytes
Desc: not available
Url : https://puck.nether.net/pipermail/juniper-nsp/attachments/20040915/4efb7fd6/attachment.bin


More information about the juniper-nsp mailing list