16 Nov
2020
16 Nov
'20
10:34 a.m.
If you have an older pre-C99 system, I've backported a TLS 1.2 library to gcc
versions as early as 2.5 as long as it has 64-bit ints (long long, usually)
and stdarg.h.
https://github.com/classilla/cryanc
As a test, with a suitably agreeable (or confusable) browser, here are
various period browsers visiting modern HTTPS sites through carl, the
included demonstration application which can also act as a TLS proxy. The
proxy is running on the same machine, no tricks! OmniWeb, at least two
flavours of NCSA Mosaic and MacLynx are all demonstrated.
https://oldvcr.blogspot.com/2020/11/fun-with-crypto-ancienne-tls-for.html
--
------------------------------------ personal: http://www.cameronkaiser.com/ --
Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckaiser at floodgap.com
-- Good software lets me sleep. -- Michael W. Lucas ---------------------------
17 Nov
17 Nov
4:45 p.m.
On 2020-11-16 1:34 p.m., Cameron Kaiser via cctalk wrote:
If you have an older pre-C99 system, I've
backported a TLS 1.2 library to gcc
versions as early as 2.5 as long as it has 64-bit ints (long long, usually)
and stdarg.h.
https://github.com/classilla/cryanc
That looks interesting. I'm sure I'll end up playing with that at some
point. I doubt that I personally have any practical use for such a
thing, but that won't stop me from looking into it! I've got a few
systems that I can try it out on that aren't (yet) on the "supported" list.
Thanks for sharing!
6 p.m.
If you have an
older pre-C99 system, I've backported a TLS 1.2 library to
gcc versions as early as 2.5 as long as it has 64-bit ints (long long,
usually) and stdarg.h.
https://github.com/classilla/cryanc
That looks interesting. I'm sure I'll end up playing with that at some
point. I doubt that I personally have any practical use for such a
thing, but that won't stop me from looking into it! I've got a few
systems that I can try it out on that aren't (yet) on the "supported"
list.
Thanks for sharing! 
18 Nov
18 Nov
4:07 p.m.
On Nov 16, 2020, at 10:34 AM, Cameron Kaiser via cctalk <cctalk at classiccmp.org>
wrote:
If you have an older pre-C99 system, I've backported a TLS 1.2 library to gcc
versions as early as 2.5 as long as it has 64-bit ints (long long, usually)
and stdarg.h.
https://github.com/classilla/cryanc
Great work, Cameron!
Another option for these systems is mbedTLS, originally by ARM. It only requires C89, it
can serve as a replacement for SSL libraries that follow the standard API signatures, it
is also quite easy to build (a little more complicated than Crypto Ancienne, though not by
much--you just need to examine its GNUmakefile to derive a build system for whatever OS
you're targeting), and it's fairly complete.
One advantage of mbedTLS is that it works with libcurl, libssh2, etc. already so if you
need to build more such things you have a good basis to start from.
At some point MacSSH may use it. Or maybe the current maintainer will try cryanc. :)
-- Chris
4:16 p.m.
If you have an
older pre-C99 system, I've backported a TLS 1.2 library to
gcc versions as early as 2.5 as long as it has 64-bit ints (long long,
usually) and stdarg.h.
https://github.com/classilla/cryanc
Great work, Cameron! Another option for these systems is mbedTLS,
originally by ARM. It only
requires C89,
I looked at mbedTLS (formerly PolarSSL) before I even embarked on it based
on other recommendations, but it claims to require c99:
https://github.com/ARMmbed/mbedtls
Have you had success building it on other systems? What compilers could you
get away with? I'd rather not reinvent the wheel but it seemed like I had to.
At some point MacSSH may use it. Or maybe the current
maintainer will try
cryanc. :)
Didn't lsh get some updates? Or was I thinking of something else? ISTR that
MacSSH used lsh under the hood.
--
------------------------------------ personal: http://www.cameronkaiser.com/ --
Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckaiser at floodgap.com
-- Hidden DOS secret: add BUGS=OFF to your CONFIG.SYS. ------------------------
4:23 p.m.
On Nov 18, 2020, at 4:16 PM, Cameron Kaiser via cctalk <cctalk at classiccmp.org>
wrote:
Oh, bummer, maybe I'm just misremembering.
It did, but it was also in the process of switching to libssh2, so Brendan switched that
from OpenSSL to mbedTLS too:
https://github.com/macssh/macssh/tree/libssh2
In case anyone wants to contribute. (Alas I can't, for the usual reasons, but maybe
someone can?)
-- Chris
Another option
for these systems is mbedTLS, originally by ARM. It only
requires C89,
I looked at mbedTLS (formerly PolarSSL) before I even embarked on it based
on other recommendations, but it claims to require c99:
https://github.com/ARMmbed/mbedtls
Have you had success building it on other systems? What compilers could you
get away with? I'd rather not reinvent the wheel but it seemed like I had to.
I was able to build its three component libraries just fine with CodeWarrior 7 on Mac OS 9
on my iMac G4. Same with libssh2. I never actually got to the point of testing it though,
the iMac's PSU died. :(
At some point
MacSSH may use it. Or maybe the current maintainer will try
cryanc. :)
Didn't lsh get some updates? Or was I thinking of something else? ISTR that
MacSSH used lsh under the hood. 
20 Nov
20 Nov
10:13 a.m.
Hello Cameron,
Am 16.11.2020 um 19:34 schrieb Cameron Kaiser via cctalk <cctalk at
classiccmp.org>:
If you have an older pre-C99 system, I've
backported a TLS 1.2 library to gcc versions as early as 2.5 as long as it has 64-bit ints
(long long, usually) and stdarg.h.
Thanks for that! I?ll try to compile this in OS/400 V4R5 in the upcoming xmas holidays.
Unfortunately, at least one line in the files is very long, so I can?t easily put them to
QSYS.LIB. This is not mandatory, but I like it that way.
:wq! PoC
10:45 a.m.
Unfortunately, at least one line in the files is very
long, so I can't
easily put them to QSYS.LIB. This is not mandatory, but I like it that way.
How so? If it's an easy fix to split up the line or something, no biggie.
--
------------------------------------ personal: http://www.cameronkaiser.com/ --
Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckaiser at floodgap.com
-- When you don't know what you're doing, do it neatly. -----------------------
1493
days inactive
1497
days old
8 comments
5 participants
participants (5)
-
cmhanson＠eschatologist.net -
jacob.ritorto＠gmail.com -
jpstewart＠personalprojects.net -
poc＠pocnet.net -
spectre＠floodgap.com