| hexnewbie | Hi. Is there anything out there that allows the Maemo Freemantle's modest mail client to use openssl 1.1.0h? I installed the libs (even got qml-browser working), but /proc/xyz/maps still points to 0.9.8zh | 11:56 |
|---|---|---|
| hexnewbie | Which is obviously normal, of course | 11:57 |
| hexnewbie | I seem to notice that according to ldd, neither modern nor libtinymail-1.0-0 seem to link to libssl, and according to apt-cache show they don't depend on it (or I'm clueless as to which file/package to run those on, since they are very modular). And there are no new versions of either in any repo that I can find | 11:59 |
| Maxdamantus | hexnewbie: have you tried using LD_PRELOAD=/path/to/libssl.so ? | 14:06 |
| hexnewbie | Maxdamantus: No, I might try that tomorrow. I am still trying to map where modest loads openssl from | 14:07 |
| Maxdamantus | though I'm guessing that won't work, if the program is just using `dlopen` to load it instead of listing it as a library to load at linktime. | 14:07 |
| Maxdamantus | If it's not listed by ldd, it will probably load it using `dlopen` | 14:08 |
| Maxdamantus | the brute force way of figuring out where the reference comes from would be to just collect all relevant filenames using `strace -f -e file ...` then grep those files for the library name. | 14:09 |
| Maxdamantus | (though probably first grep the main binary, since that's an easy first step) | 14:09 |
| hexnewbie | Couldn't try with modest yet, but LD_PRELOAD=/usr/lib/libssl.so.1.1 doesn't work for openvpn. It says OpenSSL 0.9.8zh and doesn't connect to the secure remotes. | 14:15 |
| hexnewbie | (I am looking for modern SSL for modest and openvpn, though the latter I guess I will figure out how to recompile soon) | 14:16 |
| Maxdamantus | I'm not actively using an N900 anymore, but personally, I just wrote a reasonably lightweight MITM proxy that used a modern version of OpenSSL. | 14:18 |
| Maxdamantus | particularly, for using Opera. | 14:18 |
| hexnewbie | I can just recompile openvpn, and VPN to the mail servers, and not use SSL at all | 14:19 |
| hexnewbie | Probably. I will be trying things after tomorrow, since the only charging cable I have with me is extremely hard to pull out, and my port is only half-soldered | 14:19 |
| Maxdamantus | This is my MITM proxy anyway: https://gist.github.com/Maxdamantus/e32ab94dbc5d9d43298428400020620e | 14:20 |
| hexnewbie | But I'm looking for know-how on working approaches for modest (and openvpn, too), so I don't improvise stupid things | 14:20 |
| Maxdamantus | (I used to just run it directly on the N900, didn't run it over the internet) | 14:20 |
| Maxdamantus | (note that it actually enables host validation (which requires something like openssl 1.0.2), so it doesn't just connect to a server without checking that that's what it actually connected to) | 14:24 |
| hexnewbie | Thanks | 14:28 |
| hexnewbie | It seems that libcamel-lite-1.2.so.0 uses /usr/lib/microb-engine/libssl3.so, but I'm not sure that's the one used for connecting to the mailbxoes | 14:37 |
| joerg | iirc there was some problem from sth like API change that forbid updating ssl to >0.9.8zh | 14:48 |
| joerg | pali, freemangordon and a few more devs in here will know details | 14:50 |
| joerg | I guess there's even a related note in changelogs of CSSU | 14:53 |
| joerg | http://wiki.maemo.org/Community_SSU/Changelog 21.2011.38-1Tmaemo12 (27.11.2017) >>Upgrade to upstream 0.9.8zh + maemo patches << | 14:58 |
| joerg | hexnewbie: ^^^ | 15:21 |
| hexnewbie | joerg: Thanks, I checked those. | 16:19 |
| hexnewbie | I suppose my options are to either get OpenVPN recompiled with newer OpenSSL somehow, or make an SSH tunnel that reconnects and use the mail without TLS over the SSH tunnel | 16:20 |
| hexnewbie | (Or upgrade my Easy Debian to something newer, I suppose Wheezy might work, and use Sylpheed there; though then I might as well use my PinePhone; I like the Maemo mail client, and the notification it gives me) | 16:21 |
| sicelo | hexnewbie: the maemo mail client is available and works in Maemo Leste, which supports Pinephone. And of course, the SSL-version thing is a non-issue there | 21:17 |
| hexnewbie | sicelo: Yeah, thanks. I do use Manjaro on the PinePhone, and the Maemo Leste wiki suggests it's not ready for prime time on the N900, which I use more significantly than the Pine | 21:21 |
| sicelo | oh, you have N900 too? well, in recent weeks, N900 has seen some great improvements. on a 1300mAh battery, you can now get almost 30 hours runtime, up from about 8 | 21:42 |
| hexnewbie | That sounds good. | 21:50 |
| hexnewbie | I was more worried about https://leste.maemo.org/Nokia_N900 that says Phone calls ‘No UI’, but I suppose that's only ‘Stable status’ | 21:51 |
| bencoh | actually leste has a phone dialer now | 21:53 |
| bencoh | and there is some integration with contact list as well | 21:54 |
| bencoh | upgrading easy debian to newer versions might give you a headache, since gnulibc no longer works on old kernels (there is a patched version on TMO from a few years ago) | 21:55 |
| sicelo | hexnewbie: on N900, call ui is least problem - calls have one-way audio for now | 21:58 |
| sixwheeledbeast | Well I always end up talking to myself anyway... | 22:29 |
Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!