beneroth changed the topic of #picolisp to: PicoLisp language | The scalpel of software development | Channel Log: https://libera.irclog.whitequark.org/picolisp | Check www.picolisp.com for more information
razzy has quit [Ping timeout: 260 seconds]
razzy has joined #picolisp
clacke has joined #picolisp
theruran has quit [Ping timeout: 268 seconds]
theruran has joined #picolisp
aw- has quit [Quit: Leaving.]
aw- has joined #picolisp
<tankf33der> Hi all
<Regenaxer> Hi tankf33der!
<tankf33der> Regenaxer:what openssl version on pilbox?
<tankf33der> i would like to repeat
<Regenaxer> 1.1.1
<tankf33der> and letter?
<Regenaxer> OpenSSL 1.1.1l 24 Aug 2021
<tankf33der> Ok
<Regenaxer> Do you have access to a PilBox?
<razzy> Good morning to all!
<Regenaxer> Hi razzy!
<razzy> I am waiting for beneroth to ask, how pilDB fares in comparison to other graph databases. :]
<tankf33der> Regenaxer:i do not have pilbox
<Regenaxer> ok, so you cannot test directly
<Regenaxer> razzy, do you have a PilBox?
<razzy> Regenaxer: no, sorry.
<Regenaxer> ok
<Regenaxer> I'd like to know if it is a problem of my phone (OnePlus 6T), of Android 11, or what else
<tankf33der> But i have a system with openssl 1.1.1l
<Regenaxer> According to the link from tankf33der it should work
<Regenaxer> ok, but the same openssl works in Termux
<Regenaxer> but not in PilBox
<Regenaxer> on the same device
<Regenaxer> And exactly the same openssl version I have also on Debian and all works fine
<tankf33der> It returns first doc type line here
<Regenaxer> So it is only PilBox, at least on my device
<Regenaxer> yes, correct
<Regenaxer> Test is:
<Regenaxer> : (ssl "picolisp.com" "wiki" (line T))
<Regenaxer> -> "<!DOCTYPE html>"
<Regenaxer> This fails in PilBox REPL
<Regenaxer> (and in PilBox apps)
<Regenaxer> Thats how I noticed. Some apps failed
<Regenaxer> unusable
<Regenaxer> cause they don't communicate with the servers
<Regenaxer> Something wrong in PilBox
<Regenaxer> I use lib/libssl.so.1.1 and lib/libcrypto.so.1.1
<Regenaxer> The same as in Termux
<tankf33der> Maybe it calls openssl via android middleware
<Regenaxer> I don't think so
<Regenaxer> I use @bin/ssl -> lib/libssl
<Regenaxer> and lib/libssl works in Termux
<Regenaxer> both PilBox and Termux are normal Android apps
<Regenaxer> so lib/ssl should do the same thing in both
<Regenaxer> strange indeed
<Regenaxer> Perhaps some infrastructure needed in openssl is missing in PilBox?
<Regenaxer> root ca
<Regenaxer> In any case it is a cert issue
<Regenaxer> and it worked before
<Regenaxer> and it works on sites *not* using lets encrypt
<Regenaxer> and fails on sites *using* lets encrypt
<Regenaxer> So it must have to do with lets encrypt cert change
<Regenaxer> lets encrypt folks say that openssl 1.1 should work
<Regenaxer> My main question at the moment is whether *other* Android devices have that PilBox problem too
<Regenaxer> I don't trust my OnePlus
<Regenaxer> other things broke too with last update a few weeks ago
<Regenaxer> for example, storage access broke
<Regenaxer> And I have no other recent device
<tankf33der> Missing cert db is good idea
<Regenaxer> My old Nexus tablet also fails
<Regenaxer> So it is not my OnePlus
<razzy> I would like to help, but i do not have working android and i have hangover from yesterday :].
<Regenaxer> thanks, no worry :)
<Regenaxer> tankf33der: How might lib/libssl access the cert db?
<Regenaxer> so I could build it into PilBox
<Regenaxer> Also interesting: The Browser PilBox-App *does* wor. It can access any site
<Regenaxer> The browser app is based on WebView, a cromium based gui component
<Regenaxer> So it is only @bin/ssl in PicoLisp that fails
<Regenaxer> But the exactly, bitwise, same @bin/ssl works in Termux
<Regenaxer> I build @bin/ssl *on* Termux
<tankf33der> I will try to repeat today
<Regenaxer> Thanks!
<razzy> I will atempt to compete at adventofcode.com with picolisp. I think it is something where picolisp will shine.
<Regenaxer> Great idea!
<Regenaxer> Do you think you are fluent enough in PicoLisp programming?
<razzy> i think i can be when it starts 1. december.
<Regenaxer> ok
<Regenaxer> Nice thing. Advent calendar
<razzy> tasks do not take much time. sometimes some people return answers in 30s :D
<Regenaxer> I see
<tankf33der> Razzy: adventofcode collection picolisp:
<razzy> tankf33der: this is awesome. it saves time with preparation thank you. would you benefit from advent-of-code API that I will try to build to save score time?
<tankf33der> I dont know what you talking about, i just wrote code
<razzy> tankf33der: ok, anyway. You helped me. Thank you.
<Regenaxer> tankf33der: Termux has a etc/tls/cert.pem
<Regenaxer> I wonder what this is for
<Regenaxer> It says "Certificate data from Mozilla"
<Regenaxer> but Termux has no Mozilla
<Regenaxer> Is there an environment variable used by openssl to find certificates? If so, I should put the pem into PilBox and set the env var
<tankf33der> Regenaxer: repeated!
<Regenaxer> indeed!
<Regenaxer> So it is a local cert somewhere
<tankf33der> Your source system is debian, right?
<Regenaxer> well, Debian is not used here
<Regenaxer> PilBox is stand-alone
<Regenaxer> So it must be some way to tell openssl where to search certs
<Regenaxer> And then I must make a PilBox with the cert
<tankf33der> do you have file links in:
<Regenaxer> Termux probably uses ../usr/etc/tls/cert.pem
<tankf33der> “/etc/ssl/certs” ?
<Regenaxer> There is no /etc on PilBox
<Regenaxer> I need an env variable
<Regenaxer> like PATH, LD_LIBRARY_PATH etc.
<tankf33der> From what system you took openssl?
<tankf33der> patches compiled in in binary
<Regenaxer> From Termux
<tankf33der> patches -> pathes
<Regenaxer> Hmm, that would be bad
<tankf33der> on my archlinux based system i need to repeat:
<tankf33der> on my archlinux based system i need this to repeat:
<tankf33der> remove /etc/ssl/cert.pem file
<tankf33der> and
<tankf33der> remove dir /etc/ssl/certs
<tankf33der> .
<tankf33der> check termux has the same
<Regenaxer> Yes, this I understood from the above jpeg
<Regenaxer> yes, see above
<Regenaxer> Termux probably uses ../usr/etc/tls/cert.pem
<Regenaxer> But why did it work before?
<Regenaxer> and still works for non-lets-encrypt?
<tankf33der> it worked before because DST expired 21.sep.2021
<tankf33der> it works everywhere with *VALID* chain
<Regenaxer> yes, but it gets *some* root ca
<Regenaxer> So it does not need ../usr/etc/tls/cert.pem
<Regenaxer> usually
<tankf33der> as i understand cert db requires to check if trusted cert can be expired
<Regenaxer> I think there must be some env var
<Regenaxer> $ openssl version -d
<tankf33der> this build file for openssl on archlinux
<Regenaxer> gives OPENSSLDIR: "/data/data/com.termux/files/usr/etc/tls"
<tankf33der> check for --openssldir=/etc/ssl
<tankf33der> # openssl version -d
<tankf33der> OPENSSLDIR: "/etc/ssl"
<Regenaxer> There must be some way to override
<Regenaxer> not just hard-compiled
razzy has quit [Ping timeout: 264 seconds]
razzy has joined #picolisp
<Regenaxer> i.e. override OPENSSLDIR
<Regenaxer> hmm: "There is no way to change this value"
<Regenaxer> :(
<Regenaxer> stupid
<tankf33der> good we found source of issue.
<Regenaxer> yeah
<Regenaxer> but no fix
<Regenaxer> I will ignore certs then
<Regenaxer> Simple: (patch ssl 443 -443)
<tankf33der> afk
<Regenaxer> thanks!
<Regenaxer> Else I could change SSL_CTX_set_default_verify_paths(ctx) in @src/ssl.c
<Regenaxer> replace with SSL_CTX_load_verify_locations ?
<tankf33der> Yea
<tankf33der> try
<Regenaxer> T
<Regenaxer> Needs to change the interface for @bin/ssl though
<Regenaxer> tedious
<Regenaxer> Oh
<Regenaxer> I just see there *is* a tls/cert.pem in PilBox
<Regenaxer> seems I use it already for some purpose
<tankf33der> Something missing then
<Regenaxer> I forgot what it was for
<Regenaxer> ah
<Regenaxer> in PicoLisp @lib/android.l
<Regenaxer> (sys "SSL_CERT_FILE" "tls/cert.pem")
<Regenaxer> But where is it used? Why did I do that? Empty memory
<Regenaxer> Seems bin/lib/arm64-v8a/libcrypto.1.1.so uses that variable
razzy has quit [Ping timeout: 260 seconds]
razzy has joined #picolisp
<Regenaxer> It might well be that I only need to update that cert file in PilBox
<Regenaxer> will try later
<Regenaxer> afp atm
razzy has quit [Ping timeout: 260 seconds]
razzy has joined #picolisp
<Regenaxer> OOOhhh, indeed!
<Regenaxer> I'm sooo stupid!
<Regenaxer> Just replacing tls/cert.pem did it!
<Regenaxer> So SSL_CERT_FILE is the env var I was looking for
<Regenaxer> And it has been there all the time!
<Regenaxer> in @lib/android.l (sys "SSL_CERT_FILE" "tls/cert.pem")
<tankf33der> Is it work now?
<Regenaxer> yep
<tankf33der> Good!
<Regenaxer> But camera does not work in PilBox now :(
<Regenaxer> different issue
<Regenaxer> Will debug now
<Regenaxer> Give up. Camera in PilBox works fine on old Tabllet with Android 7, but not on OnePlus with Android 11
<Regenaxer> Probably some permission issue. I *hate* Android!
<Regenaxer> I'd be happy if anyone else tests on Android 11
beneroth has joined #picolisp
aw- has quit [Ping timeout: 264 seconds]
beneroth has quit [Quit: Leaving]
<razzy> beneroth: did you tried compare pilDB to some other graphDB? how well it compare? thank you for answers.