Bug#638595: WWWOFFLE HTTPS now unusable

[Andreas Metzler]

On 2011-08-20 "Andrew M. Bishop" <amb at gedanken.demon.co.uk> wrote:
> jidanni at jidanni.org writes:
[...]
> > I just tested it with Linux 2.6 vs. 3.0, same bug, on both of my
> > computers. I suppose an upgrade to a dependency revealed the bug.
> > PS> $ wwwoffle https://bugzilla.mozilla.org/
> > PS> Requesting: https://bugzilla.mozilla.org/
> > PS> $ wwwoffle -offline
> > PS> WWWOFFLE Incorrect Password
> > PS> $ sudo wwwoffle -offline
> > PS> WWWOFFLE Now Offline
> > PS> (I don't do poff as I don't have dialup, shouldn't matter anyway after
> > PS> putting wwwoffle offline)
> > Parts of lynx will still access the net.
> > PS> $ wwwoffle-ls https://bugzilla.mozilla.org/
> > PS> DM1DXC+wwzmqA9IEIhJkqQA    3832 Aug 20 12:49 https://bugzilla.mozilla.org/
> > Odd, your bytes are much less than my 16367.
> > PS> $ https_proxy=http://localhost:8080/ lynx -dump
> > PS> https://bugzilla.mozilla.org | wc
> > PS>      25     102     943
> > Better check what it says and if it is truncated...

> I think that you will find that it is truncated - it was for me.
[...]

Just to get a straightforword testcase:
(SID)root at argenau:/# DEBIAN_FRONTEND=noninteractive  apt-get --purge  install wwwoffle
[...]
Setting up libgpg-error0 (1.10-0.3) ...
Setting up libgcrypt11 (1.4.6-9) ...
Setting up libtasn1-3 (2.9-4) ...
Setting up libgnutls26 (2.12.7-6) ...
Setting up wwwoffle (2.9f-2.2) ...
Checking for htdig package...
Fixing ownership of spooldirs in the background.
invoke-rc.d: policy-rc.d denied execution of start.
(SID)root at argenau:/# /etc/init.d/wwwoffle start
Starting HTTP cache proxy server: wwwoffled notice:
The WWWOFFLE root CA files don't exist. Please stand by while these are
generated (this may take very long, depending on your system).
wwwoffled[22194] Important: WWWOFFLE Demon Version 2.9f (with ipv6,with zlib,with gnutls) started.
wwwoffled[22194] Warning: The WWWOFFLE root CA private key file 'certificates/root/root-key.pem' does not exist; creating it.
wwwoffled[22194] Warning: The WWWOFFLE root CA certificate file 'certificates/root/root-cert.pem' does not exist; creating it.
(offline mode) done.
wwwoffled[22194] Important: Detached from terminal and changed pid to 22196.
# A restart seems necessary
(SID)root at argenau:/# /etc/init.d/wwwoffle stop
(SID)root at argenau:/# /etc/init.d/wwwoffle start
(SID)root at argenau:/# wwwoffle -online
ametzler at argenau:~$ https_proxy=http://localhost:8080/ lynx -dump https://bugzilla.mozilla.org | md5sum
49dd6cdbb406df061fd322c0a4d2b895  -
ametzler at argenau:~$ lynx -dump https://bugzilla.mozilla.org | md5sum           
49dd6cdbb406df061fd322c0a4d2b895  -

i.e., same output for direct connection and wwwoffle.

cu andreas