Re: [Lynx-dev] Unexpected network read error when accessing https on Ubuntu 16.04.

[Karen Lewellen]

For the record folks,
Luke is the hard working mind behind shellworld.
I will add though  that I cannot duplicate his issue.
When I run google searches using lynx 2.8.9dev.16,
I have no issues opening https links at all.
Did so just this morning in fact.
Karen



On Fri, 14 Jan 2022, Luke at Shellworld Support wrote:

> Hello
>
> I am running an older Ubuntu system (16.04), serving some users with
> unusual requirements in software and software versions. In other words,
> upgrading would be a risky proposition.
>
> Newer versions of lynx (seemingly anything after 2.8.9.dev16 inclusive)
> will not open https URLs.
>
> All the lib dependencies are exceeded, and earlier versions (such as
> 2.8.9.dev9) do work, but have started running into other errors that make
> upgrading desirable..
>
> I have been using stock binaries from Ubuntu or Debian mirrors, nothing
> unusual.
>
>
> # lynx -version
> Lynx Version 2.8.9dev.16 (11 Jul 2017)
> libwww-FM 2.14, SSL-MM 1.4.1, GNUTLS 3.5.17, ncurses 6.0.20160213(wide)
> Built on linux-gnu.
>
> # lynx -trace https://google.com
> Looking up google.com
> Making HTTPS connection to google.com
> SSL error:The certificate is NOT trusted. The certificate issuer is
> unknown. -Continue? (n)y
> Verified connection to google.com (subj=google.com)
> Certificate issued by: /C=US/O=Google Trust Services LLC/CN=GTS CA 1C3
> Secure 256-bit TLS1.3 (ECDHE_RSA_AES_256_GCM_SHA384) HTTP connection
> Sending HTTP request.
> HTTP request sent; waiting for response.
> Alert!: Unexpected network read error; connection aborted.
> Can't Access `https://google.com/'
> Alert!: Unable to access document.
>
> lynx: Can't access startfile
>
>
> From trace:
> Looking up google.com
> read_addrinfo length 140
> ...read_addrinfo 2 items
> dump_addrinfo read_addrinfo:
>        [1] family 2, socktype 1, protocol 6 addr 142.250.68.46 port 443
>        [2] family 10, socktype 1, protocol 6 addr
> 2607:f8b0:4007:80f::200e port 443
> dump_addrinfo Read from pipe:
>        [1] family 2, socktype 1, protocol 6 addr 142.250.68.46 port 443
>        [2] family 10, socktype 1, protocol 6 addr
> 2607:f8b0:4007:80f::200e port 443
> dump_addrinfo HTGetAddrInfo:
>        [1] family 2, socktype 1, protocol 6 addr 142.250.68.46 port 443
>        [2] family 10, socktype 1, protocol 6 addr
> 2607:f8b0:4007:80f::200e port 443
> Making HTTPS connection to google.com
> TCP: Error 115 in `SOCKET_ERRNO' after call to this socket's first
> connect() failed.
>        Operation now in progress
> TCP: Error 115 in `SOCKET_ERRNO' after call to this socket's first
> select() failed.
>        Operation now in progress
> HTParse: aName:`https://google.com/'
>   relatedName:`'
>   want: host
> HTParse:      result:`google.com'
> ...called gnutls_server_name_set(google.com) ->0
> HTLoadHTTP: SSL error:The certificate is NOT trusted. The certificate
> is...-Continue?
> Confirm: SSL error:The certificate is NOT trusted. The certificate
> is...-Continue? (n) GETCH4: Got 0x79.
> LYReadCmdKey(4) ->y (0x79)
> - YES.
> Validating CNs in '/CN=*.google.com'
> Matching
>        ssl_host  'google.com'
>        cert_host '*.google.com'
> Verified connection to google.com (subj=google.com)
> Certificate issued by: /C=US/O=Google Trust Services LLC/CN=GTS CA 1C3
> Secure 256-bit TLS1.3 (ECDHE_RSA_AES_256_GCM_SHA384) HTTP connection
> HTParse: aName:`https://google.com/'
>   relatedName:`'
>   want: punc path
> HTParse: (ABS)
> HTParse:      result:`/'
> HTParse: aName:`https://google.com/'
>   relatedName:`'
>   want: host
> HTParse:      result:`google.com'
> HTParse: aName:`https://google.com/'
>   relatedName:`'
>   want: punc path
> HTParse: (ABS)
> HTParse:      result:`/'
> HTParse: aName:`https://google.com/'
>   relatedName:`'
>   want: path
> HTParse: (ABS)
> HTParse:      result:`'
> HTParse: aName:`https://google.com/'
>   relatedName:`'
>   want: host
> HTParse:      result:`google.com'
> HTTP: Sending Cookie2: $Version ="1"
> HTTP: Sending Cookie:
> NID=511=cQmEu1-zMBVYL1NjfE7e7p5tfvI-UPgvHMbxSBWfnJWiRrLuXVVhQ47-p-Y6rTLXajYfB9zJBygVBdcZyeGekhkeHZ9Ja33GUQtXgcB6pXtIL05zH5Mmny_phtPQ-1lPS...
> Composing Authorization for google.com:443/
> HTAASetup_lookup: No template matched `' (so probably not protected)
> HTTP: Not sending authorization (yet).
> Writing:
> GET / HTTP/1.0\r
> Host: google.com\r
> Accept: text/html, text/plain, text/sgml, text/css, application/xhtml+xml,
> */*;q=0.01\r
> Accept-Encoding: gzip, compress, bzip2\r
> Accept-Language: en\r
> User-Agent: Lynx/2.8.9dev.16 libwww-FM/2.14 SSL-MM/1.4.1 GNUTLS/3.5.17\r
> Cookie2: $Version="1"\r
> Cookie:
> NID=511=cQmEu1-zMBVYL1NjfE7e7p5tfvI-UPgvHMbxSBWfnJWiRrLuXVVhQ47-p-Y6rTLXajYfB9zJBygVBdcZyeGekhkeHZ9Ja33GUQtXgcB6pXtIL05zH5Mmny_phtPQ-1lPS9FCwWKW16NIz9T...
> \r
> ----------------------------------
> Sending HTTP request.
> HTTP: WRITE delivered OK
> HTTP request sent; waiting for response.
> HTTP: Trying to read 1535
> HTTP: Read 0
> HTTP: Hit unexpected network read error; aborting connection; status
> 0:Resource temporarily unavailable, try again..
>
> Alert!: Unexpected network read error; connection aborted.
>
> HTAccess:  status=-1
> Can't Access `https://google.com/'
>
>
> Any pointers here would be vastly appreciated, and apologies if this is
> the wrong list.
>
> Luke