TLS and externalfigure

TLS and externalfigure

[Thangalin]

Hi,

I have images hosted on a local web server using a self-signed
certificate. For example:

https://localhost/images/.../file.png

When using ConTeXt, the image cannot be retrieved; a verified signed
certificate works as expected.

Using wget, self-signed certificates can be forced:

wget --no-check-certificate https://localhost/images/.../file.png

Does ConTeXt have a way to ignore/bypass certificate validation? If so, how?

(Note: the certificate's common name is currently blank, which does
not match 'localhost' -- I can fix that if required...)

Thank you!
___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / http://www.ntg.nl/mailman/listinfo/ntg-context
webpage  : http://www.pragma-ade.nl / http://tex.aanhet.net
archive  : http://foundry.supelec.fr/projects/contextrev/
wiki     : http://contextgarden.net
___________________________________________________________________________________

Re: TLS and externalfigure

[Hans Hagen]

On 3/30/2014 5:12 AM, Thangalin wrote:
> Hi,
>
> I have images hosted on a local web server using a self-signed
> certificate. For example:
>
> https://localhost/images/.../file.png
>
> When using ConTeXt, the image cannot be retrieved; a verified signed
> certificate works as expected.
>
> Using wget, self-signed certificates can be forced:
>
> wget --no-check-certificate https://localhost/images/.../file.png
>
> Does ConTeXt have a way to ignore/bypass certificate validation? If so, how?
>
> (Note: the certificate's common name is currently blank, which does
> not match 'localhost' -- I can fix that if required...)

a test:

in data-sch.lua you can find:

local function runcurl(name,cachename) -- we use sockets instead or the 
curl library when possible
     local command = "curl --silent --create-dirs --output " .. 
cachename .. " " .. name
     os.spawn(command)
end

you can try to add an option there, remake the format and see if that 
works i can see if we can add such an option (by default or setup)

Hans


-- 

-----------------------------------------------------------------
                                           Hans Hagen | PRAGMA ADE
               Ridderstraat 27 | 8061 GH Hasselt | The Netherlands
     tel: 038 477 53 69 | voip: 087 875 68 74 | www.pragma-ade.com
                                              | www.pragma-pod.nl
-----------------------------------------------------------------
___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / http://www.ntg.nl/mailman/listinfo/ntg-context
webpage  : http://www.pragma-ade.nl / http://tex.aanhet.net
archive  : http://foundry.supelec.fr/projects/contextrev/
wiki     : http://contextgarden.net
___________________________________________________________________________________

Re: TLS and externalfigure

[Thangalin]

http://wiki.contextgarden.net/Using_Graphics#HTTPS

Thank you, Hans.
___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / http://www.ntg.nl/mailman/listinfo/ntg-context
webpage  : http://www.pragma-ade.nl / http://tex.aanhet.net
archive  : http://foundry.supelec.fr/projects/contextrev/
wiki     : http://contextgarden.net
___________________________________________________________________________________

Re: TLS and externalfigure

[Thangalin]

Hi,

Adding --insecure works. I think the option should be present by
default, which could save people time trying to understand what part
of the system is preventing the images from being downloaded. (For
example, for me I first checked caching, directory permissions, web
server configuration, and the wiki before posting to the list.)
___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / http://www.ntg.nl/mailman/listinfo/ntg-context
webpage  : http://www.pragma-ade.nl / http://tex.aanhet.net
archive  : http://foundry.supelec.fr/projects/contextrev/
wiki     : http://contextgarden.net
___________________________________________________________________________________