How to fix the SSL/https problem?

Open forum for end-user questions about Wine. Before asking questions, check out the Wiki as a first step.
Forum Rules
Tw3aky
Level 1
Level 1
Posts: 8
Joined: Thu Aug 12, 2010 5:18 pm

Post by Tw3aky »

Apologies for me flooding this thread a bit, but as a last test before i'ld call
it a night, i've replaced the winhttp.dll with a native one, and set wine to
use only the native dll. It's still not working, but i got a different output and
i don't get any err: anymore.

Code: Select all

fixme:ras:RasEnumConnectionsW (0x93b2850,0x32f7a4,0x9132004),stub!
fixme:ras:RasEnumConnectionsW RAS support is not implemented! Configure program to use LAN connection/winsock instead!
fixme:secur32:schan_InitializeSecurityContextW Using hardcoded "NORMAL" priority
fixme:wintrust:HTTPSCertificateTrust (0x93b4b68)
fixme:wintrust:HTTPSFinalProv (0x93b4b68)
Only problem is, i don't know if it got any better or not as it is obviously still not working. Maybe someone know something more.

Now, off to bed...
Tw3aky
Level 1
Level 1
Posts: 8
Joined: Thu Aug 12, 2010 5:18 pm

Post by Tw3aky »

Ok, i wasted a couple of days getting the lastest git-version to work on my box, but i still didn't find any reference to a working version for my problem.
Version 1.3.0 still got this problem apparently.

Didn't come to performing a regression test at this moment, as time escapes on me for that, but i did file a bug. Bug 24032

Greets
Tw3aky
Level 1
Level 1
Posts: 8
Joined: Thu Aug 12, 2010 5:18 pm

Post by Tw3aky »

As you will see in Bug 24032, it came down to a configuration issue with openssl on my box.

As far for the netconn (12157) issue I guess it simply means openSSL can't verify the server certificate.

Apparently, the openSSL installation by macports doesn't contain any certificates in the <openSSL base directory>/certs.

A download of the roots.zip provided by Verisign and creating the necessary <hash>.0 symlinks for all those certificate solved the issue for me.

So, my advise. Check your OpenSSL configuration on your box and make sure you got the correct certificates trusted.

Greets.
T
Locked