From fk at fabiankeil.de  Wed Jul  1 15:46:10 2026
From: fk at fabiankeil.de (Fabian Keil)
Date: Wed, 1 Jul 2026 15:46:10 +0200
Subject: [Privoxy-devel] GPG signatures
In-Reply-To: <15ba1b79-5509-4d75-bede-edb79a9f3bf9@app.fastmail.com>
References: <2dbbcc04-5bcf-4012-bb1e-19fac506d097@app.fastmail.com>
 <CAD8GWstg5QTfp-ip--5d=2LMx4aY95P5fN2Kc8zHiP67tngH_A@mail.gmail.com>
 <ajFx3xp5IwYDHy9h@dinghy.sail.spinnaker.de>
 <20260618091151.5e21cf39.fk@fabiankeil.de>
 <9fc3e67e-17a5-47c9-8e5c-66e5588b65f6@app.fastmail.com>
 <20260621094242.28f993d8.fk@fabiankeil.de>
 <73e650de-b552-46b6-9ba0-ace377460d7d@app.fastmail.com>
 <20260623090325.0c7a395f.fk@fabiankeil.de>
 <9478254a-3da5-4b01-bf56-6afc80f3b17f@app.fastmail.com>
 <20260626083939.45251072.fk@fabiankeil.de>
 <b105f7da-4484-4217-80fc-11ed1bf013dc@app.fastmail.com>
 <20260629131049.144a606a.fk@fabiankeil.de>
 <e3f7d676-4364-4055-8f6e-9b86ea3a675e@app.fastmail.com>
 <CAD8GWsv4UDcifvCuVoRPf2TP=FAyzhesPtD1_Y5kK4vUAvsDpg@mail.gmail.com>
 <8a49297a-9b88-48ea-b76b-7f9d57553642@app.fastmail.com>
 <15ba1b79-5509-4d75-bede-edb79a9f3bf9@app.fastmail.com>
Message-ID: <20260701154610.45226a9e.fk@fabiankeil.de>

Ian Silvester via Privoxy-devel <privoxy-devel at lists.privoxy.org> wrote on 2026-06-30 at 09:06:35:

> Hi Fabian,
> 
> FAQ source files updated once more, to improve layout and to
> update Windows support info and Lee's last GPG key. Could you
> do the jade honours once more?

Done after fixing some markup issues.

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.privoxy.org/pipermail/privoxy-devel/attachments/20260701/29a79a99/attachment.bin>

From fk at fabiankeil.de  Wed Jul  1 16:13:43 2026
From: fk at fabiankeil.de (Fabian Keil)
Date: Wed, 1 Jul 2026 16:13:43 +0200
Subject: [Privoxy-devel] privoxy-regression-test --check-ssl flaky
In-Reply-To: <akJ-LVtP99GfS_6c@dinghy.sail.spinnaker.de>
References: <akJ-LVtP99GfS_6c@dinghy.sail.spinnaker.de>
Message-ID: <20260701161343.0e1290b2.fk@fabiankeil.de>

Roland Rosenfeld via Privoxy-devel <privoxy-devel at lists.privoxy.org> wrote on 2026-06-29 at 16:16:13:

> in https://bugs.debian.org/1141069 I was informed, that
>  privoxy-regression-test --check-ssl
> runs very flaky since ~1 month.
> I run the test by hand several times now and can confirm the problem.

I was able to reproduce the issue as well.
 
> sometimes no-subject times out, then self-signed and no-subject return
> 503 instead of 403, next time expired, no-common-name and no-subject
> return 503 and so on.
> 
> No idea, what changed (this worked okay before, except that the timing
> looks of the beginning of the problem looks like the problems started
> only days after our 4.2.0 release, but during the release cycle there
> were no problems).  Maybe some anti-AI mechanism on check.ssl.com,
> which fails on several requests in a short time?
> 
> Any idea to fix this issue?  Are there (better) alternatives to
> badssl.com, that can be used for testing?  Or does it make sense to
> retry and/or skip a test, if it returns 503 or timeout instead of 403?
> 
> Running a local copy of badssl (the code is on
> https://github.com/chromium/badssl.com), sounds like overkill at least
> for the Debian CI-testing...

I'm not aware of any badssl.com alternatives.

I'm currently testing a --tolerate-flakiness option that only
counts status code 200 as error that affects the exit code and
results in output like:

fk at t520 ~ $privoxy-regression-test.pl --check-bad-ssl --tolerate-flakiness
2026-07-01 16:10:26: Requesting pages from badssl.com with various certificate problems. This will only work if Privoxy has been configured properly and can reach the Internet.
2026-07-01 16:10:26: Requesting https://expired.badssl.com/
2026-07-01 16:10:36: Fetch failure: 'curl: (28) Operation timed out after 10038 milliseconds with 0 bytes received'
2026-07-01 16:10:46: Fetch failure: 'curl: (28) Operation timed out after 10003 milliseconds with 0 bytes received'
2026-07-01 16:10:46: Requesting https://wrong.host.badssl.com/
2026-07-01 16:10:56: Fetch failure: 'curl: (28) Operation timed out after 10002 milliseconds with 0 bytes received'
2026-07-01 16:11:06: Fetch failure: 'curl: (28) Operation timed out after 10003 milliseconds with 0 bytes received'
2026-07-01 16:11:06: Requesting https://self-signed.badssl.com/
2026-07-01 16:11:16: Fetch failure: 'curl: (28) Operation timed out after 10001 milliseconds with 0 bytes received'
2026-07-01 16:11:26: Fetch failure: 'curl: (28) Operation timed out after 10027 milliseconds with 0 bytes received'
2026-07-01 16:11:26: Requesting https://untrusted-root.badssl.com/
2026-07-01 16:11:36: Fetch failure: 'curl: (28) Operation timed out after 10001 milliseconds with 0 bytes received'
2026-07-01 16:11:46: Fetch failure: 'curl: (28) Operation timed out after 10003 milliseconds with 0 bytes received'
2026-07-01 16:11:46: Requesting https://no-common-name.badssl.com/
2026-07-01 16:11:48: Requesting https://no-subject.badssl.com/
2026-07-01 16:11:49: Requesting https://incomplete-chain.badssl.com/
2026-07-01 16:11:54: There were 4 requests that did not result in status code 403!
2026-07-01 16:11:54: Tolerated 4 failure(s) due to the --tolerate-flakiness option.

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.privoxy.org/pipermail/privoxy-devel/attachments/20260701/598001b4/attachment.bin>

From iansilvester at fastmail.fm  Wed Jul  1 21:20:51 2026
From: iansilvester at fastmail.fm (Ian Silvester)
Date: Wed, 01 Jul 2026 15:20:51 -0400
Subject: [Privoxy-devel] GPG signatures
In-Reply-To: <20260701154610.45226a9e.fk@fabiankeil.de>
References: <2dbbcc04-5bcf-4012-bb1e-19fac506d097@app.fastmail.com>
 <CAD8GWstg5QTfp-ip--5d=2LMx4aY95P5fN2Kc8zHiP67tngH_A@mail.gmail.com>
 <ajFx3xp5IwYDHy9h@dinghy.sail.spinnaker.de>
 <20260618091151.5e21cf39.fk@fabiankeil.de>
 <9fc3e67e-17a5-47c9-8e5c-66e5588b65f6@app.fastmail.com>
 <20260621094242.28f993d8.fk@fabiankeil.de>
 <73e650de-b552-46b6-9ba0-ace377460d7d@app.fastmail.com>
 <20260623090325.0c7a395f.fk@fabiankeil.de>
 <9478254a-3da5-4b01-bf56-6afc80f3b17f@app.fastmail.com>
 <20260626083939.45251072.fk@fabiankeil.de>
 <b105f7da-4484-4217-80fc-11ed1bf013dc@app.fastmail.com>
 <20260629131049.144a606a.fk@fabiankeil.de>
 <e3f7d676-4364-4055-8f6e-9b86ea3a675e@app.fastmail.com>
 <CAD8GWsv4UDcifvCuVoRPf2TP=FAyzhesPtD1_Y5kK4vUAvsDpg@mail.gmail.com>
 <8a49297a-9b88-48ea-b76b-7f9d57553642@app.fastmail.com>
 <15ba1b79-5509-4d75-bede-edb79a9f3bf9@app.fastmail.com>
 <20260701154610.45226a9e.fk@fabiankeil.de>
Message-ID: <90aceb4d-27bf-4b9d-ae3f-f66740b2bd32@app.fastmail.com>

On Wed, 1 Jul 2026, at 09:46, Fabian Keil via Privoxy-devel wrote:
> Ian Silvester via Privoxy-devel <privoxy-devel at lists.privoxy.org> wrote 
> on 2026-06-30 at 09:06:35:
>
>> Hi Fabian,
>> 
>> FAQ source files updated once more, to improve layout and to
>> update Windows support info and Lee's last GPG key. Could you
>> do the jade honours once more?
>
> Done after fixing some markup issues.
>
> Fabian

Many thanks Fabian,

Looks good in HTML; I made one last tweak to correct the signature filename extensions to match our standard. WIth that done these changes are ready to publish in my opinion.

Ian


>
> _______________________________________________
> Privoxy-devel mailing list
> Privoxy-devel at lists.privoxy.org
> https://lists.privoxy.org/mailman/listinfo/privoxy-devel

From fk at fabiankeil.de  Thu Jul  2 15:01:45 2026
From: fk at fabiankeil.de (Fabian Keil)
Date: Thu, 2 Jul 2026 15:01:45 +0200
Subject: [Privoxy-devel] GPG signatures
In-Reply-To: <90aceb4d-27bf-4b9d-ae3f-f66740b2bd32@app.fastmail.com>
References: <2dbbcc04-5bcf-4012-bb1e-19fac506d097@app.fastmail.com>
 <CAD8GWstg5QTfp-ip--5d=2LMx4aY95P5fN2Kc8zHiP67tngH_A@mail.gmail.com>
 <ajFx3xp5IwYDHy9h@dinghy.sail.spinnaker.de>
 <20260618091151.5e21cf39.fk@fabiankeil.de>
 <9fc3e67e-17a5-47c9-8e5c-66e5588b65f6@app.fastmail.com>
 <20260621094242.28f993d8.fk@fabiankeil.de>
 <73e650de-b552-46b6-9ba0-ace377460d7d@app.fastmail.com>
 <20260623090325.0c7a395f.fk@fabiankeil.de>
 <9478254a-3da5-4b01-bf56-6afc80f3b17f@app.fastmail.com>
 <20260626083939.45251072.fk@fabiankeil.de>
 <b105f7da-4484-4217-80fc-11ed1bf013dc@app.fastmail.com>
 <20260629131049.144a606a.fk@fabiankeil.de>
 <e3f7d676-4364-4055-8f6e-9b86ea3a675e@app.fastmail.com>
 <CAD8GWsv4UDcifvCuVoRPf2TP=FAyzhesPtD1_Y5kK4vUAvsDpg@mail.gmail.com>
 <8a49297a-9b88-48ea-b76b-7f9d57553642@app.fastmail.com>
 <15ba1b79-5509-4d75-bede-edb79a9f3bf9@app.fastmail.com>
 <20260701154610.45226a9e.fk@fabiankeil.de>
 <90aceb4d-27bf-4b9d-ae3f-f66740b2bd32@app.fastmail.com>
Message-ID: <20260702150145.540ff023.fk@fabiankeil.de>

"Ian Silvester" <iansilvester at fastmail.fm> wrote on 2026-07-01 at 15:20:51:

> On Wed, 1 Jul 2026, at 09:46, Fabian Keil via Privoxy-devel wrote:
> > Ian Silvester via Privoxy-devel <privoxy-devel at lists.privoxy.org> wrote 
> > on 2026-06-30 at 09:06:35:
> >
> >> Hi Fabian,
> >> 
> >> FAQ source files updated once more, to improve layout and to
> >> update Windows support info and Lee's last GPG key. Could you
> >> do the jade honours once more?
> >
> > Done after fixing some markup issues.

> Many thanks Fabian,
> 
> Looks good in HTML; I made one last tweak to correct the signature
> filename extensions to match our standard. WIth that done these changes
> are ready to publish in my opinion.

I've regenerated the FAQ.

Publishing it on the website is currently blocked by SF's shell service
being shutdown. I have to set up a new staging server first.

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.privoxy.org/pipermail/privoxy-devel/attachments/20260702/4444145d/attachment-0001.bin>