From rjhjr0 at gmail.com Tue Oct 7 08:37:04 2025 From: rjhjr0 at gmail.com (Bob Hall) Date: Tue, 7 Oct 2025 02:37:04 -0400 Subject: [Privoxy-users] Installation Win 11 Message-ID: Windows 11 version 24H2; all current updates Privoxy 4.0.0-1, downloaded from SourceForge, and then from www.privoxy.org/sf-download-mirror BLUF: Privoxy runs, but I want to suppress the "Fatal error: can't check configure file" message at start up. I've been using Privoxy for >20 years. I have a vague memory of using something called JunkBusters. This is the first time I've had to configure anything. But I'm setting up a Win 11 box. I haven't been able to get Privoxy to run with the "Run automatically at startup" option, so that's unchecked. After installation, the Startup directory is empty. The log file is in C:\var, created w/ default permissions. The config file is edited to point Privoxy to that. This eliminates the fatal log file error. I ran "privoxy --install" and changed the service Startup Type to Automatic. I don't need to change the default system user. I uncommented a couple of debug options & checked the log file. Privoxy is happily writing to the log file & the entries indicate that it's doing what it's supposed to be doing, so the service is reading the config file. However, I get the fatal config file error message at startup. I got it before I created the service and after I created the service. I get it with all service startup type settings. It doesn't seem to be the service that is generating the error message. Apparently Privoxy is creating another instance that runs at startup, generates the error message, and dies. The system user has full rights on the config file & the Privoxy directory. The Task Manager is showing only 1 instance of Privoxy. How do I either suppress the error message, or stop Privoxy from running the briefly-lived second instance? Bob Hall From allamistakeo21 at icloud.com Thu Oct 16 21:26:02 2025 From: allamistakeo21 at icloud.com (allamistakeo21 at icloud.com) Date: Thu, 16 Oct 2025 21:26:02 +0200 Subject: [Privoxy-users] Requesting help to set up HTTPS inspection Message-ID: Hi, I?m a long time user of Privoxy, which worked perfectly on my Mac, until I had to rebuild it, and now I can?t get HTTPS inspection to work anymore. When I test my setup by visiting https://config.privoxy.org then Safari just keeps attempting to load the webpage forever; Firefox returns the following error message: Secure Connection Failed An error occurred during a connection to config.privoxy.org. PR_END_OF_FILE_ERROR Error code: PR_END_OF_FILE_ERROR Following the instructions on https://www.privoxy.org/user-manual/contact.html here is potentially useful information: The exact Privoxy version I am using: 4.0.0 The operating system and versions I run Privoxy on: macOS 15.7.2 (24G317) I also tried on macOS 14.8.2 (23J119) without success The name, platform, and version of the browser I am using: Safari 26.1 (20622.2.10.11.2) and Firefox 144.0 The URL where the problem occurred, or some way for us to duplicate the problem: https://config.privoxy.org/ Whether your version of Privoxy is one supplied by the Privoxy developers, or if you got your copy somewhere else: installed using MacPorts I have carefully followed the instructions on the following page to configure HTTPS inspection: https://ports.macports.org/port/privoxy/details/ I have also followed the instructions in the Privoxy user manual but this didn?t help: https://www.privoxy.org/user-manual/config.html#HTTPS-INSPECTION-DIRECTIVES Whether you are using Privoxy together with another proxy such as Tor: no Whether you are using a personal firewall product: no. The macOS firewall is disabled. HTTP inspection works, but HTTPS inspection doesn?t. Thanks in advance for your advice. Thomas From fk at fabiankeil.de Fri Oct 17 13:18:50 2025 From: fk at fabiankeil.de (Fabian Keil) Date: Fri, 17 Oct 2025 13:18:50 +0200 Subject: [Privoxy-users] Requesting help to set up HTTPS inspection In-Reply-To: References: Message-ID: <20251017131850.4b23b697.fk@fabiankeil.de> allamistakeo21--- via Privoxy-users wrote on 2025-10-16 at 21:26:02: > I?m a long time user of Privoxy, which worked perfectly on my Mac, until I > had to rebuild it, and now I can?t get HTTPS inspection to work anymore. > When I test my setup by visiting https://config.privoxy.org then > Safari just keeps attempting to load the webpage forever; > Firefox returns the following error message: > > Secure Connection Failed > > An error occurred during a connection to config.privoxy.org. PR_END_OF_FILE_ERROR > > Error code: PR_END_OF_FILE_ERROR Checking the Privoxy log after enabling logging with the debug settings described at: https://www.privoxy.org/user-manual/contact.html should help. Probably the CA-related directives aren't correct or the permissions are wrong. Fabian -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital signature URL: From allamistakeo21 at icloud.com Fri Oct 17 20:12:10 2025 From: allamistakeo21 at icloud.com (allamistakeo21 at icloud.com) Date: Fri, 17 Oct 2025 20:12:10 +0200 Subject: [Privoxy-users] Requesting help to set up HTTPS inspection In-Reply-To: <20251017131850.4b23b697.fk@fabiankeil.de> References: <20251017131850.4b23b697.fk@fabiankeil.de> Message-ID: > Checking the Privoxy log after enabling logging with the debug settings > described at: > https://www.privoxy.org/user-manual/contact.html > should help. > > Probably the CA-related directives aren't correct or the permissions > are wrong. > > Fabian Hello Fabian, Thank you for your advice. I activated the debug logging, which indeed revealed that the privoxy user didn?t have access rights to the CA files. I changed the owner and group of the CA files, and now it works. Thomas From allamistakeo21 at icloud.com Fri Oct 17 21:41:22 2025 From: allamistakeo21 at icloud.com (allamistakeo21 at icloud.com) Date: Fri, 17 Oct 2025 21:41:22 +0200 Subject: [Privoxy-users] Requesting help to set up HTTPS inspection In-Reply-To: References: <20251017131850.4b23b697.fk@fabiankeil.de> Message-ID: <44D10D6A-AFB0-4672-8716-25E1D9CED345@icloud.com> > Thank you for your advice. I activated the debug logging, which indeed revealed that the privoxy user didn?t have access rights to the CA files. > I changed the owner and group of the CA files, and now it works. Actually, I was a bit too fast to report success: it worked on one Mac, but on the other I am now getting a different error message, for instance when I attempt to visit google.com . The browser shows the following: Server certificate verification failed Privoxy was unable to securely connect to the destination server. Reason: unable to get local issuer certificate The log file shows the following: 2025-10-17 21:31:35.573 700009a07 Connect: to google.com 2025-10-17 21:31:35.637 700009a07 Connect: Connected to google.com[2a00:1450:400c:c1d::8a]:443. 2025-10-17 21:31:35.638 700009a07 Connect: Created new connection to google.com:443 on socket 11. 2025-10-17 21:31:35.640 700009a07 Connect: Performing the TLS/SSL handshake with the server 2025-10-17 21:31:35.673 700009a07 Error: X509 certificate verification for google.com failed: unable to get local issuer certificate 2025-10-17 21:31:35.675 700009a07 Crunch: Certificate error: unable to get local issuer certificate: https://google.com/ Thomas From fk at fabiankeil.de Mon Oct 27 11:05:04 2025 From: fk at fabiankeil.de (Fabian Keil) Date: Mon, 27 Oct 2025 11:05:04 +0100 Subject: [Privoxy-users] Requesting help to set up HTTPS inspection In-Reply-To: <44D10D6A-AFB0-4672-8716-25E1D9CED345@icloud.com> References: <20251017131850.4b23b697.fk@fabiankeil.de> <44D10D6A-AFB0-4672-8716-25E1D9CED345@icloud.com> Message-ID: <20251027110504.2a0fe565.fk@fabiankeil.de> allamistakeo21--- via Privoxy-users wrote on 2025-10-17 at 21:41:22: > > > Thank you for your advice. I activated the debug logging, which indeed revealed that the privoxy user didn?t have access rights to the CA files. > > I changed the owner and group of the CA files, and now it works. > > Actually, I was a bit too fast to report success: it worked on one Mac, but on the other I am now getting a different error message, for instance when I attempt to visit google.com . > > The browser shows the following: > > Server certificate verification failed > > Privoxy was unable to securely connect to the destination server. > > Reason: unable to get local issuer certificate > > > The log file shows the following: > > > 2025-10-17 21:31:35.573 700009a07 Connect: to google.com > 2025-10-17 21:31:35.637 700009a07 Connect: Connected to google.com[2a00:1450:400c:c1d::8a]:443. > 2025-10-17 21:31:35.638 700009a07 Connect: Created new connection to google.com:443 on socket 11. > 2025-10-17 21:31:35.640 700009a07 Connect: Performing the TLS/SSL handshake with the server > 2025-10-17 21:31:35.673 700009a07 Error: X509 certificate verification for google.com failed: unable to get local issuer certificate > 2025-10-17 21:31:35.675 700009a07 Crunch: Certificate error: unable to get local issuer certificate: https://google.com/ Did you specify a trusted-cas-file as documented at: https://www.privoxy.org/user-manual/config.html#TRUSTED-CAS-FILE ? Fabian -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital signature URL: