LYNX-DEV SSL on Lynx 2.7.1 (Linux)

[Nicholl Environmental]

Could anyone shed some light on getting SSL to work with Lynx via
proxy?  I just went through the following rigamarole to add this
feature, reputedly a trivial process (!).

1. get rsaref2.0 from <a href="ftp://ftp.rsa.com";>RSA</a> and build
librsaref.a: no problem.

2. get SSLeay-0.6.6 from <a
href="ftp://ftp.psy.uq.oz.au/pub/Crypto/SSL";>SSLeay</a> and build
libcrypto.a and libssl.a using RSA: no problem, and the test suite ran
flawlessly. Installed.

3. get eassl/edssl from <a
href="ftp://ftp.replay.com/pub/replay/pub/Crypto/SSLapps/SSLlynx";>Replay</a>
and build either the ea or the ed daemon, linking to all of the above 
libraries: no problem.

4. Make an appropriate https entry in the "Proxy variables" section of 
lynx.cfg; adjust and install the respective *.conf file for eassl or 
edssl; fire up the daemon as a background process.

5. <em>Whew!</em> 

Using either eassl (port 5010) or edssl (port 4443), I get the same error
message when I attempt to access a secure site; here's an example:

Jul  2 01:50:23 127.0.0.1:7554 127.0.0.1:4443 10.0.2.15:7613
198.95.249.88:443 /C=US/SP=California/L=Mountain
View/O=Netscape Communications Corporation/OU=SSL v3.0 Test
Server/CN=ssl3.netscape.com SSL connection: -1 error:1408806E:SSL
routines:SSL_SET_CERTIFICATE:certificate verify failed

After scouring the documentation in SSLeay, I'm still at a loss.  Did I
miss a step?  Thanks in advance,

Nick Nicholl
<address@hidden>




;
; To UNSUBSCRIBE:  Send a mail message to address@hidden
;                  with "unsubscribe lynx-dev" (without the
;                  quotation marks) on a line by itself.
;