bebboget.x86_64-aros 1.11

Short:        HTTPS downloader with TLS 1.3, no deps
Author:       Stefan Franke (bebboget), Michele Dipace (AROS port)
Uploader:     michele dipace kaffeine net (Michele Dipace)
Type:         comm/net
Version:      1.11
Requires:     AROS One x86_64 (ABIv11) with a TCP/IP stack (AROSTCP)
Architecture: i386-aros

WHAT IS THIS?

bebboget gets files from HTTPS and HTTP servers. It supports TLS 1.2 and
TLS 1.3 and needs only bsdsocket.library: the crypto code is built in.
installcerts installs root certificates from a PEM bundle.

bebboget is by Stefan "Bebbo" Franke. This archive is my port to
AROS x86_64 (AROS One 64-bit, ABIv11).
The original 68k version is comm/net/bebboget.lha;
the AROS i386 build is comm/net/bebboget.i386-aros.lha,
the AROS aarch64 build is comm/net/bebboget.aarch64-aros.lha.

REQUIREMENTS

- AROS One x86_64 (ABIv11) with a TCP/IP stack (AROSTCP).
- A configured TCP/IP stack (AROSTCP, bsdsocket.library).

INSTALLATION

Copy the two programs to C: or to another directory in the path:

    Copy bebboget installcerts C:

bebboget keeps a random seed in ENVARC:bebboget/random_seed.

CERTIFICATES

bebboget comes without certificates. For a server it cannot verify it asks
at the console: (a)bort, (i)nstall or (c)ontinue. To install the root
certificates of the curl CA bundle once:

    bebboget --sloppy -D RAM: -o cacert.pem https://curl.se/ca/cacert.pem
    installcerts RAM:cacert.pem

--sloppy skips the certificate checks for that download. If you prefer, copy
cacert.pem from a machine you trust instead.

The certificates go to SYS:Prefs/Env-Archive/certs.

USAGE

    bebboget [options] <url>

For example:

    bebboget -D RAM: https://aminet.net/comm/net/bebboget.readme

bebboget -? lists the options. Ctrl-C stops a download. A download that ends
before its Content-Length is reported and returns 10.

KNOWN LIMITS

- The HTTP status is not checked: an error page from the server is saved as
  the file.
- TLS 1.2 has no ECDHE-ECDSA cipher suites: such servers need TLS 1.3.
- A server whose chain ends in a cross-signed root that is no longer in the
  bundle needs a confirmation at the console (www.google.com today).
- Errors such as "certificate not accepted" return 0.
- x86_64: about 6 KB of memory stay allocated after each run.

SOURCE AND LICENSE

GNU GPL v3 or later; the files derived from SUPERCOP are public domain. See
COPYING and LICENSE. Source of this release:
  https://github.com/kaffeine1/bebboget-aros/tree/v1.11-aros-x86_64
Original bebboget: https://franke.ms/git/bebbo/bebboget
Bug reports: https://github.com/kaffeine1/bebboget-aros/issues

Port by Michele Dipace <michele.dipace@kaffeine.net>.

Support my work on the AROS port on Patreon:
  https://www.patreon.com/c/kaffeine1
or with a one-time contribution on Ko-fi:
  https://ko-fi.com/kaffeine1
Contributions are voluntary; no subscription is required to use
this software.

HISTORY

1.11 (10.11.2026)
- First AROS release, from bebboget 1.11 with the fixes I sent upstream:
  certificate dates, RSA work buffers, P-384 reduction, ECDSA curve choice,
  SHA-384/SHA-512 RSA signatures, long ASN.1 lengths, variadic lists on
  64 bit, http:// port, quoted file names, truncated downloads, the lock of a
  new certificate directory, Content-Length split across reads.