Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Or, it does get started automatically, but crashes quickly enough that launchd kills the job. :) I saw this happen on Intel Leopard (and Intel Tiger).
Either way, it's a shame as when this works, it's really impressive. I guess we're reaching the point where more and more features need to be moved somewhere else. It was bound to happen eventually, but it still makes me a little sad.
 
I only had squid-ppc crash on 1 site. g5center.net which worked prior to using squid. I only tested with wikipedia, archive.org and hyperion-entertainment.com, both of which didn't work before squid, and a few other sites that had always worked with LWK. Never really gave it a thrashing of websites though as i set up an intel macmini to run squid headless shortly thereafter to handle the task over the power hungry G5.

Cheers
 
Last edited:
  • Like
Reactions: repairedCheese
Yeah, no L3 cache, it's the 1.67 ghz so yes, 7447a chip. Only thing that could make this faster would be a SSD, which I am now seriously contemplating. I might be crack smoking but the newest Tenfourfox FPR 31 feels...ever so slightly faster to me. Probably just my brain making it up.
While I am happy we have 104fox, it still feels slow even with the adjustments made using Eyoungen’s new preferences.
 
I only had squid-ppc crash on 1 site. g5center.net which worked prior to using squid. I only tested with wikipedia, archive.org and hyperion-entertainment.com, both of which didn't work before squid, and a few other sites that had always worked with LWK. Never really gave it a thrashing of websites though as i set up an intel macmini to run squid headless shortly thereafter to handle the task over the power hungry G5.
Thanks! Okay, I'm going to conclude then that Squid 4 never actually worked on Leopard (PPC or Intel), at least not well enough for general use. :) Definitely better to run the proxy on a different machine.

I guess we're reaching the point where more and more features need to be moved somewhere else. It was bound to happen eventually, but it still makes me a little sad.
Remember, networking is the process of connecting multiple computers together. Your router is responsible for forwarding packets, and your ISP (by default) is responsible for domain name resolution. And it's only because of all the data centers spread around the world that there are any websites to connect to in the first place.

So I don't think there's anything so untoward about handing off HTTPS negotiation to a different machine on your network, using a feature Apple built into OS X. It only sucks if you're e.g. using a laptop on the road.
 
  • Like
Reactions: repairedCheese
Remember, networking is the process of connecting multiple computers together. Your router is responsible for forwarding packets, and your ISP (by default) is responsible for domain name resolution. And it's only because of all the data centers spread around the world that there are any websites to connect to in the first place.

So I don't think there's anything so untoward about handing off HTTPS resolution to a different machine on your network. It only sucks if you're e.g. using a laptop on the road.
I mean you're not wrong, but now you're making me wish I could hand HTTPS handling to my router. But it's not that advanced, and I don't have much in the way of low power computers that could do this sort of thing.

I should really get a single board computer to run things like this, piehole, among other things.

Part of what makes it harder to let go is that especially these later PowerMacs come squarely from the Internet Era, and were very much intended to be taken online. And now they're just not very good at it anymore.
 
@Wowfunhappy : We could always try squid2 and/or squid3 for ppc. Those both still offer the functionality that we need. However the configs differ from 4. Looking at 3's default config makes my brain bleed though. So if you're interested, create some modified squid2 and/or squid3 macports recipes with a usable squid.conf and i'll build them. We might get lucky because newer isn't always better.

Cheers

edit: @Macbookprodude installing ublock-origin/adblock-latitude etc and noscript/umatrix etc to block ads and block select scripts make browsing much faster. Also foxPEP will help as well. Or in TFF/icewesel prefs select a mobile useragent to get the lighter mobile pages of sites like ebay that support mobile layouts.
 
Last edited:
  • Like
Reactions: repairedCheese
Those both still offer the functionality that we need.
Sadly, I don't think they do. Squid 4 has the ability to automatically download intermediate certificates as needed, like a web browser does, whereas Squid 3 cannot. See: https://wiki.squid-cache.org/Config...umpExplicit#Missing_intermediate_certificates.

This is why I went with Squid 4 originally.

We could maybe download common intermediate certificates ahead of time (I'm not sure how many there are?), but I think we'd end up playing wackamole with different websites, which isn't something I want to do.
 
Last edited:
Couldn't we just use the ca-cert-bundle? It's basically what mozilla based browsers ship with. https://wiki.mozilla.org/CA/Included_Certificates
That's the root CA, it's already included with the package. (Specifically, I got it from https://curl.se/docs/caextract.html—as noted in the readme, you'll want to redownload and replace this once every couple of years, should I ever drop off the face of the earth.)

The problem is, a lot of sites use certificates which aren't trusted by the common root CAs. Instead, they'll tell the application to download an intermediate CA, which trusts the site certificate and is trusted by the root CA, and so completes the chain of trust.

Or at least, that's my own limited understanding of the situation. What I know for sure is that in practice, most sites don't work for me in Squid 3, and they didn't work in Squid 4 until I figured out that I needed to enable certificate-fetching in squid.conf.
 
Last edited:
Bummer. Yeah this is kind of new to me also, so i don't have a full grasp of how all the "handoffs" work. It's too bad tinyproxy only supports HTTP (not HTTPS) currently. For fun and curiousity i built stunnel and tinyproxy on Leopard PPC. I used stunnel to listen on port 8888 and forward to tinyproxy on port 3128. It works great, but only for HTTP.
 
Bummer. Yeah this is kind of new to me also, so i don't have a full grasp of how all the "handoffs" work. It's too bad tinyproxy only supports HTTP (not HTTPS) currently. For fun and curiousity i built stunnel and tinyproxy on Leopard PPC. I used stunnel to listen on port 8888 and forward to tinyproxy on port 3128. It works great, but only for HTTP.
Will this also work on OS 9, so I can use internet on 9, or is this only for Leopard ?
 
Will this also work on OS 9, so I can use internet on 9, or is this only for Leopard ?
Does Mac OS 9 support https proxies? If it does, you can actually use Squid with Mac OS 9, just not on the same computer.

The instructions for this aren't quite spelled out in the installer, but you need to (1) install Squid on a new Mac, (2) enter the new Mac's IP address into the https proxy settings of the old Mac, (3) copy squid.pem from the new Mac to the old Mac, and (4) trust the certificate on the old Mac.

I've never actually used Mac OS 9 (ever, as far as I can recall), so I don't know exactly what steps 2 and 4 would look like, but there's probably a way to do it? If https proxies aren't supported natively, there's probably some Mac OS 9 software that could do it.
 
Last edited:
That just lets you access the system's webkit from a Carbon app. Nothing to do with backporting a newer WebKit engine.
 
  • Like
Reactions: Bruninho
🤔

Y'know, there might be a way to make Squid 3 work. Without intermediate certificates, it can't verify the chain of trust... but we could tell it to just go ahead and load the website anyway. Just change sslproxy_cert_error deny all to sslproxy_cert_error allow all.

This completely defeats the point of using https in the first place—an attacker could intercept, monitor, and even modify your traffic, and Squid would just keep chugging along. But, I'm guessing most people just want stuff to work...

Something to think about. Of course, at this point, I can't even say whether Squid 3 would work any better, but it probably would. It doesn't require a C++11 compiler.
 
Does Mac OS 9 support https proxies? If it does, you can actually use Squid with Mac OS 9, just not on the same computer.

The instructions for this aren't quite spelled out in the installer, but you need to (1) install Squid on a new Mac, (2) enter the new Mac's IP address into the https proxy settings of the old Mac, (3) copy squid.pem from the new Mac to the old Mac, and (4) trust the certificate on the old Mac.

I've never actually used Mac OS 9 (ever, as far as I can recall), so I don't know exactly what steps 2 and 4 would look like, but there's probably a way to do it? If https proxies aren't supported natively, there's probably some Mac OS 9 software that could do it.
Ok, I am going to attempt to install Squid on Snow Leopard which is on my Mac Pro. I will then try it and let you know. But all I know is i TRIED to install legacy-ppc Squid and it did not work on Mojave, so I am certain maybe Snow Leopard it work will. I let you know.
 
(The package shouldn’t let you install PPC Squid on Intel—it should automatically display only the correct version for your system, so the user doesn't even know there are separate versions. If that's not happening, it's a bug, please send a screenshot.)
 
Last edited:
Ok, I am going to attempt to install Squid on Snow Leopard which is on my Mac Pro. I will then try it and let you know. But all I know is i TRIED to install legacy-ppc Squid and it did not work on Mojave, so I am certain maybe Snow Leopard it work will. I let you know.

Dear Macbookprodude,

Everyone in this forum is pro-PowerPC and we—as a community—want LWK to function at the highest performance possible. @Wowfunhappy and @wicknix are doing the PowerPC community a HUGE service with the unpaid work they're doing to create an easy to install fix for LWK's HTTPS issues.

I would love for you to contribute to this community in a positive way, yet you are currently disrupting this project with your behavior.

If you do not have anything constructive to offer, I politely ask that you refrain from posting here until you are able to act in a courteous and polite fashion.

Sincerely,
Micah Gartman
 
Because thats for PPC Leopard only. You need to install the Intel version.
Ok, I installed Squid in Snow Leopard on my Mac Pro - Firefox now works and safari now works.. However, Leopard under PPC on my PowerBook G4 is not working. Is there a fix for this ?
Dear Macbookprodude,

Everyone in this forum is pro-PowerPC and we—as a community—want LWK to function at the highest performance possible. @Wowfunhappy and @wicknix are doing the PowerPC community a HUGE service with the unpaid work they're doing to create an easy to install fix for LWK's HTTPS issues.

I would love for you to contribute to this community in a positive way, yet you are currently disrupting this project with your behavior.

If you do not have anything constructive to offer, I politely ask that you refrain from posting here until you are able to act in a courteous and polite fashion.

Sincerely,
Micah Gartman
ok, I apologize for that. I was just frustrated, though under Snow Leopard old safari is working with squid - not too sure if LWK will work under snow leopard. Even Firefox under SL is now allowing Wikipedia to load. I am waiting for a result in Leopard on the PPC side.

I too am pro-PPC, more anti-Intel, no opinion on M1.
 
  • Like
Reactions: micahgartman
Because thats for PPC Leopard only. You need to install the Intel version.
Ok, so I installed the Intel version I believe 4.0 or something like that under Snow Leopard - Firefox is able to load Wikipedia and 68kmla.org with no issues. It also stays connected. But, so far with legacy-ppc squid the proxy shuts off automatically when I try to load other sites using LWK. It’s hard to picture it, but when I goto www.eBay.com using LWK, the site locks up and I have to reboot to get the proxy running again. With your browsers I have no issues at all.
 
I mean you're not wrong, but now you're making me wish I could hand HTTPS handling to my router. But it's not that advanced, and I don't have much in the way of low power computers that could do this sort of thing.

I should really get a single board computer to run things like this, piehole, among other things.

Part of what makes it harder to let go is that especially these later PowerMacs come squarely from the Internet Era, and were very much intended to be taken online. And now they're just not very good at it anymore.
Agreed ! It’s not the PowerPC Macs fault that they can’t be taken on line, the fault is in the part of why the internet got go complicated - it went from simple page rendering with little to no ads, to full blown bloatmess that these are causing issues with the processor and architecture - or it could mean, that we should move to Linux where things will run better. How much longer will Leopard continue to be useful for us ? So in answer to your post, PPC Macs can handle it, just not under the load of Leopard and that all ready takes up
A lot of the computer’s resources.

even on my PowerBook G4 1Ghz titanium this is evident. Now, if there was a way for the G4 to access more than 1, or 2GB of memory, there maybe hope.. even on my Quad G5 the internet brings that to its knees.
 
I for one am exceedingly happy that wicknix, etc (all clever, hard-working folks) are willing to spend much of their free time/brain power playing with these older machines/OS'. I love these oldies but goodies as well (typing this in TFF on my MDD, but also have a couple of Pismos and G3 iBooks, a G4 1GHz iMac and a passel of 15" & 17" Powerbooks) but aren't quite so clever...
I do hope to get this up and running. Should I be successful, I'll try using it as a proxy for my browsers on my NeXT, Sun & SGI boxes...
I apologize for that message - was just upset, but the reality is internet standards are what is hurting PPC Macs from browsing the internet - under archive.com and trying to go back to 2000 where the internet was much cleaner and pages loaded fast on our PPC Macs, seems we traded good clean HTML for bloat which is why the internet today is so so bad - sign all the ads, the pop ups, etc - these all use machine resources where the G4 and G5 can’t handle it. I would like to see a better internet one day without all the bloat and JavaScript which is making browsing HTTP on any PPC Mac horrible. No way a 2.5 quad G5 can’t handle today’s internet. When I saw how the internet was back in 2000’s, it was so much better ! I remember in 2005 up to 2010, I could even browse most sites on PPC and even using OS 9. Now, it’s all a distant memory.
 
Installed wowfunhappy's package - many thanks for putting it together! (For my own edification, I used 'pkgutil' to look in the pkg to see where it installs everything.) But, alas, your command for loading the squid job into launchd does not work - 'launchctl list|grep com.wowfunhappy.squid' does not show it after installation finishes. Easy enough to start up with 'launchctl load /Library/LaunchAgents/com.wowfunhappy.squid.plist' , though - and, presto, squid starts (shows up in 'ps -afxwh|grep squid|grep -v grep' ). After configuring the system proxy settings as described, LWK has no problem reaching www.wikipedia.org, etc...
I'm running this on a 1.67GHz G4 PB under 10.5.8 and squid is using next-to-nothing in processor cycles...
 
  • Like
Reactions: Wowfunhappy
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.