Short:        HTTPS downloader with TLS 1.3, no deps
Author:       Stefan Franke (bebboget), Michele Dipace (AROS port)
Uploader:     michele dipace kaffeine net (Michele Dipace)
Type:         comm/net
Version:      1.11
Requires:     AROS for the Raspberry Pi (aarch64) with AROSTCP
Architecture: i386-aros

WHAT IS THIS?

bebboget gets files from HTTPS and HTTP servers. It supports TLS 1.2 and
TLS 1.3 and needs only bsdsocket.library: the crypto code is built in.
installcerts installs root certificates from a PEM bundle.

bebboget is by Stefan "Bebbo" Franke. This archive is my port to
AROS aarch64 (the Raspberry Pi port of AROS).
The original 68k version is comm/net/bebboget.lha;
the AROS i386 build is comm/net/bebboget.i386-aros.lha,
the AROS x86_64 build is comm/net/bebboget.x86_64-aros.lha.

REQUIREMENTS

- AROS for the Raspberry Pi (aarch64) with AROSTCP.
- A configured TCP/IP stack (AROSTCP, bsdsocket.library).

INSTALLATION

Copy the two programs to C: or to another directory in the path:

    Copy bebboget installcerts C:

bebboget keeps a random seed in ENVARC:bebboget/random_seed.

CERTIFICATES

bebboget comes without certificates. For a server it cannot verify it asks
at the console: (a)bort, (i)nstall or (c)ontinue. To install the root
certificates of the curl CA bundle once:

    bebboget --sloppy -D RAM: -o cacert.pem https://curl.se/ca/cacert.pem
    installcerts RAM:cacert.pem

--sloppy skips the certificate checks for that download. If you prefer, copy
cacert.pem from a machine you trust instead.

The certificates go to SYS:Prefs/Env-Archive/certs.

USAGE

    bebboget [options] <url>

For example:

    bebboget -D RAM: https://aminet.net/comm/net/bebboget.readme

bebboget -? lists the options. Ctrl-C stops a download. A download that ends
before its Content-Length is reported and returns 10.

KNOWN LIMITS

- The HTTP status is not checked: an error page from the server is saved as
  the file.
- TLS 1.2 has no ECDHE-ECDSA cipher suites: such servers need TLS 1.3.
- A server whose chain ends in a cross-signed root that is no longer in the
  bundle needs a confirmation at the console (www.google.com today).
- Errors such as "certificate not accepted" return 0.
- aarch64: the Raspberry Pi has no clock. Set the date first (Date), or
  the certificates are reported as not valid today.
- aarch64: the AROS system for the Raspberry Pi has no LhA. Unpack the
  archive on another computer and copy the bebboget drawer to the SD card.

SOURCE AND LICENSE

GNU GPL v3 or later; the files derived from SUPERCOP are public domain. See
COPYING and LICENSE. Source of this release:
  https://github.com/kaffeine1/bebboget-aros/tree/v1.11-aros-aarch64
Original bebboget: https://franke.ms/git/bebbo/bebboget
Bug reports: https://github.com/kaffeine1/bebboget-aros/issues

Port by Michele Dipace <michele.dipace@kaffeine.net>.

Support my work on the AROS port on Patreon:
  https://www.patreon.com/c/kaffeine1
or with a one-time contribution on Ko-fi:
  https://ko-fi.com/kaffeine1
Contributions are voluntary; no subscription is required to use
this software.

HISTORY

1.11 (10.11.2026)
- First AROS release, from bebboget 1.11 with the fixes I sent upstream:
  certificate dates, RSA work buffers, P-384 reduction, ECDSA curve choice,
  SHA-384/SHA-512 RSA signatures, long ASN.1 lengths, variadic lists on
  64 bit, http:// port, quoted file names, truncated downloads, the lock of a
  new certificate directory, Content-Length split across reads.