From array_hourly_0u at icloud.com  Wed Jun 10 12:18:21 2026
From: array_hourly_0u at icloud.com (array_hourly_0u at icloud.com)
Date: Wed, 10 Jun 2026 09:18:21 -0700
Subject: Exposing OFX `online_id` (FITID) in the engine API / Python
 bindings
In-Reply-To: <mailman.5.1780329601.23185.gnucash-devel@gnucash.org>
References: <mailman.5.1780329601.23185.gnucash-devel@gnucash.org>
Message-ID: <6D6A1D37-3754-4E5B-87EE-8213EDC0048F@icloud.com>

Greetings,
     I have now submitted a PR for a minor feature enhancement
addressing the online_id issue I presented below.
https://github.com/Gnucash/gnucash/pull/2240

Please reach out if you have any questions or comments.

Kind regards,

Noah




> Date: Sun, 31 May 2026 15:48:01 -0700
> From: array_hourly_0u at icloud.com
> To: gnucash-devel at gnucash.org
> Subject: Exposing OFX `online_id` (FITID) in the engine API / Python
>         bindings
>
> Hi all,
>
> I'm building a small Python tool that imports bank OFX/QFX transactions by
> parsing the file in Python and writing the transactions through the official
> GnuCash Python bindings. To behave like the GnuCash app GUI importer, I
> need two things it gets from libofx:
>
> 1. Per-transaction de-duplication: set/read each imported split's
> **`online_id`**
>    (the OFX **FITID**) so re-imported or overlapping statements don't create
>    duplicates.
> 2. Account mapping: read/write an account's **`online_id`** (the bank
>    identifier) so I know which GnuCash account a statement belongs to.
>
> >From reading the source, both values already live in the engine as a plain
> KVP
> slot (`"online_id"`) on Split/Account/Transaction ? the same slot the OFX
> and
> HBCI importers use. But it isn't reachable the way I'd expect: the only C
> accessors are the `gnc_import_*_online_id` helpers over in the import-export
> module, and nothing is exposed to the Python bindings (the bindings only
> wrap
> functions declared in the public Split/Account/Transaction headers).
>
> The approach I'd like to propose is to promote `online_id` to **first-class
> engine accessors**, alongside an object's other identity data ? e.g.
>  - `xaccSplitGetOnlineID`
>  - `xaccSplitSetOnlineID`
>  - `xaccAccountGetOnlineID`
>  - `xaccAccountSetOnlineID`
>  - `xaccTransactionGetOnlineID`
>  - `xaccTrannsactionSetOnlineID`  (no practical use currently)
>
> There's no new logic ? the KVP get/set already exists
> internally; this just makes it public. A nice side effect is that the Python
> binding then comes essentially for free through the existing auto-wrapper
> (`Split.GetOnlineID()`, etc.), with no SWIG interface changes.
>
> The change is purely additive ? same KVP slot, no behaviour or data change
> ? and I've left the existing import-export helpers untouched (they could
> delegate to the
> new accessors later if you'd like a single source of truth).
>
> I have a branch with the accessors, C round-trip + KVP-parity tests, and
> Python
> binding tests, all passing locally (native build and a from-source container
> build with the SQL backend):
> https://github.com/Noerr/gnucash/tree/online-id-engine-accessors
>
> Before I open a PR I wanted to check: does promoting `online_id` to the
> public engine API sound like an agreeable direction?
>
> Happy to adjust. Thanks for all your work on GnuCash.
>
> Best,
> Noah

From mikee at saxicola.co.uk  Wed Jun 10 13:56:49 2026
From: mikee at saxicola.co.uk (Mike Evans)
Date: Wed, 10 Jun 2026 18:56:49 +0100
Subject: https://petition.parliament.uk/petitions/769610
Message-ID: <20260610185649.3cdefded@saxicola.saxicola.co.uk>

Create a government-owned, free software for Making Tax Digital (MTD)

https://petition.parliament.uk/petitions/769610

Sign this please.
-- 
GPG Key ID: DB8F7CF1C67BBC0F
Keyserver: https://keys.openpgp.org

From array_hourly_0u at icloud.com  Wed Jun 10 14:48:09 2026
From: array_hourly_0u at icloud.com (array_hourly_0u at icloud.com)
Date: Wed, 10 Jun 2026 11:48:09 -0700
Subject: reparenting a committed split drops its KVP slots on SQL backends
 (`xaccSplitSetParent`)
Message-ID: <C3D27781-6ACB-44ED-BD94-1653AEBD87A3@icloud.com>

Hi all,

While building a Python tool on the bindings I hit what looks like an
engine + SQL-backend
bug, and I'd like to sanity-check my analysis before opening a Bugzilla & PR.

Reparenting splits rather than deep copying into new split instances
allows for more natural expressions for operations through the C &
Python Bindings. The bindings interface already exposes this
`SetParent` mechanism, but some properties of the split are dropped
for SQL backends -- XML backends are fine.

**Symptom.** If I move an already-committed split to a different
transaction with
`xaccSplitSetParent`, then destroy the old transaction and save, the
moved split *keeps*
its native fields (account, value, reconcile) but **loses its KVP
slots** ? in my case the
OFX `online_id`, but it's any slot on the split (e.g. the cap-gains
`gains-source`/
`gains-split` links). This happens on the **SQL/DBI backends**
(reproduced on SQLite; the
code path is shared, so MySQL/PostgreSQL too). The **XML backend is
unaffected**. Depending
on the exact sequence the SQL save can also fail outright with
`UNIQUE constraint failed: transactions.guid` rather than silently
dropping the slot.

**Minimal reproduction (C engine API, SQL-backed book):**

```c
/* Two committed transactions T1, T2 in a SQL-backed book (sqlite3://,
mysql://, ...).
   Split D is in T2, on a credit-card account, tagged with an online_id slot
   (exactly as the OFX importer leaves it): */
gnc_import_set_split_online_id(D, "F_cc");      /* set + committed earlier */

/* move the committed split D from T2 to T1, then destroy the vacated
old txn: */
xaccSplitSetParent(D, T1);
xaccTransBeginEdit(T2);
xaccTransDestroy(T2);
xaccTransCommitEdit(T2);
qof_session_save(session, NULL);

/* reload the book and re-fetch the surviving split on the credit-card account:
     xaccSplitGetParent(split) == T1, account/value/reconcile all intact, BUT
     gnc_import_get_split_online_id(split) == NULL          -- the slot is gone.
   (The XML backend preserves it; on SQL the save can instead fail with
     "UNIQUE constraint failed: transactions.guid".)  */
```

**Root cause (from reading the source).** Two things conspire:

1. *Engine, `xaccSplitSetParent` (Split.cpp).* The split is marked dirty
   (`qof_instance_set_dirty`) **after**
`xaccTransCommitEdit(old_trans)`. So during the old
   transaction's commit, `trans_cleanup_commit` (Transaction.cpp) sees
the split as *clean*
   and skips the branch that would remove a moved-out split ? even
though `split->parent`
   already points at the new transaction. The split is left dangling
in `old_trans`'s
   in-memory split list.

2. *SQL backend, `delete_splits` / `delete_split_slots_cb`
(gnc-transaction-sql.cpp).* When
   the old transaction is destroyed, the backend deletes split *rows*
keyed on `tx_guid`
   (the moved row is safe ? it now carries the new `tx_guid`), but it
walks the old
   transaction's (stale) split list and deletes each split's *slots*
by the split's **own
   GUID** (`gnc_sql_slots_delete`, gnc-slots-sql.cpp), with no check
that the split still
   belongs to that transaction. So the moved split's slots are deleted
out from under it.

That explains the native-vs-KVP asymmetry: native fields live in the
`splits` row (keyed by
`tx_guid`, rewritten under the new transaction); KVP lives in the
`slots` table keyed by the
split's GUID, which the old transaction's destroy deletes. XML is
unaffected because it
re-serializes the whole in-memory book (which is correct) rather than
doing incremental,
GUID-keyed deletes.

**Why it seems to have gone unnoticed.** Reparenting a *committed*
split between two
existing transactions appears exposed only through the API bindings ? every
`xaccSplitSetParent` caller I found in the GUI, importers, and scrub
code creates a fresh
split first (prior parent NULL), and the generic import matcher copies
the `online_id` onto
the existing split and destroys the imported transaction rather than
moving a split. So the
trigger is the intersection of (a script that moves a live split) and
(a SQL backend).

**Proposed fix.** The minimal, root fix is in the engine: in
`xaccSplitSetParent`, move the
`qof_instance_set_dirty(QOF_INSTANCE(s))` to *before*
`xaccTransCommitEdit(old_trans)` (right
after `s->parent = t`). Then the moved split is dirty during the old
transaction's cleanup
commit and is removed from its split list as that code already intends
? so the old
transaction's destroy never touches it. This is backend-agnostic and
fixes loss of *any* KVP
slot on a reparented split, not just `online_id`. As defense-in-depth,
`delete_split_slots_cb`
could also guard on `xaccSplitGetParent(sp) == <transaction being
destroyed>` before deleting
a split's slots. (Separately, `xaccSplitSetParent` is currently
undocumented in Split.h ? happy
to add a doc comment covering the move semantics and the
single-edit-block constraint.)



Does the dirty-ordering fix look like the right place to address this?

Thanks for all your work on GnuCash.

Best,
Noah

From derek at ihtfp.com  Wed Jun 17 16:17:13 2026
From: derek at ihtfp.com (Derek Atkins)
Date: Wed, 17 Jun 2026 16:17:13 -0400
Subject: [MAINT] unplanned network outage from ~8:00pm 6/16 to 3pm 6/17
Message-ID: <4a2bf17bb366268c043ff1e2f6a37caa.squirrel@mail.ihtfp.org>

Hi,

There was an upstream ISP issue that took down my network from around 8pm
last night through 3pm today (US/EDT).  No servers were harmed in the
process, just the pipe up.  I don't know what broke; it wasn't anything on
my property.

When I called them, they acknowledged there was an issue and their techs
were working on it with an ETA of 11am.  When I called this morning around
9:30, they changed the ETA to 2pm.  That 2pm ETA still held at 1pm, but it
didn't actually return until almost 3.

Everything should be back online now.

Sorry for the inconvenience.

-derek

-- 
       Derek Atkins                 617-623-3745
       derek at ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant


From jralls at ceridwen.us  Sat Jun 20 18:30:08 2026
From: jralls at ceridwen.us (John Ralls)
Date: Sat, 20 Jun 2026 15:30:08 -0700
Subject: String Freeze
Message-ID: <291604CB-0E74-4B7F-93F5-CB8FB6E4AFC7@ceridwen.us>

It?s a week before the 5.16 release so I?ve made and merged a new gnucash.pot. Developers, please don?t push any translatable string changes until after the release.

Regards,
John Ralls


From jralls at ceridwen.us  Thu Jun 25 20:54:45 2026
From: jralls at ceridwen.us (John Ralls)
Date: Thu, 25 Jun 2026 17:54:45 -0700
Subject: ANNOUNCE: Stable branch force-pushed
Message-ID: <9137D6E3-D065-4A77-9B9E-C61AF5958AFA@ceridwen.us>

The future branch somehow got pushed onto stable. I?m not entirely sure how, but I?ve done a hard reset to the last correct stable commit 7f4e8c29e0 and force-pushed to fix it. If you have trouble pulling from stable then fetch it instead and hard-reset from origin/stable:
  git fetch origin stable
  git reset --hard origin/stable

Regards,
John Ralls
_______________________________________________
gnucash-announce mailing list
gnucash-announce at gnucash.org
https://lists.gnucash.org/mailman/listinfo/gnucash-announce

From tommy.trussell at gmail.com  Sat Jun 27 23:46:59 2026
From: tommy.trussell at gmail.com (Tommy Trussell)
Date: Sat, 27 Jun 2026 22:46:59 -0500
Subject: wiki.gnucash.org certificate missing
Message-ID: <CABNyZMzrMxJJS9yJt_zWgKj24ZgC3D03Vm7_8rFaxim6NtBKVA@mail.gmail.com>

I noticed today the certificate for wiki.gnucash.org doesn't validate (the
certificate is only valid for code.gnucash.org) so my browser marks the
wiki's https as unsafe.

It used to work as expected, I seem to recall.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gnucash.org/pipermail/gnucash-devel/attachments/20260627/891922ef/attachment.htm>

From derek at ihtfp.com  Sun Jun 28 09:44:55 2026
From: derek at ihtfp.com (Derek Atkins)
Date: Sun, 28 Jun 2026 09:44:55 -0400
Subject: wiki.gnucash.org certificate missing
In-Reply-To: <CABNyZMzrMxJJS9yJt_zWgKj24ZgC3D03Vm7_8rFaxim6NtBKVA@mail.gmail.com>
References: <CABNyZMzrMxJJS9yJt_zWgKj24ZgC3D03Vm7_8rFaxim6NtBKVA@mail.gmail.com>
Message-ID: <e0b2539100741aa266f87fd9359fa1cf.squirrel@mail.ihtfp.org>

It's working fine for me...  See attached certificate report.

How did you test it?
Note that you need to use SNI, because it is a multi-homed server.

Note that the certificate just updated today..

-derek

On Sat, June 27, 2026 11:46 pm, Tommy Trussell wrote:
> I noticed today the certificate for wiki.gnucash.org doesn't validate (the
> certificate is only valid for code.gnucash.org) so my browser marks the
> wiki's https as unsafe.
>
> It used to work as expected, I seem to recall.
> _______________________________________________
> gnucash-devel mailing list
> gnucash-devel at gnucash.org
> https://lists.gnucash.org/mailman/listinfo/gnucash-devel
>


-- 
       Derek Atkins                 617-623-3745
       derek at ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Certificate for wiki.gnucash.org.pdf
Type: application/pdf
Size: 71031 bytes
Desc: not available
URL: <http://lists.gnucash.org/pipermail/gnucash-devel/attachments/20260628/c3a69ff3/attachment-0001.pdf>

From jralls at ceridwen.us  Sun Jun 28 15:13:39 2026
From: jralls at ceridwen.us (John Ralls)
Date: Sun, 28 Jun 2026 12:13:39 -0700
Subject: ANNOUNCE: GnuCash 5.16 Released
Message-ID: <840C174D-6432-48CD-913D-87E212CDF12A@ceridwen.us>

The GnuCash development team announces GnuCash 5.16, the seventeenth release in the stable 5.x series.
Between 5.15 and 5.16, the following bugfixes were accomplished:

    Bug 421610 - RFE: Include logical dates for View->Filter by "date range"The Select Range section of the Date tab of the register's Filter By dialog box is changed to provide relative, specific date, or days ago options for the start and end of the filter range. The Show number of days item label is changed to Show from days ago to better reflect what it does.
    Bug 436105 - esc key not working as expected in register: Enable the escape key to cancel a field edit.
    Bug 797384 - Gnucash doesn't handle commodity prices with big numerator/denominator properly.
    Bug 798004 - Next gen UI for stock transactions
    Bug 799314 - Add "enter now" option in scheduled transaction editor. tab to allow users to select the scheduled transactions to be included in a ?Since Last Run?? window. If there are no instances of a selected transaction triggered by today?s date, the next instance is triggered.
    Bug 799751 - autocomplete crash
    Bug 799759 - Users can't Enable entries via Checkboxes on Scheduled Transactions PageAllow the Enabled box in the list of scheduled transactions to be operated instead of having to open the transaction editor dialog and change the Enabled checkbox. Also added use of the Name column as the secondary column sort for all the other columns.
    Bug 799762 - Poor handling of cases where hidden/placeholder accounts are used in the account register
    Bug 799766 - Double line preference not respected in search register
    Bug 799767 - POST /accounts in bindings/python/example_scripts/rest-api is broken
    Bug 799777 - `xaccSplitSetParent`: reparenting a committed split silently drops its KVP slots (online_id, cap-gains links)

The following fixes and improvements were not associated with bug reports:

    Numeric values may now be selected to copy in the Accounts page.
    Add new Finance::Quote source Finnhub.io: Free API key (personal/non-professional use) available at https://finnhub.io. Set FINNHUB_API_KEY environment variable to API key to use this source. As of June 2026, free tier API limit is 60 API calls/minute.
    The Investment Lots report has new optional columns for Computed Annual Growth Rate.
    Python Bindings: Improved translation of primary object (Account, Transaction, Split, etc.) so that they can be treated as normal Python objects. This is accomplished with SWIG magic so no existing code is obsoleted.
    Python Bindings: Better conversion of GLists to Python lists.
    Python Bindings: Destroy the QofSession in the Python Session dtor to prevent leaving the database locked.
    [engine] Add first-class online_id accessors for Split and Account and make them available to Python bindings, removing the unused Transaction online_id property.
    Improve C++ implementation of QofBook.
    Correct the Doxygen doc for qof_instance_get/set_kvp.
    [gnc-log-replay.cpp] fix incorrect guid dump
    Add some Boost library requirements needed by libgnucash-guile to CMakeLists.txt so that missing feature will fail at configure time.
    Use Compile-time Regular Expressions instead of std::regex in gnc-filepath-utils.cpp and instead of boost::regex in the CSV importer, with the CTRE v3.11.1 header added to borrowed
    [gnc-filepath-utils.cpp] null check char* arguments
    Add ChartJS licenses.
    Removed AEX from list of commodities. euronext.com is now using JS based anti-webscraping.
    [report-core] always offer options summary in reports. This is useful to debug reports. The Add options summary option is removed because it's no longer optional.
    Remove remaining obsolete IMContext from sheet
    Fix blurry text in HiDPI offscreen-rendered widgets
    Add port field to database connection dialog: The convention of appending the port number after the host isn't obvious.
    When editing a split in the register treat the account as being changed only if it isn't the one selected before editing instead of if the user performed an edit
    Return immediately from qof_book_destroy if hash_of_collections is null. If qof_book_destroy is called on a QofBook* freshly created with qof_book_new (usually because it was used to create a session that now must be destroyed) it would try to empty the non-existent hash tables, crashing.
    Clean up Flathub metadata to solve warnings at flatpak build time.
    Be consistent in naming GncPluginPage and GncPluginPageRegister
    HTML: Remove unimplemented function declarations.
    [gnc-html.cpp] remove unused buggy string conversion functions
    Convert libgnc-html to C++
    Apply -Wall -Werr -Wmissing-prototypes to C++ compilation on Windows and fix the resulting errors.

New and Updated Translations: Arabic, Croatian, Danish, Dutch, German, Finnish, Hungarian, Korean, Norwegian-Bokmal, Spanish

Help translate GnuCash on Weblate: https://hosted.weblate.org/engage/gnucash/

Known Problems

Complete list of all open bugs: https://bugs.gnucash.org/buglist.cgi?bug_severity=blocker&bug_severity=critical&bug_severity=major&bug_severity=normal&bug_severity=minor&bug_severity=trivial&bug_status=NEW&bug_status=ASSIGNED&bug_status=NEEDINFO&bug_status=REOPENED&limit=0&list_id=8149&order=priority%2Cbug_severity&query_format=advanced

Documentation
The following fixes and improvements were not associated with bug reports:

    Fix the description of the Character-separated radio button in the CSV Import Assistant to match the label.

Updated Translations: None.

Getting GnuCash for Windows and MacOS

GnuCash is provided for both Microsoft Windows 10? and later and MacOS 10.13 (High Sierra)? and later in pre-built, all-in-one packages. An installer is provided for Microsoft Windows? while the MacOS? package is a disk image containing a drag-and-drop application bundle.

GnuCash is also available as a flatpak from Flathub.org. Instructions for installing and running: https://wiki.gnucash.org/wiki/Flatpak

The SHA256 Hashes for the downloadable files are:
bb9b6c67ebb6a3e06d9ff4f4e0417a97bef0159d26912be9b0e75a32901fd493  gnucash-5.16.tar.bz2
b9f4f0f0dcee6a452f94da502a65cb05c3672444c9ae883700eae4d3a159fa38  gnucash-5.16.tar.gz
405930f8ae3e943c2b8f0a6ca3336e62922ad041384706f1688823c2135b7d2c  gnucash-5.16.setup.exe
874f3e4269d42973baa652f41858712cecb82df957480b309be8d94edc4926ae  Gnucash-Arm-5.16-1.dmg
ff847bdbfa768b4da1e56ae46950b41944e9f6e337bfd5629430c7c7982b9a37  Gnucash-Intel-5.16-1.dmg
bb03f03967e4bc6442da5de939b7b8d250c56f4211d699e20eb6b1569859fe56  gnucash-docs-5.16.tar.gz

Note that at the time of this email https://www.gnucash.org/ is not taking updates so it doesn?t have the links. Use the direct links below to get GnuCash 5.16

Microsoft Windows:
https://downloads.sourceforge.net/gnucash/gnucash%20%28stable%29/5.16/gnucash-5.16.setup.exe
https://github.com/Gnucash/gnucash/releases/download/5.16/gnucash-5.16.setup.exe

Apple macOS:
https://downloads.sourceforge.net/gnucash/gnucash%20%28stable%29/5.16/Gnucash-Arm-5.16-1.dmg
https://downloads.sourceforge.net/gnucash/gnucash%20%28stable%29/5.16/Gnucash-Intel-5.16-1.dmg
https://github.com/Gnucash/gnucash/releases/download/5.14/Gnucash-Arm-5.16-1.dmg
https://github.com/Gnucash/gnucash/releases/download/5.14/Gnucash-Intel-5.16-1.dmg

Getting GnuCash as source code
If you want to compile GnuCash 5.16 for yourself, the source code can be downloaded from:
https://downloads.sourceforge.net/gnucash/gnucash%20%28stable%29/5.16/gnucash-5.16.tar.bz2
https://downloads.sourceforge.net/gnucash/gnucash%20%28stable%29/5.16/gnucash-5.16.tar.gz
https://github.com/Gnucash/gnucash/releases/download/5.16/gnucash-5.16.tar.bz2
https://github.com/Gnucash/gnucash/releases/download/5.16/gnucash-5.16.tar.gz

You can also checkout the sources directly from the git repository as described at https://wiki.gnucash.org/wiki/Git.

To compile GnuCash from the source code by yourself, you will need at least Gtk+ 3.22.30, Guile 2.0, Boost 1.67, WebKitGtk 2.4, GoogleTest 1.8.0, cmake 3.14.5 and SWIG 2.0.12. Please consult the README.dependencies file in the sources for the exact list of dependencies and versions.
Getting the documentation

Getting the documentation

The documentation is available at Documentation page of the GnuCash website. The 5.13 documentation can be found under "GnuCash v5 (current stable release)" in multiple languages both for reading online and for download in pdf, epub, and mobi formats. The documentation is also included in the MacOS and Windows application bundles.

If you want to compile the GnuCash Documentation 5.16 for yourself, the source code can be downloaded from:

Sourceforge: https://downloads.sourceforge.net/gnucash/gnucash%20%28stable%29/5.16/gnucash-docs-5.16.tar.gz 
GitHub: https://github.com/Gnucash/gnucash/releases/download/5.14/gnucash-docs-5.16.tar.gz

You can also checkout the sources directly from the git repository as described at https://wiki.gnucash.org/wiki/Git.

About the Program

GnuCash is a free, open source accounting program released under the GNU General Public License (GPL) and available for GNU/Linux, *BSD, Solaris, MacOS, and Microsoft Windows. Programming on GnuCash began in 1997, and its first stable release was in 1998.

Regards,
John Ralls

_______________________________________________
gnucash-announce mailing list
gnucash-announce at gnucash.org
https://lists.gnucash.org/mailman/listinfo/gnucash-announce
_______________________________________________
gnucash-announce mailing list
gnucash-announce at gnucash.org
https://lists.gnucash.org/mailman/listinfo/gnucash-announce

From list+gnucash at jdlh.com  Sun Jun 28 17:36:52 2026
From: list+gnucash at jdlh.com (Jim DeLaHunt)
Date: Sun, 28 Jun 2026 14:36:52 -0700
Subject: wiki.gnucash.org certificate missing
In-Reply-To: <e0b2539100741aa266f87fd9359fa1cf.squirrel@mail.ihtfp.org>
References: <CABNyZMzrMxJJS9yJt_zWgKj24ZgC3D03Vm7_8rFaxim6NtBKVA@mail.gmail.com>
 <e0b2539100741aa266f87fd9359fa1cf.squirrel@mail.ihtfp.org>
Message-ID: <9e53f06d-dc88-4313-a6a9-c0157af48d99@jdlh.com>

Derek:

On 2026-06-28 06:44, Derek Atkins wrote:
> It's working fine for me...  See attached certificate report.
>
> How did you test it?
> Note that you need to use SNI, because it is a multi-homed server.
>
> Note that the certificate just updated today..
>
> -derek
>
> On Sat, June 27, 2026 11:46 pm, Tommy Trussell wrote:
>> I noticed today the certificate for wiki.gnucash.org doesn't validate (the
>> certificate is only valid for code.gnucash.org) so my browser marks the
>> wiki's https as unsafe.
>>
>> It used to work as expected, I seem to recall.
>> _______________________________________________
>>
>>
As you point out, the certificate was updated just today. (In that 
certificate, I read, "Validity: Not Before Sun, 28 Jun 2026 06:13:51 
GMT".) Tommy's email was sent before that time. Maybe the certificate in 
effect today does not shed light on the problems observed yesterday?

Possibly related: In recent days, I have seen URLs on this list to 
"www.wiki.gnucash", e.g.?On 2026-06-27 18:11, Liz wrote:

> Thanks to all who contributed to the discussion here and privately. I
> have decided on a policy which I have put on the wiki.
>
> https://www.wiki.gnucash.org/wiki/Mailing_Lists#Related_Programs

I got a very stern warning from my browser that there was no valid 
certificate for www.wiki.gnucash.org, and did I really want to visit 
that sketchy URL?

So, a) it would be interesting to find the source of these 
"www.wiki.gnucash" URLs, and b) it would be useful if the certificates 
and web server worked so that visiting a URL of that form did not give a 
scary message.

Best regards,
 ? ? ??Jim DeLaHunt



From jpschewe at mtu.net  Sun Jun 28 18:02:28 2026
From: jpschewe at mtu.net (Jon Schewe)
Date: Sun, 28 Jun 2026 17:02:28 -0500
Subject: wiki.gnucash.org certificate missing
In-Reply-To: <9e53f06d-dc88-4313-a6a9-c0157af48d99@jdlh.com>
References: <CABNyZMzrMxJJS9yJt_zWgKj24ZgC3D03Vm7_8rFaxim6NtBKVA@mail.gmail.com>
 <e0b2539100741aa266f87fd9359fa1cf.squirrel@mail.ihtfp.org>
 <9e53f06d-dc88-4313-a6a9-c0157af48d99@jdlh.com>
Message-ID: <fa830bade9f2bb9348e4a881816749fffc18e816.camel@mtu.net>

On Sun, 2026-06-28 at 14:36 -0700, Jim DeLaHunt wrote:
> I got a very stern warning from my browser that there was no valid 
> certificate for www.wiki.gnucash.org, and did I really want to visit 
> that sketchy URL?
> 
> So, a) it would be interesting to find the source of these 
> "www.wiki.gnucash" URLs, and b) it would be useful if the
> certificates 
> and web server worked so that visiting a URL of that form did not
> give a 
> scary message.

I too just got a scary warning from Firefox going
to?https://www.wiki.gnucash.org/wiki/Mailing_Lists#Related_Programs. I
downloaded the certificate that the browser received and decoded it.
The certificate I downloaded is for code.gnucash.org, both in the CN
and the SAN. It appears that the web server is sending the wrong
certificate.

I see that if I drop the "www" from the URL, it's fine. In the end I
think the problem here is with the link that was posted in the message.
It included the wrong domain name.

From derek at ihtfp.com  Sun Jun 28 18:07:34 2026
From: derek at ihtfp.com (Derek Atkins)
Date: Sun, 28 Jun 2026 18:07:34 -0400
Subject: wiki.gnucash.org certificate missing
In-Reply-To: <fa830bade9f2bb9348e4a881816749fffc18e816.camel@mtu.net>
References: <CABNyZMzrMxJJS9yJt_zWgKj24ZgC3D03Vm7_8rFaxim6NtBKVA@mail.gmail.com>
 <e0b2539100741aa266f87fd9359fa1cf.squirrel@mail.ihtfp.org>
 <9e53f06d-dc88-4313-a6a9-c0157af48d99@jdlh.com>
 <fa830bade9f2bb9348e4a881816749fffc18e816.camel@mtu.net>
Message-ID: <19f10460c70.27f4.ee0929d4f8247208f860e07266211506@ihtfp.com>

There is no host, "www.wiki.gnucash.org".
I have no idea why Liz would post a URL like that.
Indeed, I have no idea how or why that would even work!

But yes, the server is set up as "code" being the default, so if it comes 
in with any other non-configueed Host it will use that cert.  If, however, 
you use a valid Host (e.g. wiki.gnucash.org) it will use the correct 
certificate.

-derek
Sent using my mobile device. Please excuse any typos.
On June 28, 2026 18:02:52 Jon Schewe <jpschewe at mtu.net> wrote:

> On Sun, 2026-06-28 at 14:36 -0700, Jim DeLaHunt wrote:
>> I got a very stern warning from my browser that there was no valid
>> certificate for www.wiki.gnucash.org, and did I really want to visit
>> that sketchy URL?
>>
>> So, a) it would be interesting to find the source of these
>> "www.wiki.gnucash" URLs, and b) it would be useful if the
>> certificates
>> and web server worked so that visiting a URL of that form did not
>> give a
>> scary message.
>
> I too just got a scary warning from Firefox going
> to https://www.wiki.gnucash.org/wiki/Mailing_Lists#Related_Programs. I
> downloaded the certificate that the browser received and decoded it.
> The certificate I downloaded is for code.gnucash.org, both in the CN
> and the SAN. It appears that the web server is sending the wrong
> certificate.
>
> I see that if I drop the "www" from the URL, it's fine. In the end I
> think the problem here is with the link that was posted in the message.
> It included the wrong domain name.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gnucash.org/pipermail/gnucash-devel/attachments/20260628/ab285215/attachment.htm>

From edodd at billiau.net  Mon Jun 29 06:40:40 2026
From: edodd at billiau.net (Liz)
Date: Mon, 29 Jun 2026 20:40:40 +1000
Subject: wiki.gnucash.org certificate missing
In-Reply-To: <19f10460c70.27f4.ee0929d4f8247208f860e07266211506@ihtfp.com>
References: <CABNyZMzrMxJJS9yJt_zWgKj24ZgC3D03Vm7_8rFaxim6NtBKVA@mail.gmail.com>
 <e0b2539100741aa266f87fd9359fa1cf.squirrel@mail.ihtfp.org>
 <9e53f06d-dc88-4313-a6a9-c0157af48d99@jdlh.com>
 <fa830bade9f2bb9348e4a881816749fffc18e816.camel@mtu.net>
 <19f10460c70.27f4.ee0929d4f8247208f860e07266211506@ihtfp.com>
Message-ID: <20260629204040.06e8e6c6@zenbook3.billiau.net>

On Sun, 28 Jun 2026 18:07:34 -0400
Derek Atkins <derek at ihtfp.com> wrote:

> There is no host, "www.wiki.gnucash.org".
> I have no idea why Liz would post a URL like that.
> Indeed, I have no idea how or why that would even work!


copy and paste off the browser while looking at the wiki
that's where the link was made

originally I entered "wiki.gnucash.org" worked on the wiki, then
produced the link to the new paragraph

it may be a hallucination from Firefox

Liz

From tommy.trussell at gmail.com  Mon Jun 29 15:49:54 2026
From: tommy.trussell at gmail.com (Tommy Trussell)
Date: Mon, 29 Jun 2026 14:49:54 -0500
Subject: wiki.gnucash.org certificate missing
In-Reply-To: <e0b2539100741aa266f87fd9359fa1cf.squirrel@mail.ihtfp.org>
References: <CABNyZMzrMxJJS9yJt_zWgKj24ZgC3D03Vm7_8rFaxim6NtBKVA@mail.gmail.com>
 <e0b2539100741aa266f87fd9359fa1cf.squirrel@mail.ihtfp.org>
Message-ID: <CABNyZMxBCNr8EatYmLg+ty9Rf4G-fdrYW8tK4-KZ_04HohvPSA@mail.gmail.com>

It is working today. Apparently the new certificate wasn't working (in
effect? propagated? not sure of terminology) at the moment I looked. Now
that I am back at the laptop I was using when I noticed the problem, I see
that I was using the Vivaldi browser, and its report is looking correct
now. Previously its certificate report was describing code.gnucash.org and
now it matches the URL https://wiki.gnucash.org/

On Sun, Jun 28, 2026 at 8:44?AM Derek Atkins <derek at ihtfp.com> wrote:

> It's working fine for me...  See attached certificate report.
>
> How did you test it?
> Note that you need to use SNI, because it is a multi-homed server.
>
> Note that the certificate just updated today..
>
> -derek
>
> On Sat, June 27, 2026 11:46 pm, Tommy Trussell wrote:
> > I noticed today the certificate for wiki.gnucash.org doesn't validate
> (the
> > certificate is only valid for code.gnucash.org) so my browser marks the
> > wiki's https as unsafe.
> >
> > It used to work as expected, I seem to recall.
> > _______________________________________________
> > gnucash-devel mailing list
> > gnucash-devel at gnucash.org
> > https://lists.gnucash.org/mailman/listinfo/gnucash-devel
> >
>
>
> --
>        Derek Atkins                 617-623-3745
>        derek at ihtfp.com             www.ihtfp.com
>        Computer and Internet Security Consultant
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gnucash.org/pipermail/gnucash-devel/attachments/20260629/b2f963f3/attachment.htm>

From tjteixeira at earthlink.net  Mon Jun 29 20:54:37 2026
From: tjteixeira at earthlink.net (Tom Teixeira)
Date: Mon, 29 Jun 2026 14:54:37 -1000
Subject: Building on Apple Silicon
Message-ID: <3e6d2874-7ef2-4f4b-8f4b-5728402dc829@earthlink.net>

New developer here. I submitted a pull request for a fix to a bug I 
filed having built and tested on an Ubuntu virtual machine because of 
familiarity developing in a Linux environment. But I would like to be 
able to build a version of gnucash with my changes to use on a daily 
basis. I have tried to follow the instructions at 
https://wiki.gnucash.org/wiki/MacOS/Quartz?and got stuck. I've tried the 
procedure at gtk.org "Setting up GTK for Mac OS" 
(https://www.gtk.org/docs/installations/macos) as well. I gather there 
are long standing problems with GTK for ARM affecting this. Is there a 
simple workaround?



From jralls at ceridwen.us  Mon Jun 29 23:21:10 2026
From: jralls at ceridwen.us (John Ralls)
Date: Mon, 29 Jun 2026 20:21:10 -0700
Subject: Building on Apple Silicon
In-Reply-To: <3e6d2874-7ef2-4f4b-8f4b-5728402dc829@earthlink.net>
References: <3e6d2874-7ef2-4f4b-8f4b-5728402dc829@earthlink.net>
Message-ID: <1982C9D5-1B10-40A9-AF1D-D08C48AC8728@ceridwen.us>

Tom,

There shouldn?t be any long-standing problems. There are occasional glitches because of shifting dependencies. That said, getting everything set up correctly can be a bit complicated and very few people besides me use it so it tends to have some rough edges for newcomers.

If you?d rather not mess with it there?s a simpler workaround: I make a dependencies tarball so that CI jobs don?t have to build the universe before building and testing GnuCash. You could use that instead of building everything yourself. The tarball can be downloaded from https://sourceforge.net/projects/gnucash/files/Dependencies/gnucash-5.15-mac-dependencies.tar.xz/download and you can get an idea of how to use it from the CI workflow; https://github.com/Gnucash/gnucash/blob/stable/.github/workflows/mac-tests.yaml. Notice that it doesn?t have ninja or Googletest. You?ve presumably already gotten ninja installed in ~/.new-local/bin by virtue of having run gtk-osx-setup.sh. Googletest lives at https://github.com/google/googletest/. You can clone it or get a release tarball; just put the sources in the same directory that you clone GnuCash to.

If you?d rather get a full gtk-osx environment going then start a discussion at https://github.com/jralls/gtk-osx-build/discussions/.

Regards,
John Ralls


> On Jun 29, 2026, at 17:54, Tom Teixeira <tjteixeira at earthlink.net> wrote:
> 
> New developer here. I submitted a pull request for a fix to a bug I filed having built and tested on an Ubuntu virtual machine because of familiarity developing in a Linux environment. But I would like to be able to build a version of gnucash with my changes to use on a daily basis. I have tried to follow the instructions at https://wiki.gnucash.org/wiki/MacOS/Quartz and got stuck. I've tried the procedure at gtk.org "Setting up GTK for Mac OS" (https://www.gtk.org/docs/installations/macos) as well. I gather there are long standing problems with GTK for ARM affecting this. Is there a simple workaround?
> 
> 
> _______________________________________________
> gnucash-devel mailing list
> gnucash-devel at gnucash.org
> https://lists.gnucash.org/mailman/listinfo/gnucash-devel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gnucash.org/pipermail/gnucash-devel/attachments/20260629/b295b92f/attachment.htm>

