ports/89796: Firefox 1.5 does not recognize common/built-in CAs - libnssckbi.so not found

[Christoph Moench-Tegeder]

>Number:         89796
>Category:       ports
>Synopsis:       Firefox 1.5 does not recognize common/built-in CAs - libnssckbi.so not found
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Dec 01 15:10:02 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Christoph Moench-Tegeder
>Release:        FreeBSD 5.4-RELEASE-p8 i386
>Organization:
>Environment:
System: FreeBSD elch.haidundneu23.net 5.4-RELEASE-p8 FreeBSD 5.4-RELEASE-p8 #7: Tue Oct 11 17:14:59 CEST 2005 cmt at elch.haidundneu23.net:/usr/obj/usr/src/sys/CMT i386

firefox-1.5_2,1
nss-3.10

>Description:
Firefox (as cvsup'ed today) asks me to accept certificates issued by
the "well known"/"built-in" CAs as RSA DS and Verisign when
using SSL.
This seems to be related to the issue described in this thread
http://lists.freebsd.org/pipermail/freebsd-gnome/2005-August/011919.html
(libnssckbi.so is not searched for in /usr/local/lib/ where it resides
but in /usr/local/lib/netscape/ which does not exist).
Indeed ktrace/kdump shows
  25152 firefox-bin CALL  stat(0x8698ac0,0xbfbfa738)
  25152 firefox-bin NAMI  "/usr/X11R6/lib/firefox/libnssckbi.so"
  25152 firefox-bin RET   stat -1 errno 2 No such file or directory
  25152 firefox-bin CALL  stat(0x8698b40,0xbfbfa738)
  25152 firefox-bin NAMI  "/usr/local/lib/netscape/libnssckbi.so"
  25152 firefox-bin RET   stat -1 errno 2 No such file or directory
  25152 firefox-bin CALL  stat(0x8698b80,0xbfbfa738)
  25152 firefox-bin NAMI  "/usr/X11R6/lib/firefox/libnssckbi.so"
  25152 firefox-bin RET   stat -1 errno 2 No such file or directory
  25152 firefox-bin CALL  gettimeofday(0xbfbfa960,0)

>How-To-Repeat:

>Fix:
Should work as described in
http://lists.freebsd.org/pipermail/freebsd-gnome/2005-August/011933.html


>Release-Note:
>Audit-Trail:
>Unformatted: