latest Firefox fails on https

[Joe Marcus Clarke]

On Fri, 2007-12-28 at 16:43 +0100, Wilko Bulte wrote:
> Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at 06:19:30PM -0500 ..
> > 
> > On Thu, 2007-12-27 at 22:13 +0100, Wilko Bulte wrote:
> > > Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at 04:03:03PM -0500 ..
> > > > Wilko Bulte wrote:
> > > > > Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at 11:42:54AM -0500 ..
> > > > >> Wilko Bulte wrote:
> > > > >>> Quoting Joe Marcus Clarke, who wrote on Wed, Dec 26, 2007 at 05:36:37PM -0500 ..
> > > > >>>> On Wed, 2007-12-26 at 22:02 +0100, Wilko Bulte wrote:
> > > > >>>>> Hi folks,
> > > > >>>>>
> > > > >>>>> In the hope I will not make a fool out of myself with this question:
> > > > >>>>>
> > > > >>>>> I just brought my laptop to the very latest 8-CURRENT.  Worked without a
> > > > >>>>> hitch.
> > > > >>>>>
> > > > >>>>> As a side project I decided to also bring all ports up to date to the
> > > > >>>>> latest.
> > > > >>>>>
> > > > >>>>> One of the ports is Firefox.
> > > > >>>>>
> > > > >>>>> Which now gives me the following error message on every https: URL that I
> > > > >>>>> try:
> > > > >>>>>
> > > > >>>>> 	Unexpected response from server
> > > > >>>>> 	Firefox doesn't know how to communicate with the server.
> > > > >>>>>
> > > > >>>>> 	    *   Check to make sure your system has the Personal Security Manager
> > > > >>>>> 		  installed.
> > > > >>>>> 	    *   This might be due to a non-standard configuration on the server.
> > > > >>>>>
> > > > >>>>> I now have built from ports:
> > > > >>>>> 	firefox-2.0.0.11,1  Web browser based on the browser portion of Mozilla
> > > > >>>>> 	nss-3.11.7          Libraries to support development of security-enabled applic
> > > > >>>>>
> > > > >>>>> A somewhat earlier Firefox 2.0.0.x (whatever the prebuilt packages server
> > > > >>>>> currently carries) I fetched via pkg_add -r gave me the same error message.
> > > > >>>>>
> > > > >>>>> Firefox works just fine with normal http servers.
> > > > >>>>>
> > > > >>>>> Google gives me lots of "me too" and assorted Linux crud but nothing
> > > > >>>>> relevant to FreeBSD unfortunately.
> > > > >>>> Rebuild devel/nspr, security/nss, then www/firefox, and you should be
> > > > >>>> fine.
> > > > >>> Took a while (P3 1.2GHz laptop) but it does not work, same problem still.
> > > > >> That sucks.
> > > > > 
> > > > > Well.. it just tests my patience :)
> > > > > 
> > > > >>> What makes me suspicious is that the precompiled 8-current package exhibited
> > > > >>> the same problem.
> > > > >> That's not good.  SSL is working fine for me, and I see no reason why it
> > > > >> should show as disabled.  Please provide the output of make configure
> > > > >> for firefox.
> > > > > 
> > > > > Do you mean config.log ?  I have attached that one, and mozilla-config.h
> > > > 
> > > > No, the output of make configure would have been more useful.  As would
> > > > work/mozilla/config/autoconf.mk after running make configure.
> > > 
> > > Woops.  Here is autoconf.mk 
> > 
> > Okay, I'm stumped.  The config looks like NSS was properly detected.
> > Perhaps there is a problem with this particular site.  If you can,
> > please provide the URL you are using to test.  There may also be a
> > configuration problem.  Try creating a new, fresh account, and see if
> > firefox works there.
> 
> I noticed something potentially interesting when starting firefox from a
> shell window (normally I start it from a windowmaker menu):
> 
> wb at chuck ~: firefox
> Error sanitizing sessions: TypeError:
> Components.classes['@mozilla.org/security/sdr;1'] has no properties
> 
> Makes me go hmm?

Yeah, but I just tried on 8-CURRENT, and I still can't reproduce.  And
your autoconf.mk shows that PSM is enabled in the build, so this
component should have been properly built.  I'm curious, if you install
my Firefox package from my Tinderbox do you have the same problem:

env
PACKAGESITE=http://www.marcuscom.com/tb/packages/8-CURRENT-FreeBSD/Latest/ pkg_add -f firefox

I just added this package to one of my -CURRENT machines, and your SSL
sites work for me.

Joe

-- 
PGP Key : http://www.marcuscom.com/pgp.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.freebsd.org/pipermail/freebsd-gnome/attachments/20071228/8651161c/attachment.pgp