latest Firefox fails on https

[Wilko Bulte]

Quoting Joe Marcus Clarke, who wrote on Fri, Dec 28, 2007 at 01:51:53PM -0500 ..
> 
> On Fri, 2007-12-28 at 16:43 +0100, Wilko Bulte wrote:
> > Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at 06:19:30PM -0500 ..
> > > 
> > > On Thu, 2007-12-27 at 22:13 +0100, Wilko Bulte wrote:
> > > > Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at 04:03:03PM -0500 ..
> > > > > Wilko Bulte wrote:
> > > > > > Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at 11:42:54AM -0500 ..
> > > > > >> Wilko Bulte wrote:
> > > > > >>> Quoting Joe Marcus Clarke, who wrote on Wed, Dec 26, 2007 at 05:36:37PM -0500 ..
> > > > > >>>> On Wed, 2007-12-26 at 22:02 +0100, Wilko Bulte wrote:
> > > > > >>>>> Hi folks,
> > > > > >>>>>
> > > > > >>>>> In the hope I will not make a fool out of myself with this question:
> > > > > >>>>>
> > > > > >>>>> I just brought my laptop to the very latest 8-CURRENT.  Worked without a
> > > > > >>>>> hitch.
> > > > > >>>>>
> > > > > >>>>> As a side project I decided to also bring all ports up to date to the
> > > > > >>>>> latest.
> > > > > >>>>>
> > > > > >>>>> One of the ports is Firefox.
> > > > > >>>>>
> > > > > >>>>> Which now gives me the following error message on every https: URL that I
> > > > > >>>>> try:
> > > > > >>>>>
> > > > > >>>>> 	Unexpected response from server
> > > > > >>>>> 	Firefox doesn't know how to communicate with the server.
> > > > > >>>>>
> > > > > >>>>> 	    *   Check to make sure your system has the Personal Security Manager
> > > > > >>>>> 		  installed.
> > > > > >>>>> 	    *   This might be due to a non-standard configuration on the server.
> > > > > >>>>>
> > > > > >>>>> I now have built from ports:
> > > > > >>>>> 	firefox-2.0.0.11,1  Web browser based on the browser portion of Mozilla
> > > > > >>>>> 	nss-3.11.7          Libraries to support development of security-enabled applic
> > > > > >>>>>
> > > > > >>>>> A somewhat earlier Firefox 2.0.0.x (whatever the prebuilt packages server
> > > > > >>>>> currently carries) I fetched via pkg_add -r gave me the same error message.
> > > > > >>>>>
> > > > > >>>>> Firefox works just fine with normal http servers.
> > > > > >>>>>
> > > > > >>>>> Google gives me lots of "me too" and assorted Linux crud but nothing
> > > > > >>>>> relevant to FreeBSD unfortunately.
> > > > > >>>> Rebuild devel/nspr, security/nss, then www/firefox, and you should be
> > > > > >>>> fine.
> > > > > >>> Took a while (P3 1.2GHz laptop) but it does not work, same problem still.
> > > > > >> That sucks.
> > > > > > 
> > > > > > Well.. it just tests my patience :)
> > > > > > 
> > > > > >>> What makes me suspicious is that the precompiled 8-current package exhibited
> > > > > >>> the same problem.
> > > > > >> That's not good.  SSL is working fine for me, and I see no reason why it
> > > > > >> should show as disabled.  Please provide the output of make configure
> > > > > >> for firefox.
> > > > > > 
> > > > > > Do you mean config.log ?  I have attached that one, and mozilla-config.h
> > > > > 
> > > > > No, the output of make configure would have been more useful.  As would
> > > > > work/mozilla/config/autoconf.mk after running make configure.
> > > > 
> > > > Woops.  Here is autoconf.mk 
> > > 
> > > Okay, I'm stumped.  The config looks like NSS was properly detected.
> > > Perhaps there is a problem with this particular site.  If you can,
> > > please provide the URL you are using to test.  There may also be a
> > > configuration problem.  Try creating a new, fresh account, and see if
> > > firefox works there.
> > 
> > I noticed something potentially interesting when starting firefox from a
> > shell window (normally I start it from a windowmaker menu):
> > 
> > wb at chuck ~: firefox
> > Error sanitizing sessions: TypeError:
> > Components.classes['@mozilla.org/security/sdr;1'] has no properties
> > 
> > Makes me go hmm?
> 
> Yeah, but I just tried on 8-CURRENT, and I still can't reproduce.  And
> your autoconf.mk shows that PSM is enabled in the build, so this
> component should have been properly built.  I'm curious, if you install
> my Firefox package from my Tinderbox do you have the same problem:
> 
> env
> PACKAGESITE=http://www.marcuscom.com/tb/packages/8-CURRENT-FreeBSD/Latest/ pkg_add -f firefox
> 
> I just added this package to one of my -CURRENT machines, and your SSL
> sites work for me.

OK what I did in the meantime:
- I rebuilt world from the very latest CVS.  Just To Be Sure basically.
- I removed nss, nspr, firefox.
- I pkg_add -r from your site nss/nspr/firefox

pkg_add gives me a couple of warnings like so:

===> Building Chrome's registry...
pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'png-1.2.23', but
'png-1.2.22' is installed
pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'pkg-config-0.22_1',
but 'pkg-config-0.22' is installed
pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'cairo-1.4.12', but
'cairo-1.4.10_1' is installed
pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'glib-2.14.4', but
'glib-2.14.2' is installed
pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'gtk-2.12.3', but
'gtk-2.12.1_1' is installed

that is probably due to your build system using a bit newer bits than my
laptop has.

And voila: It Still Does Not Work  (which made me bang my head against a
wall for a bit, but that aside).  

I will fire up a test box and try it there.  This stuff really stumps me.

Wilko
-- 
Wilko Bulte				wilko at FreeBSD.org