latest Firefox fails on https
Joe Marcus Clarke
marcus at marcuscom.com
Sat Dec 29 19:00:35 PST 2007
On Sat, 2007-12-29 at 23:45 +0100, Wilko Bulte wrote:
> Quoting Joe Marcus Clarke, who wrote on Sat, Dec 29, 2007 at 04:03:14PM -0500 ..
> >
> >
> > PGP Key : http://www.marcuscom.com/pgp.asc
> >
> > On Sat, 29 Dec 2007, Wilko Bulte wrote:
> >
> > >Quoting Joe Marcus Clarke, who wrote on Fri, Dec 28, 2007 at 01:51:53PM
> > >-0500 ..
> > >>
> > >>On Fri, 2007-12-28 at 16:43 +0100, Wilko Bulte wrote:
> > >>>Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at 06:19:30PM
> > >>>-0500 ..
> > >>>>
> > >>>>On Thu, 2007-12-27 at 22:13 +0100, Wilko Bulte wrote:
> > >>>>>Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at
> > >>>>>04:03:03PM -0500 ..
> > >>>>>>Wilko Bulte wrote:
> > >>>>>>>Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at
> > >>>>>>>11:42:54AM -0500 ..
> > >>>>>>>>Wilko Bulte wrote:
> > >>>>>>>>>Quoting Joe Marcus Clarke, who wrote on Wed, Dec 26, 2007 at
> > >>>>>>>>>05:36:37PM -0500 ..
> > >>>>>>>>>>On Wed, 2007-12-26 at 22:02 +0100, Wilko Bulte wrote:
> > >>>>>>>>>>>Hi folks,
> > >>>>>>>>>>>
> > >>>>>>>>>>>In the hope I will not make a fool out of myself with this
> > >>>>>>>>>>>question:
> > >>>>>>>>>>>
> > >>>>>>>>>>>I just brought my laptop to the very latest 8-CURRENT. Worked
> > >>>>>>>>>>>without a
> > >>>>>>>>>>>hitch.
> > >>>>>>>>>>>
> > >>>>>>>>>>>As a side project I decided to also bring all ports up to date
> > >>>>>>>>>>>to the
> > >>>>>>>>>>>latest.
> > >>>>>>>>>>>
> > >>>>>>>>>>>One of the ports is Firefox.
> > >>>>>>>>>>>
> > >>>>>>>>>>>Which now gives me the following error message on every https:
> > >>>>>>>>>>>URL that I
> > >>>>>>>>>>>try:
> > >>>>>>>>>>>
> > >>>>>>>>>>> Unexpected response from server
> > >>>>>>>>>>> Firefox doesn't know how to communicate with the server.
> > >>>>>>>>>>>
> > >>>>>>>>>>> * Check to make sure your system has the Personal
> > >>>>>>>>>>> Security Manager
> > >>>>>>>>>>> installed.
> > >>>>>>>>>>> * This might be due to a non-standard configuration on
> > >>>>>>>>>>> the server.
> > >>>>>>>>>>>
> > >>>>>>>>>>>I now have built from ports:
> > >>>>>>>>>>> firefox-2.0.0.11,1 Web browser based on the browser portion
> > >>>>>>>>>>> of Mozilla
> > >>>>>>>>>>> nss-3.11.7 Libraries to support development of
> > >>>>>>>>>>> security-enabled applic
> > >>>>>>>>>>>
> > >>>>>>>>>>>A somewhat earlier Firefox 2.0.0.x (whatever the prebuilt
> > >>>>>>>>>>>packages server
> > >>>>>>>>>>>currently carries) I fetched via pkg_add -r gave me the same
> > >>>>>>>>>>>error message.
> > >>>>>>>>>>>
> > >>>>>>>>>>>Firefox works just fine with normal http servers.
> > >>>>>>>>>>>
> > >>>>>>>>>>>Google gives me lots of "me too" and assorted Linux crud but
> > >>>>>>>>>>>nothing
> > >>>>>>>>>>>relevant to FreeBSD unfortunately.
> > >>>>>>>>>>Rebuild devel/nspr, security/nss, then www/firefox, and you
> > >>>>>>>>>>should be
> > >>>>>>>>>>fine.
> > >>>>>>>>>Took a while (P3 1.2GHz laptop) but it does not work, same problem
> > >>>>>>>>>still.
> > >>>>>>>>That sucks.
> > >>>>>>>
> > >>>>>>>Well.. it just tests my patience :)
> > >>>>>>>
> > >>>>>>>>>What makes me suspicious is that the precompiled 8-current package
> > >>>>>>>>>exhibited
> > >>>>>>>>>the same problem.
> > >>>>>>>>That's not good. SSL is working fine for me, and I see no reason
> > >>>>>>>>why it
> > >>>>>>>>should show as disabled. Please provide the output of make
> > >>>>>>>>configure
> > >>>>>>>>for firefox.
> > >>>>>>>
> > >>>>>>>Do you mean config.log ? I have attached that one, and
> > >>>>>>>mozilla-config.h
> > >>>>>>
> > >>>>>>No, the output of make configure would have been more useful. As
> > >>>>>>would
> > >>>>>>work/mozilla/config/autoconf.mk after running make configure.
> > >>>>>
> > >>>>>Woops. Here is autoconf.mk
> > >>>>
> > >>>>Okay, I'm stumped. The config looks like NSS was properly detected.
> > >>>>Perhaps there is a problem with this particular site. If you can,
> > >>>>please provide the URL you are using to test. There may also be a
> > >>>>configuration problem. Try creating a new, fresh account, and see if
> > >>>>firefox works there.
> > >>>
> > >>>I noticed something potentially interesting when starting firefox from a
> > >>>shell window (normally I start it from a windowmaker menu):
> > >>>
> > >>>wb at chuck ~: firefox
> > >>>Error sanitizing sessions: TypeError:
> > >>>Components.classes['@mozilla.org/security/sdr;1'] has no properties
> > >>>
> > >>>Makes me go hmm?
> > >>
> > >>Yeah, but I just tried on 8-CURRENT, and I still can't reproduce. And
> > >>your autoconf.mk shows that PSM is enabled in the build, so this
> > >>component should have been properly built. I'm curious, if you install
> > >>my Firefox package from my Tinderbox do you have the same problem:
> > >>
> > >>env
> > >>PACKAGESITE=http://www.marcuscom.com/tb/packages/8-CURRENT-FreeBSD/Latest/ pkg_add -f firefox
> > >>
> > >>I just added this package to one of my -CURRENT machines, and your SSL
> > >>sites work for me.
> > >
> > >OK what I did in the meantime:
> > >- I rebuilt world from the very latest CVS. Just To Be Sure basically.
> > >- I removed nss, nspr, firefox.
> > >- I pkg_add -r from your site nss/nspr/firefox
> > >
> > >pkg_add gives me a couple of warnings like so:
> > >
> > >===> Building Chrome's registry...
> > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'png-1.2.23', but
> > >'png-1.2.22' is installed
> > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires
> > >'pkg-config-0.22_1',
> > >but 'pkg-config-0.22' is installed
> > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'cairo-1.4.12', but
> > >'cairo-1.4.10_1' is installed
> > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'glib-2.14.4', but
> > >'glib-2.14.2' is installed
> > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'gtk-2.12.3', but
> > >'gtk-2.12.1_1' is installed
> > >
> > >that is probably due to your build system using a bit newer bits than my
> > >laptop has.
> > >
> > >And voila: It Still Does Not Work (which made me bang my head against a
> > >wall for a bit, but that aside).
> > >
> > >I will fire up a test box and try it there. This stuff really stumps me.
>
> OK.. more data points:
> - testbox went up to 8.0-current from the same CVS repo as chuck, my laptop.
> - I pkg-added xorg from the public servers
> - Then I grabbed nss, nspr, firefox from marcuscom.com
> - Ran firefox, just works with https
>
> Said something nasty. Had a wine. Then:
>
> Removed all packages from chuck, pkg_add -r firefox from marcuscom.com
> as much as possible. Given not all required packages are on marcuscom.com
> grabbed the missing ones from the public servers.
>
> Started firefox. https does not work.
>
> So whatever it is, it is only on the laptop. %-( %-(
Yeah, this was my assumption when you said my MC packages didn't work
the first time. I KNOW those packages are good. In these types of
situations, I usually look at environmental things. What env vars are
shared between your usual chuck account and your test chuck account that
are not found on the working test server? What sysctl, boot.conf,
kernel, or rc.conf settings differ between the two machines? What
libraries differ with regard to checksums from the following list:
/lib/libthr.so.3
/lib/libc.so.7
/usr/lib/libstdc++.so.6
/lib/libz.so.4
/lib/libgcc_s.so.1
/lib/libm.so.5
/usr/lib/librpcsvc.so.4
What about the output of
"ldd /usr/local/lib/firefox/components/libpipnss.so" from both machines?
I figure the answer has to exist in one of those things.
Joe
--
PGP Key : http://www.marcuscom.com/pgp.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.freebsd.org/pipermail/freebsd-gnome/attachments/20071230/8fc646e5/attachment.pgp
More information about the freebsd-gnome
mailing list