firefox 90.0.2,2 will not load mozilla.com

[Doug Denault]

On Tue, 31 Aug 2021, Pete Wright wrote:

> On 8/31/21 1:26 PM, Doug Denault wrote:
>> I needed thunderbird on my 12.2 system. Installing that with pkg upgraded 
>> firefox.
>> 
>> Most sites get the error:
>> 
>> Your connection is not secure
>> 
>> The website tried to negotiate an inadequate level of security.
>> 
>> www.mozilla.com uses security technology that is outdated and vulnerable to 
>> attack. An attacker could easily reveal information which you thought to be 
>> safe. The website administrator will need to fix the server first before 
>> you can visit the site.
>> 
>> Error code: NS_ERROR_NET_INADEQUATE_SECURITY
>> 
>> Others without security (for me) include american.express, google.com, 
>> amazon.com and youtube.com. freebsd.org works. As far as I can tell this 
>> only affects me.
>> 
>
> couple things worth checking:
> - make sure ca_root_nss is on latest version (I'm on v3.69 and not seeing 
> this issue)
> - make sure your system clock is in sync
>
> for debugging, maybe try accessing a site via curl.  it may report a more 
> helpful error message, or if it works it's possible the issue is isolated to 
> firefox.

Thanks Pete, I did update ca_root [ca_root_nss: 3.58 -> 3.63]. Clocks are 
sync'd using FreeBSD defaults and, curl gave no output. Chrome works. It 
seems clear that the lack of any others there is something firefox does not 
like about my setup.

Doug

_____
Douglas Denault
http://www.safeport.com
doug at safeport.com
Voice: 301-217-9220
   Fax: 301-217-9277