[Bug 1021636] New: firefox-esr 45.6.0 and 45.7.0 fail to show https://www.google.com and other sites
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 Bug ID: 1021636 Summary: firefox-esr 45.6.0 and 45.7.0 fail to show https://www.google.com and other sites Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: x86-64 OS: openSUSE 42.2 Status: NEW Severity: Major Priority: P5 - None Component: 3rd party software Assignee: wolfgang@rosenauer.org Reporter: joerg.steffens@dass-it.de QA Contact: opensuse-communityscreening@forge.provo.novell.com Found By: --- Blocker: --- https://build.opensuse.org/project/show/mozilla After updating to firefox-esr-45.6.0-1.1.x86_64 Tue Jan 24 12:07:24 2017 mozilla-nss-3.28.1-2.1.x86_64 Tue Jan 24 11:32:19 2017 mozilla-nspr-4.13.1-2.1.x86_64 Tue Jan 24 11:32:18 2017 from http://download.opensuse.org/repositories/mozilla/openSUSE_Leap_42.2/x86_64/ (https://build.opensuse.org/project/show/mozilla) some pages fail to load: https://www.google.de https://www.google.com https://www.wikipedia.org Error message: """ Secure Connection Failed An error occurred during a connection to www.google.com. The key does not support the requested operation. Error code: SEC_ERROR_INVALID_KEY The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. ... """ Some other https sites are handled without problems. Tested with openSUSE 13.1 and openSUSE 42.2, fresh (empty) firefox profile. Some problem with firefox-esr 45.7.0 (from https://build.opensuse.org/package/show/home:steffens:lvermgeo:firefox/firef...) An earlier version of firefox-esr 45.6.0 has been known to work. However, this older version has been compiled against: mozilla-nss-3.26.2-1.1.x86_64 mozilla-nspr-4.12-1.1.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c1 Wolfgang Rosenauer <wolfgang@rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #1 from Wolfgang Rosenauer <wolfgang@rosenauer.org> --- Known issue for 45.6 and all other mozilla based applications. Firefox 51 and all newer releases of other apps should fix it. Actually I was quite sure that 45.7 also fixes it but I'll investigate if the required patch is really included. The issue is a really old bug in Firefox and Co which is now triggered for the latest NSS version. It affects primarily HTTP/2 connections. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c2 Wolfgang Rosenauer <wolfgang@rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |joerg.steffens@dass-it.de Flags| |needinfo?(joerg.steffens@da | |ss-it.de) --- Comment #2 from Wolfgang Rosenauer <wolfgang@rosenauer.org> --- I just checked the relevant code in 45.7 and the known issue is indeed fixed already in that release. I'm going to verify a few more things but can you please confirm again that 45.7 is really broken for you? What is the error exactly (screenshot) because INVALID_KEY is not what I would expect. I think it says something like "INADEQUATE SECURITY" for the known issue. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c3 Norman Gorlt <cupra2@gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |cupra2@gmx.de --- Comment #3 from Norman Gorlt <cupra2@gmx.de> --- Created attachment 711467 --> http://bugzilla.opensuse.org/attachment.cgi?id=711467&action=edit screenshot error message -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c4 --- Comment #4 from Norman Gorlt <cupra2@gmx.de> --- I can confirm this bug in Seamonkey too since update to: seamonkey-2.46-5.2 mozilla-nspr-4.13.1-2.1 mozilla-nss-3.28.1-2.1 mozilla-nss-certs-3.28.1-2.1 in openSUSE 13.1 (32bit) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c5 --- Comment #5 from Wolfgang Rosenauer <wolfgang@rosenauer.org> --- SeaMonkey is a different story. This is known to be broken at this moment. I do not believe so for Firefox 45.7 though. I meanwhile tested it myself and this works fine for me. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c6 Ales Seifert <seifert@alesak.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |seifert@alesak.net --- Comment #6 from Ales Seifert <seifert@alesak.net> --- I have same issue after recent update to FF51.0 MozillaFirefox-51.0-4.1.x86_64 Secure Connection Failed An error occurred during a connection to www.google.com. The key does not support the requested operation. Error code: SEC_ERROR_INVALID_KEY The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c7 --- Comment #7 from Ales Seifert <seifert@alesak.net> --- Downloaded FF 51.0 from mozilla with same profile works normally -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c8 --- Comment #8 from Wolfgang Rosenauer <wolfgang@rosenauer.org> --- (In reply to Ales Seifert from comment #7)
Downloaded FF 51.0 from mozilla with same profile works normally
This is expected because they bundle NSS. (In reply to Ales Seifert from comment #6)
I have same issue after recent update to FF51.0
MozillaFirefox-51.0-4.1.x86_64
This is totally unexpected. Please check if you updated all NSS components to 3.28.1: libfreebl3 libsoftokn3 mozilla-nss mozilla-nss-certs -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c9 --- Comment #9 from Ales Seifert <seifert@alesak.net> --- (In reply to Wolfgang Rosenauer from comment #8)
(In reply to Ales Seifert from comment #7)
Downloaded FF 51.0 from mozilla with same profile works normally
This is expected because they bundle NSS.
(In reply to Ales Seifert from comment #6)
I have same issue after recent update to FF51.0
MozillaFirefox-51.0-4.1.x86_64
This is totally unexpected.
Please check if you updated all NSS components to 3.28.1: libfreebl3 libsoftokn3 mozilla-nss mozilla-nss-certs
libfreebl3 and libsoftokn3 was not updated to 3.28 but 3.26.2 after forced update from mozilla repo everything works, tank you for super fast response -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c10 --- Comment #10 from Ales Seifert <seifert@alesak.net> --- (In reply to Wolfgang Rosenauer from comment #8) it looks like mozila-nss package 3.8 should have dependency for higher libfreebl3 right now: libfreebl3 >= 3.21 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c11 Wolfgang Rosenauer <wolfgang@rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #11 from Wolfgang Rosenauer <wolfgang@rosenauer.org> --- Patched Seamonkey is building now in mozilla Firefox 51 and Thunderbird 45.7 are in the repo and work. Firefox ESR 45.7 also available and works NSS dependencies not yet updated in the repo but are improved in the submissions for official updates. Considering this fixed. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c13 --- Comment #13 from Norman Gorlt <cupra2@gmx.de> --- supplementary: update to seamonkey-2.46-7.1 libfreebl13-3.28.1-2.1 libsoftokn3-3.28.1-2.1 solved problem for seamonkey too. Wolfgang you are awesome. Thank you very much. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c19 --- Comment #19 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1021636) was mentioned in https://build.opensuse.org/request/show/904702 15.3 / seamonkey -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c20 --- Comment #20 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1021636) was mentioned in https://build.opensuse.org/request/show/907731 15.3 / seamonkey -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c21 --- Comment #21 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1021636) was mentioned in https://build.opensuse.org/request/show/914429 15.3 / seamonkey -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c22 --- Comment #22 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1021636) was mentioned in https://build.opensuse.org/request/show/922046 15.3 / seamonkey -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 http://bugzilla.opensuse.org/show_bug.cgi?id=1021636#c23 --- Comment #23 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1021636) was mentioned in https://build.opensuse.org/request/show/931737 15.3 / seamonkey -- You are receiving this mail because: You are on the CC list for the bug.
participants (2)
-
bugzilla_noreply＠novell.com -
bugzilla_noreply＠suse.com