[opensuse] Firefox from mozilla obs: Secure Connection Failed (sec_error_no_token)
![](https://seccdn.libravatar.org/avatar/b522fc9af12fe5670d5273601d29477a.jpg?s=120&d=mm&r=g)
It happened on both OS 13.1 and Leap. Firefox installed from obs (v43.0.4) can't connect to most secured sites. After downgrading to v43.0.3 from main repository the problem disappeared (did it on 13.1 only). Search shows that it happened before for older versions of FF. Anyone sees the same problem? Regards, -- Mark Goldstein -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/d7a1abb38a8ed313081bb8f250b16199.jpg?s=120&d=mm&r=g)
Am 22.01.2016 um 07:45 schrieb Mark Goldstein:
It happened on both OS 13.1 and Leap. Firefox installed from obs (v43.0.4) can't connect to most secured sites. After downgrading to v43.0.3 from main repository the problem disappeared (did it on 13.1 only). Search shows that it happened before for older versions of FF. Anyone sees the same problem?
Just recently someone else reported a similar thing. You most likely also got an NSS update. Please check that those components are all on latest level: mozilla-nss-3.21 mozilla-nss-certs-3.21 libsoftokn3-3.21 libfreebl3-3.21 Wolfgang -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/b522fc9af12fe5670d5273601d29477a.jpg?s=120&d=mm&r=g)
On Fri, Jan 22, 2016 at 9:17 AM, Wolfgang Rosenauer
Am 22.01.2016 um 07:45 schrieb Mark Goldstein:
It happened on both OS 13.1 and Leap. Firefox installed from obs (v43.0.4) can't connect to most secured sites. After downgrading to v43.0.3 from main repository the problem disappeared (did it on 13.1 only). Search shows that it happened before for older versions of FF. Anyone sees the same problem?
Just recently someone else reported a similar thing. You most likely also got an NSS update. Please check that those components are all on latest level:
mozilla-nss-3.21 mozilla-nss-certs-3.21 libsoftokn3-3.21 libfreebl3-3.21
Thanks Wolfgang, You are right. The last 3 packages were from main repository, v3.20. After upgrading them to version 3.21 from obs the problem has gone. I'd expect this should be reflected in mozilla-nss dependencies, should it not? Regards, -- Mark Goldstein -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/d7a1abb38a8ed313081bb8f250b16199.jpg?s=120&d=mm&r=g)
Am 22.01.2016 um 10:13 schrieb Mark Goldstein:
On Fri, Jan 22, 2016 at 9:17 AM, Wolfgang Rosenauer
wrote: Just recently someone else reported a similar thing. You most likely also got an NSS update. Please check that those components are all on latest level:
mozilla-nss-3.21 mozilla-nss-certs-3.21 libsoftokn3-3.21 libfreebl3-3.21
Thanks Wolfgang, You are right. The last 3 packages were from main repository, v3.20. After upgrading them to version 3.21 from obs the problem has gone. I'd expect this should be reflected in mozilla-nss dependencies, should it not?
Probably yes. There is not always a requirement to have exactly the same versions and that is why it's not there in the first place. This is related to FIPS and is also why these libraries are split to begin with. In reality this turned out not to be really relevant most of the time. So I'll reconsider having a strict version dependency between those. Wolfgang -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/b522fc9af12fe5670d5273601d29477a.jpg?s=120&d=mm&r=g)
On Fri, Jan 22, 2016 at 11:28 AM, Wolfgang Rosenauer
Probably yes. There is not always a requirement to have exactly the same versions and that is why it's not there in the first place. This is related to FIPS and is also why these libraries are split to begin with. In reality this turned out not to be really relevant most of the time. So I'll reconsider having a strict version dependency between those.
Understood. Thanks again, Wolfgang -- Mark Goldstein -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (2)
-
Mark Goldstein
-
Wolfgang Rosenauer