Re: CA Authorities problem with Firefox and Thunderbird

I just install chromium and get a similar error on starting it:

> $ chrome
> [64147:-1207885824:0206/141530.076312:ERROR:nss_util.cc(239)] Error 
> initializing NSS with a persistent database 
> (sql:/home/john/.pki/nssdb): NSS error code: -8023
> [64147:-1207885824:0206/141530.076365:ERROR:nss_util.cc(124)] Error 
> initializing NSS without a persistent database: NSS error code: -8023
> [64147:-1207885824:0206/141530.076370:FATAL:nss_util.cc(126)] 
> nss_error=-8023, os_error=0

I found that I also get the same error in libreoffice.

All the problem programs depend on nspr and nss.

On 2/6/24 12:58, John Shannon wrote:
> More was written to standard error:
>
>
>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, line 
>> 98: TypeError: Services.policies.getActivePolicies().filter is not a 
>> function
>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, line 
>> 98: TypeError: Services.policies.getActivePolicies().filter is not a 
>> function
>> JavaScript error: resource://gre/modules/XULStore.sys.mjs, line 60: 
>> Error: Can't find profile directory.
>> JavaScript error: resource://gre/modules/XULStore.sys.mjs, line 60: 
>> Error: Can't find profile directory.
>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, line 
>> 98: TypeError: Services.policies.getActivePolicies().filter is not a 
>> function
>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, line 
>> 98: TypeError: Services.policies.getActivePolicies().filter is not a 
>> function
>> JavaScript error: resource://gre/modules/crypto-SDR.sys.mjs, line 49: 
>> NS_ERROR_XPC_GS_RETURNED_FAILURE: ServiceManager::GetService returned 
>> failure code:
>> JavaScript error: resource://gre/modules/storage-json.sys.mjs, line 
>> 107: Error: Initialization failed
>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, line 
>> 98: TypeError: Services.policies.getActivePolicies().filter is not a 
>> function
>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, line 
>> 98: TypeError: Services.policies.getActivePolicies().filter is not a 
>> function
>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, line 
>> 98: TypeError: Services.policies.getActivePolicies().filter is not a 
>> function
>> JavaScript error: resource://gre/modules/LoginHelper.sys.mjs, line 
>> 1578: NS_ERROR_XPC_GS_RETURNED_FAILURE: ServiceManager::GetService 
>> returned failure code:
>> JavaScript error: chrome://pippki/content/certManager.js, line 297: 
>> NS_ERROR_XPC_GS_RETURNED_FAILURE: ServiceManager::GetService returned 
>> failure code:
>> JavaScript error: chrome://pippki/content/certManager.js, line 744: 
>> TypeError: certdb is undefined
>
>
> On 2/6/24 12:38, John Shannon wrote:
>> When starting Firefox from the command line and trying to import a 
>> certificate I get:
>>
>>> JavaScript error: chrome://pippki/content/certManager.js, line 744: 
>>> TypeError: certdb is undefined
>>
>> in the messages to standard out/error. Not sure what to do about that.
>>
>> On 2/6/24 04:03, john wrote:
>>> After my last pkg upgrade Firefox and Thunderbird both show no 
>>> Authorities under Certificate Manager in settings. Missing are all 
>>> the certificates listed by certctl along with DoD CAs added through 
>>> Firefox import and site CA added through Thunderbird import.
>>>
>>> Command line use of:
>>>
>>> % openssl s_client -connect google.com:443 -CAfile 
>>> /usr/local/etc/ssl/cert.pem
>>>
>>> works as does other software using TLS.
>>>
>>> Pkg versions:
>>>
>>> firefox-122.0_3,2
>>> thunderbird-115.7.0_1
>>> nss-3.97
>>> sqlite3-3.45.0_1,1
>>> ca_root_nss-3.93_2
>>>
>>> $ freebsd-version
>>> 14.0-RELEASE-p4
>>>
>>>
-- 
John R. Shannon
john@johnrshannon.com