Re: CA Authorities problem with Firefox and Thunderbird

More strange behavior in Firefox noticed:

about:preferences#privacy "Security Devices" shows none.  It should at 
least show the NSS Internal PKCS11 module, Builtin Root module, and OS 
Client Cert Module.

Many javascript websocket errors occur on startup in addition to the 
errors shown in the forwarded mail.

On 2/6/24 14:26, John Shannon wrote:
> I just install chromium and get a similar error on starting it:
>
>> $ chrome
>> [64147:-1207885824:0206/141530.076312:ERROR:nss_util.cc(239)] Error 
>> initializing NSS with a persistent database 
>> (sql:/home/john/.pki/nssdb): NSS error code: -8023
>> [64147:-1207885824:0206/141530.076365:ERROR:nss_util.cc(124)] Error 
>> initializing NSS without a persistent database: NSS error code: -8023
>> [64147:-1207885824:0206/141530.076370:FATAL:nss_util.cc(126)] 
>> nss_error=-8023, os_error=0
>
> I found that I also get the same error in libreoffice.
>
> All the problem programs depend on nspr and nss.
>
> On 2/6/24 12:58, John Shannon wrote:
>> More was written to standard error:
>>
>>
>>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, 
>>> line 98: TypeError: Services.policies.getActivePolicies().filter is 
>>> not a function
>>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, 
>>> line 98: TypeError: Services.policies.getActivePolicies().filter is 
>>> not a function
>>> JavaScript error: resource://gre/modules/XULStore.sys.mjs, line 60: 
>>> Error: Can't find profile directory.
>>> JavaScript error: resource://gre/modules/XULStore.sys.mjs, line 60: 
>>> Error: Can't find profile directory.
>>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, 
>>> line 98: TypeError: Services.policies.getActivePolicies().filter is 
>>> not a function
>>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, 
>>> line 98: TypeError: Services.policies.getActivePolicies().filter is 
>>> not a function
>>> JavaScript error: resource://gre/modules/crypto-SDR.sys.mjs, line 
>>> 49: NS_ERROR_XPC_GS_RETURNED_FAILURE: ServiceManager::GetService 
>>> returned failure code:
>>> JavaScript error: resource://gre/modules/storage-json.sys.mjs, line 
>>> 107: Error: Initialization failed
>>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, 
>>> line 98: TypeError: Services.policies.getActivePolicies().filter is 
>>> not a function
>>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, 
>>> line 98: TypeError: Services.policies.getActivePolicies().filter is 
>>> not a function
>>> JavaScript error: resource://gre/modules/ServiceRequest.sys.mjs, 
>>> line 98: TypeError: Services.policies.getActivePolicies().filter is 
>>> not a function
>>> JavaScript error: resource://gre/modules/LoginHelper.sys.mjs, line 
>>> 1578: NS_ERROR_XPC_GS_RETURNED_FAILURE: ServiceManager::GetService 
>>> returned failure code:
>>> JavaScript error: chrome://pippki/content/certManager.js, line 297: 
>>> NS_ERROR_XPC_GS_RETURNED_FAILURE: ServiceManager::GetService 
>>> returned failure code:
>>> JavaScript error: chrome://pippki/content/certManager.js, line 744: 
>>> TypeError: certdb is undefined
>>
>>
>> On 2/6/24 12:38, John Shannon wrote:
>>> When starting Firefox from the command line and trying to import a 
>>> certificate I get:
>>>
>>>> JavaScript error: chrome://pippki/content/certManager.js, line 744: 
>>>> TypeError: certdb is undefined
>>>
>>> in the messages to standard out/error. Not sure what to do about that.
>>>
>>> On 2/6/24 04:03, john wrote:
>>>> After my last pkg upgrade Firefox and Thunderbird both show no 
>>>> Authorities under Certificate Manager in settings. Missing are all 
>>>> the certificates listed by certctl along with DoD CAs added through 
>>>> Firefox import and site CA added through Thunderbird import.
>>>>
>>>> Command line use of:
>>>>
>>>> % openssl s_client -connect google.com:443 -CAfile 
>>>> /usr/local/etc/ssl/cert.pem
>>>>
>>>> works as does other software using TLS.
>>>>
>>>> Pkg versions:
>>>>
>>>> firefox-122.0_3,2
>>>> thunderbird-115.7.0_1
>>>> nss-3.97
>>>> sqlite3-3.45.0_1,1
>>>> ca_root_nss-3.93_2
>>>>
>>>> $ freebsd-version
>>>> 14.0-RELEASE-p4
>>>>
>>>>
-- 
John R. Shannon
john@johnrshannon.com