latest Firefox fails on https
Wilko Bulte
wb at freebie.xs4all.nl
Sun Dec 30 12:54:43 PST 2007
Quoting Joe Marcus Clarke, who wrote on Sat, Dec 29, 2007 at 10:00:28PM -0500 ..
>
> On Sat, 2007-12-29 at 23:45 +0100, Wilko Bulte wrote:
> > Quoting Joe Marcus Clarke, who wrote on Sat, Dec 29, 2007 at 04:03:14PM -0500 ..
> > >
> > >
> > > PGP Key : http://www.marcuscom.com/pgp.asc
> > >
> > > On Sat, 29 Dec 2007, Wilko Bulte wrote:
> > >
> > > >Quoting Joe Marcus Clarke, who wrote on Fri, Dec 28, 2007 at 01:51:53PM
> > > >-0500 ..
> > > >>
> > > >>On Fri, 2007-12-28 at 16:43 +0100, Wilko Bulte wrote:
> > > >>>Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at 06:19:30PM
> > > >>>-0500 ..
> > > >>>>
> > > >>>>On Thu, 2007-12-27 at 22:13 +0100, Wilko Bulte wrote:
> > > >>>>>Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at
> > > >>>>>04:03:03PM -0500 ..
> > > >>>>>>Wilko Bulte wrote:
> > > >>>>>>>Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at
> > > >>>>>>>11:42:54AM -0500 ..
> > > >>>>>>>>Wilko Bulte wrote:
> > > >>>>>>>>>Quoting Joe Marcus Clarke, who wrote on Wed, Dec 26, 2007 at
> > > >>>>>>>>>05:36:37PM -0500 ..
> > > >>>>>>>>>>On Wed, 2007-12-26 at 22:02 +0100, Wilko Bulte wrote:
> > > >>>>>>>>>>>Hi folks,
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>In the hope I will not make a fool out of myself with this
> > > >>>>>>>>>>>question:
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>I just brought my laptop to the very latest 8-CURRENT. Worked
> > > >>>>>>>>>>>without a
> > > >>>>>>>>>>>hitch.
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>As a side project I decided to also bring all ports up to date
> > > >>>>>>>>>>>to the
> > > >>>>>>>>>>>latest.
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>One of the ports is Firefox.
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>Which now gives me the following error message on every https:
> > > >>>>>>>>>>>URL that I
> > > >>>>>>>>>>>try:
> > > >>>>>>>>>>>
> > > >>>>>>>>>>> Unexpected response from server
> > > >>>>>>>>>>> Firefox doesn't know how to communicate with the server.
> > > >>>>>>>>>>>
> > > >>>>>>>>>>> * Check to make sure your system has the Personal
> > > >>>>>>>>>>> Security Manager
> > > >>>>>>>>>>> installed.
> > > >>>>>>>>>>> * This might be due to a non-standard configuration on
> > > >>>>>>>>>>> the server.
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>I now have built from ports:
> > > >>>>>>>>>>> firefox-2.0.0.11,1 Web browser based on the browser portion
> > > >>>>>>>>>>> of Mozilla
> > > >>>>>>>>>>> nss-3.11.7 Libraries to support development of
> > > >>>>>>>>>>> security-enabled applic
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>A somewhat earlier Firefox 2.0.0.x (whatever the prebuilt
> > > >>>>>>>>>>>packages server
> > > >>>>>>>>>>>currently carries) I fetched via pkg_add -r gave me the same
> > > >>>>>>>>>>>error message.
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>Firefox works just fine with normal http servers.
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>Google gives me lots of "me too" and assorted Linux crud but
> > > >>>>>>>>>>>nothing
> > > >>>>>>>>>>>relevant to FreeBSD unfortunately.
> > > >>>>>>>>>>Rebuild devel/nspr, security/nss, then www/firefox, and you
> > > >>>>>>>>>>should be
> > > >>>>>>>>>>fine.
> > > >>>>>>>>>Took a while (P3 1.2GHz laptop) but it does not work, same problem
> > > >>>>>>>>>still.
> > > >>>>>>>>That sucks.
> > > >>>>>>>
> > > >>>>>>>Well.. it just tests my patience :)
> > > >>>>>>>
> > > >>>>>>>>>What makes me suspicious is that the precompiled 8-current package
> > > >>>>>>>>>exhibited
> > > >>>>>>>>>the same problem.
> > > >>>>>>>>That's not good. SSL is working fine for me, and I see no reason
> > > >>>>>>>>why it
> > > >>>>>>>>should show as disabled. Please provide the output of make
> > > >>>>>>>>configure
> > > >>>>>>>>for firefox.
> > > >>>>>>>
> > > >>>>>>>Do you mean config.log ? I have attached that one, and
> > > >>>>>>>mozilla-config.h
> > > >>>>>>
> > > >>>>>>No, the output of make configure would have been more useful. As
> > > >>>>>>would
> > > >>>>>>work/mozilla/config/autoconf.mk after running make configure.
> > > >>>>>
> > > >>>>>Woops. Here is autoconf.mk
> > > >>>>
> > > >>>>Okay, I'm stumped. The config looks like NSS was properly detected.
> > > >>>>Perhaps there is a problem with this particular site. If you can,
> > > >>>>please provide the URL you are using to test. There may also be a
> > > >>>>configuration problem. Try creating a new, fresh account, and see if
> > > >>>>firefox works there.
> > > >>>
> > > >>>I noticed something potentially interesting when starting firefox from a
> > > >>>shell window (normally I start it from a windowmaker menu):
> > > >>>
> > > >>>wb at chuck ~: firefox
> > > >>>Error sanitizing sessions: TypeError:
> > > >>>Components.classes['@mozilla.org/security/sdr;1'] has no properties
> > > >>>
> > > >>>Makes me go hmm?
> > > >>
> > > >>Yeah, but I just tried on 8-CURRENT, and I still can't reproduce. And
> > > >>your autoconf.mk shows that PSM is enabled in the build, so this
> > > >>component should have been properly built. I'm curious, if you install
> > > >>my Firefox package from my Tinderbox do you have the same problem:
> > > >>
> > > >>env
> > > >>PACKAGESITE=http://www.marcuscom.com/tb/packages/8-CURRENT-FreeBSD/Latest/ pkg_add -f firefox
> > > >>
> > > >>I just added this package to one of my -CURRENT machines, and your SSL
> > > >>sites work for me.
> > > >
> > > >OK what I did in the meantime:
> > > >- I rebuilt world from the very latest CVS. Just To Be Sure basically.
> > > >- I removed nss, nspr, firefox.
> > > >- I pkg_add -r from your site nss/nspr/firefox
> > > >
> > > >pkg_add gives me a couple of warnings like so:
> > > >
> > > >===> Building Chrome's registry...
> > > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'png-1.2.23', but
> > > >'png-1.2.22' is installed
> > > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires
> > > >'pkg-config-0.22_1',
> > > >but 'pkg-config-0.22' is installed
> > > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'cairo-1.4.12', but
> > > >'cairo-1.4.10_1' is installed
> > > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'glib-2.14.4', but
> > > >'glib-2.14.2' is installed
> > > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'gtk-2.12.3', but
> > > >'gtk-2.12.1_1' is installed
> > > >
> > > >that is probably due to your build system using a bit newer bits than my
> > > >laptop has.
> > > >
> > > >And voila: It Still Does Not Work (which made me bang my head against a
> > > >wall for a bit, but that aside).
> > > >
> > > >I will fire up a test box and try it there. This stuff really stumps me.
> >
> > OK.. more data points:
> > - testbox went up to 8.0-current from the same CVS repo as chuck, my laptop.
> > - I pkg-added xorg from the public servers
> > - Then I grabbed nss, nspr, firefox from marcuscom.com
> > - Ran firefox, just works with https
> >
> > Said something nasty. Had a wine. Then:
> >
> > Removed all packages from chuck, pkg_add -r firefox from marcuscom.com
> > as much as possible. Given not all required packages are on marcuscom.com
> > grabbed the missing ones from the public servers.
> >
> > Started firefox. https does not work.
> >
> > So whatever it is, it is only on the laptop. %-( %-(
>
> Yeah, this was my assumption when you said my MC packages didn't work
> the first time. I KNOW those packages are good. In these types of
> situations, I usually look at environmental things. What env vars are
> shared between your usual chuck account and your test chuck account that
> are not found on the working test server? What sysctl, boot.conf,
> kernel, or rc.conf settings differ between the two machines? What
> libraries differ with regard to checksums from the following list:
>
> /lib/libthr.so.3
> /lib/libc.so.7
> /usr/lib/libstdc++.so.6
> /lib/libz.so.4
> /lib/libgcc_s.so.1
> /lib/libm.so.5
> /usr/lib/librpcsvc.so.4
>
> What about the output of
> "ldd /usr/local/lib/firefox/components/libpipnss.so" from both machines?
> I figure the answer has to exist in one of those things.
I caved in... I threw the towel... I thought it would be better use of my
time to test 7.0-RC1 on this machine. That works just fine, and firefox
works too.
Thanks for all your patience & assistance! And take care with the
fireworks!
Wilko
--
Wilko Bulte wilko at FreeBSD.org
More information about the freebsd-gnome
mailing list