From owner-freebsd-questions@freebsd.org Wed Sep 1 15:25:35 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E41DD66CD52 for ; Wed, 1 Sep 2021 15:25:35 +0000 (UTC) (envelope-from doug@fledge.watson.org) Received: from cyrus.watson.org (cyrus.watson.org [204.107.128.30]) by mx1.freebsd.org (Postfix) with ESMTP id 4H07DH1gtDz4mG9 for ; Wed, 1 Sep 2021 15:25:35 +0000 (UTC) (envelope-from doug@fledge.watson.org) Received: from fledge.watson.org (fledge.watson.org [198.74.231.63]) by cyrus.watson.org (Postfix) with ESMTPS id 943289C711 for ; Wed, 1 Sep 2021 15:25:34 +0000 (UTC) Received: from fledge.watson.org (doug@localhost [127.0.0.1]) by fledge.watson.org (8.16.1/8.16.1) with ESMTPS id 181FPYGO015101 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for ; Wed, 1 Sep 2021 15:25:34 GMT (envelope-from doug@fledge.watson.org) Received: from localhost (doug@localhost) by fledge.watson.org (8.16.1/8.16.1/Submit) with ESMTP id 181FPYK0015097 for ; Wed, 1 Sep 2021 15:25:34 GMT (envelope-from doug@fledge.watson.org) Date: Wed, 1 Sep 2021 15:25:34 +0000 (UTC) From: doug Reply-To: doug@safeport.com To: freebsd-questions@freebsd.org Subject: Re: firefox 90.0.2,2 will not load mozilla.com In-Reply-To: <8b46adef-694b-a93c-10a1-41a1b1ab12f6@gmail.com> Message-ID: <8d498d22-170-d958-36cd-eeef9e4dcb9@fledge.watson.org> References: <8b46adef-694b-a93c-10a1-41a1b1ab12f6@gmail.com> MIME-Version: 1.0 X-Rspamd-Queue-Id: 4H07DH1gtDz4mG9 X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of doug@fledge.watson.org has no SPF policy when checking 204.107.128.30) smtp.mailfrom=doug@fledge.watson.org X-Spamd-Result: default: False [-0.91 / 15.00]; HAS_REPLYTO(0.00)[doug@safeport.com]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.99)[-0.992]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-0.99)[-0.986]; MIME_GOOD(-0.10)[multipart/mixed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; REPLYTO_DOM_NEQ_FROM_DOM(0.00)[]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[4]; TO_DN_NONE(0.00)[]; NEURAL_HAM_SHORT(-0.93)[-0.929]; CTYPE_MIXED_BOGUS(1.00)[]; DMARC_NA(0.00)[watson.org]; R_SPF_NA(0.00)[no SPF record]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; ASN(0.00)[asn:11288, ipnet:204.107.128.0/24, country:US]; MID_RHS_MATCH_FROM(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8BIT X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Sep 2021 15:25:36 -0000 On Wed, 1 Sep 2021, Graham Perrin wrote: > On 31/08/2021 22:12, Doug Denault wrote: > >>>> ? www.mozilla.com uses security technology that is outdated and >>>> vulnerable to attack. An attacker could easily reveal information >>>> which you thought to be safe. The website administrator will need to >>>> fix the server first before you can visit the site. >>>> >>>> Error code: NS_ERROR_NET_INADEQUATE_SECURITY >>>> >>>> Others without security (for me) include american.express, >>>> google.com, amazon.com and youtube.com. freebsd.org works. As far as >>>> I can tell this only affects me. >>>> >>> >>> couple things worth checking: >>> - make sure ca_root_nss is on latest version (I'm on v3.69 and not >>> seeing this issue) >>> - make sure your system clock is in sync >>> >>> for debugging, maybe try accessing a site via curl.  it may report a >>> more helpful error message, or if it works it's possible the issue is >>> isolated to firefox. >> >> Thanks Pete, I did update ca_root [ca_root_nss: 3.58 -> 3.63]. Clocks >> are sync'd using FreeBSD defaults and, curl gave no output. Chrome >> works. It seems clear that the lack of any others there is something >> firefox does not like about my setup. > > > Do you get the same error for ? > (The site to which redirects, for me in the UK.) No, wow! How did you come up with that?? That works as does onelook.com, safeport.com and all the sites we host and random others. After I posted this I found that libreoffice was also broken by the thunderbird install and upgrades. It was missing 8 dynamic libraries. I added the missing files from another workstation and got libreoffice to start but it only wanted to recover my "lost" files. Removing libreoffice and all its dependencies fixed that issue. I am wondering if my particular combination of packages has another "hidden" dependency. I stored my bookmarks using the facility that allows sync-ing. That does not work. Other than that firefox works perfectly on the sites it will load.