Date: Sun, 30 Dec 2007 21:54:40 +0100 From: Wilko Bulte <wb@freebie.xs4all.nl> To: Joe Marcus Clarke <marcus@marcuscom.com> Cc: gnome@FreeBSD.org Subject: Re: latest Firefox fails on https Message-ID: <20071230205440.GA82326@freebie.xs4all.nl> In-Reply-To: <1198983628.12670.6.camel@shumai.marcuscom.com> References: <20071227192859.GA31327@freebie.xs4all.nl> <47741307.3040907@marcuscom.com> <20071227211305.GA32018@freebie.xs4all.nl> <1198797570.88692.2.camel@shumai.marcuscom.com> <20071228154331.GA38166@freebie.xs4all.nl> <1198867913.46836.19.camel@shumai.marcuscom.com> <20071229135552.GA71743@freebie.xs4all.nl> <20071229160307.Q43903@creme-brulee.marcuscom.com> <20071229224557.GA75221@freebie.xs4all.nl> <1198983628.12670.6.camel@shumai.marcuscom.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Quoting Joe Marcus Clarke, who wrote on Sat, Dec 29, 2007 at 10:00:28PM -0500 .. > > On Sat, 2007-12-29 at 23:45 +0100, Wilko Bulte wrote: > > Quoting Joe Marcus Clarke, who wrote on Sat, Dec 29, 2007 at 04:03:14PM -0500 .. > > > > > > > > > PGP Key : http://www.marcuscom.com/pgp.asc > > > > > > On Sat, 29 Dec 2007, Wilko Bulte wrote: > > > > > > >Quoting Joe Marcus Clarke, who wrote on Fri, Dec 28, 2007 at 01:51:53PM > > > >-0500 .. > > > >> > > > >>On Fri, 2007-12-28 at 16:43 +0100, Wilko Bulte wrote: > > > >>>Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at 06:19:30PM > > > >>>-0500 .. > > > >>>> > > > >>>>On Thu, 2007-12-27 at 22:13 +0100, Wilko Bulte wrote: > > > >>>>>Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at > > > >>>>>04:03:03PM -0500 .. > > > >>>>>>Wilko Bulte wrote: > > > >>>>>>>Quoting Joe Marcus Clarke, who wrote on Thu, Dec 27, 2007 at > > > >>>>>>>11:42:54AM -0500 .. > > > >>>>>>>>Wilko Bulte wrote: > > > >>>>>>>>>Quoting Joe Marcus Clarke, who wrote on Wed, Dec 26, 2007 at > > > >>>>>>>>>05:36:37PM -0500 .. > > > >>>>>>>>>>On Wed, 2007-12-26 at 22:02 +0100, Wilko Bulte wrote: > > > >>>>>>>>>>>Hi folks, > > > >>>>>>>>>>> > > > >>>>>>>>>>>In the hope I will not make a fool out of myself with this > > > >>>>>>>>>>>question: > > > >>>>>>>>>>> > > > >>>>>>>>>>>I just brought my laptop to the very latest 8-CURRENT. Worked > > > >>>>>>>>>>>without a > > > >>>>>>>>>>>hitch. > > > >>>>>>>>>>> > > > >>>>>>>>>>>As a side project I decided to also bring all ports up to date > > > >>>>>>>>>>>to the > > > >>>>>>>>>>>latest. > > > >>>>>>>>>>> > > > >>>>>>>>>>>One of the ports is Firefox. > > > >>>>>>>>>>> > > > >>>>>>>>>>>Which now gives me the following error message on every https: > > > >>>>>>>>>>>URL that I > > > >>>>>>>>>>>try: > > > >>>>>>>>>>> > > > >>>>>>>>>>> Unexpected response from server > > > >>>>>>>>>>> Firefox doesn't know how to communicate with the server. > > > >>>>>>>>>>> > > > >>>>>>>>>>> * Check to make sure your system has the Personal > > > >>>>>>>>>>> Security Manager > > > >>>>>>>>>>> installed. > > > >>>>>>>>>>> * This might be due to a non-standard configuration on > > > >>>>>>>>>>> the server. > > > >>>>>>>>>>> > > > >>>>>>>>>>>I now have built from ports: > > > >>>>>>>>>>> firefox-2.0.0.11,1 Web browser based on the browser portion > > > >>>>>>>>>>> of Mozilla > > > >>>>>>>>>>> nss-3.11.7 Libraries to support development of > > > >>>>>>>>>>> security-enabled applic > > > >>>>>>>>>>> > > > >>>>>>>>>>>A somewhat earlier Firefox 2.0.0.x (whatever the prebuilt > > > >>>>>>>>>>>packages server > > > >>>>>>>>>>>currently carries) I fetched via pkg_add -r gave me the same > > > >>>>>>>>>>>error message. > > > >>>>>>>>>>> > > > >>>>>>>>>>>Firefox works just fine with normal http servers. > > > >>>>>>>>>>> > > > >>>>>>>>>>>Google gives me lots of "me too" and assorted Linux crud but > > > >>>>>>>>>>>nothing > > > >>>>>>>>>>>relevant to FreeBSD unfortunately. > > > >>>>>>>>>>Rebuild devel/nspr, security/nss, then www/firefox, and you > > > >>>>>>>>>>should be > > > >>>>>>>>>>fine. > > > >>>>>>>>>Took a while (P3 1.2GHz laptop) but it does not work, same problem > > > >>>>>>>>>still. > > > >>>>>>>>That sucks. > > > >>>>>>> > > > >>>>>>>Well.. it just tests my patience :) > > > >>>>>>> > > > >>>>>>>>>What makes me suspicious is that the precompiled 8-current package > > > >>>>>>>>>exhibited > > > >>>>>>>>>the same problem. > > > >>>>>>>>That's not good. SSL is working fine for me, and I see no reason > > > >>>>>>>>why it > > > >>>>>>>>should show as disabled. Please provide the output of make > > > >>>>>>>>configure > > > >>>>>>>>for firefox. > > > >>>>>>> > > > >>>>>>>Do you mean config.log ? I have attached that one, and > > > >>>>>>>mozilla-config.h > > > >>>>>> > > > >>>>>>No, the output of make configure would have been more useful. As > > > >>>>>>would > > > >>>>>>work/mozilla/config/autoconf.mk after running make configure. > > > >>>>> > > > >>>>>Woops. Here is autoconf.mk > > > >>>> > > > >>>>Okay, I'm stumped. The config looks like NSS was properly detected. > > > >>>>Perhaps there is a problem with this particular site. If you can, > > > >>>>please provide the URL you are using to test. There may also be a > > > >>>>configuration problem. Try creating a new, fresh account, and see if > > > >>>>firefox works there. > > > >>> > > > >>>I noticed something potentially interesting when starting firefox from a > > > >>>shell window (normally I start it from a windowmaker menu): > > > >>> > > > >>>wb@chuck ~: firefox > > > >>>Error sanitizing sessions: TypeError: > > > >>>Components.classes['@mozilla.org/security/sdr;1'] has no properties > > > >>> > > > >>>Makes me go hmm? > > > >> > > > >>Yeah, but I just tried on 8-CURRENT, and I still can't reproduce. And > > > >>your autoconf.mk shows that PSM is enabled in the build, so this > > > >>component should have been properly built. I'm curious, if you install > > > >>my Firefox package from my Tinderbox do you have the same problem: > > > >> > > > >>env > > > >>PACKAGESITE=http://www.marcuscom.com/tb/packages/8-CURRENT-FreeBSD/Latest/ pkg_add -f firefox > > > >> > > > >>I just added this package to one of my -CURRENT machines, and your SSL > > > >>sites work for me. > > > > > > > >OK what I did in the meantime: > > > >- I rebuilt world from the very latest CVS. Just To Be Sure basically. > > > >- I removed nss, nspr, firefox. > > > >- I pkg_add -r from your site nss/nspr/firefox > > > > > > > >pkg_add gives me a couple of warnings like so: > > > > > > > >===> Building Chrome's registry... > > > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'png-1.2.23', but > > > >'png-1.2.22' is installed > > > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires > > > >'pkg-config-0.22_1', > > > >but 'pkg-config-0.22' is installed > > > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'cairo-1.4.12', but > > > >'cairo-1.4.10_1' is installed > > > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'glib-2.14.4', but > > > >'glib-2.14.2' is installed > > > >pkg_add: warning: package 'firefox-2.0.0.11,1' requires 'gtk-2.12.3', but > > > >'gtk-2.12.1_1' is installed > > > > > > > >that is probably due to your build system using a bit newer bits than my > > > >laptop has. > > > > > > > >And voila: It Still Does Not Work (which made me bang my head against a > > > >wall for a bit, but that aside). > > > > > > > >I will fire up a test box and try it there. This stuff really stumps me. > > > > OK.. more data points: > > - testbox went up to 8.0-current from the same CVS repo as chuck, my laptop. > > - I pkg-added xorg from the public servers > > - Then I grabbed nss, nspr, firefox from marcuscom.com > > - Ran firefox, just works with https > > > > Said something nasty. Had a wine. Then: > > > > Removed all packages from chuck, pkg_add -r firefox from marcuscom.com > > as much as possible. Given not all required packages are on marcuscom.com > > grabbed the missing ones from the public servers. > > > > Started firefox. https does not work. > > > > So whatever it is, it is only on the laptop. %-( %-( > > Yeah, this was my assumption when you said my MC packages didn't work > the first time. I KNOW those packages are good. In these types of > situations, I usually look at environmental things. What env vars are > shared between your usual chuck account and your test chuck account that > are not found on the working test server? What sysctl, boot.conf, > kernel, or rc.conf settings differ between the two machines? What > libraries differ with regard to checksums from the following list: > > /lib/libthr.so.3 > /lib/libc.so.7 > /usr/lib/libstdc++.so.6 > /lib/libz.so.4 > /lib/libgcc_s.so.1 > /lib/libm.so.5 > /usr/lib/librpcsvc.so.4 > > What about the output of > "ldd /usr/local/lib/firefox/components/libpipnss.so" from both machines? > I figure the answer has to exist in one of those things. I caved in... I threw the towel... I thought it would be better use of my time to test 7.0-RC1 on this machine. That works just fine, and firefox works too. Thanks for all your patience & assistance! And take care with the fireworks! Wilko -- Wilko Bulte wilko@FreeBSD.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20071230205440.GA82326>