Discussion:
[blfs-support] firefox issues
Bruce Dubbs via blfs-support
2018-09-02 21:10:46 UTC
Permalink
I've build FF 61.0.2 on my new blfs 8.3 system and am running into problems.

First, there seem sto be a problem with the book;s instructions. It has

./mach

as the build procedure, but that fails. Making that './mach build' works.

Second, and more importantly, every site I go to that uses https (cnn,
youtube, mozilla, etc) fails with the message that it does not know the
certificate issuer. I've re-run make-ca but that doesn't help.

Actually, I get the same error message from seamonkey.

I removed ~/.mozilla, but that didn't help.

Any ideas?

-- Bruce
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Un
Ken Moffat via blfs-support
2018-09-02 23:18:25 UTC
Permalink
Post by Bruce Dubbs via blfs-support
I've build FF 61.0.2 on my new blfs 8.3 system and am running into problems.
First, there seem sto be a problem with the book;s instructions. It has
./mach
as the build procedure, but that fails. Making that './mach build' works.
Looks as if I screwed up reinstating the command (I accidentally
deleted it when removing a patch a few months ago, causing the build
to be run as root) ./mach build is correct. Apologies.
Post by Bruce Dubbs via blfs-support
Second, and more importantly, every site I go to that uses https (cnn,
youtube, mozilla, etc) fails with the message that it does not know the
certificate issuer. I've re-run make-ca but that doesn't help.
Actually, I get the same error message from seamonkey.
I removed ~/.mozilla, but that didn't help.
Any ideas?
-- Bruce
I sometimes see that on machines where I have been trying beta
versions of firefox, but they usually sort themselves out on later
retries. I was going to suggest trying a new profile (at the end of
'Configuring firefox'), but if you've blown away ~/.mozilla I guess
you are already using a new profile.

ĸen
--
Also Spuke Zerothruster
(Finnegans Wake)
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the abov
Ken Moffat via blfs-support
2018-09-03 01:09:19 UTC
Permalink
Post by Ken Moffat via blfs-support
Post by Bruce Dubbs via blfs-support
I've build FF 61.0.2 on my new blfs 8.3 system and am running into problems.
First, there seem sto be a problem with the book;s instructions. It has
./mach
as the build procedure, but that fails. Making that './mach build' works.
Looks as if I screwed up reinstating the command (I accidentally
deleted it when removing a patch a few months ago, causing the build
to be run as root) ./mach build is correct. Apologies.
Fixed in svn, added to the Errata for both versions of the book.

ĸen
--
Also Spuke Zerothruster
(Finnegans Wake)
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Uns
DJ Lucas via blfs-support
2018-09-03 05:50:07 UTC
Permalink
Post by Bruce Dubbs via blfs-support
I've build FF 61.0.2 on my new blfs 8.3 system and am running into problems.
First, there seem sto be a problem with the book;s instructions.  It has
./mach
Shoot! I had this in my sandbox and stashed it while I was fiddling with
ITW. I'm sorry.
Post by Bruce Dubbs via blfs-support
as the build procedure, but that fails.  Making that './mach build' works.
Second, and more importantly, every site I go to that uses https (cnn,
youtube, mozilla, etc) fails with the message that it does not know the
certificate issuer.  I've re-run make-ca but that doesn't help.
Actually, I get the same error message from seamonkey.
I removed ~/.mozilla, but that didn't help.
Any ideas?
Do you have the libnssckbi symlink or no? It should be:
/usr/lib/libnssckbi.so -> pkcs11/p11-kit-trust.so

--DJ
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/
DJ Lucas via blfs-support
2018-09-03 05:54:13 UTC
Permalink
Post by Bruce Dubbs via blfs-support
Second, and more importantly, every site I go to that uses https (cnn,
youtube, mozilla, etc) fails with the message that it does not know the
certificate issuer.  I've re-run make-ca but that doesn't help.
Actually, I get the same error message from seamonkey.
I removed ~/.mozilla, but that didn't help.
Any ideas?
Whoops, sent too early. I actually thought I was seeing the same issue
as you, but this was due to a silly bug in make-ca-0.9. All of the files
in /etc/pki/anchors/*.pem had only the header, but no certificate data
because I accidentally removed the lines that extract the x509 data when
cleaning up to use trust instead of manual processing for each
certificate type. That'll be fixed in github in just a sec.

--DJ
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above
Loading...