Bug 1902462 - p11-kit-proxy is persistent
Summary: p11-kit-proxy is persistent
Keywords:
Status: CLOSED EOL
Alias: None
Product: Fedora
Classification: Fedora
Component: firefox
Version: 34
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Gecko Maintainer
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-11-29 11:10 UTC by Stas Sergeev
Modified: 2022-06-07 21:49 UTC (History)
13 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2022-06-07 21:49:06 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Stas Sergeev 2020-11-29 11:10:18 UTC
Description of problem:
p11-kit-proxy is a PITA: it makes firefox to crash
or work very slowly. Unfortunately, an attempt to
unload it, most often also leads to a crash. And when
you finally manage to unload it, you will find that
firefox does not "remember" that, and will load it
again on next start.

Version-Release number of selected component (if applicable):
firefox-83.0-3.fc34.x86_64

How reproducible:
easily

Steps to Reproduce:
1. Go to security device setting of firefox and unload p11-kit-proxy
2. Hope it doesn't crash
3. Restart firefox
4. Go to security device setting of firefox

Actual results:
p11-kit-proxy is there again

Expected results:
No p11-kit-proxy, the removal should be permanent

Additional info:
I can't even remove it on an fs level!
I removed /usr/lib64/p11-kit-proxy.so (which was just a symlink),
and yet firefox somehow keeps loading it!
Please, save me from this disasterous p11-kit-proxy. :)

Comment 1 Martin Stransky 2020-11-29 13:13:43 UTC
Daiki, any idea here? 
Thanks.

Comment 2 Stas Sergeev 2020-11-29 13:40:12 UTC
> Daiki, any idea here?

Martin, the problem with p11kit itself
was already reported to other upstream
bugzillas (and partially addressed).

The bug I want to report here, is only
that the removal of p11kit in firefox UI
is not remembered.
I believe this is a fedora-specific bug,
not an upstream one, because upstream
firefox AFAIK does not load p11-kit-proxy
at all by default.

Comment 3 Daiki Ueno 2020-11-30 06:34:48 UTC
If you want to remove p11-kit-proxy from the default installation, you can always do:
- remove /etc/crypto-policies/local.d/nss-p11-kit.config
- run update-crypto-policies

Comment 4 Stas Sergeev 2020-11-30 09:37:35 UTC
This helps a lot, thank you!
Great relief actually, was not able
to properly use firefox for almost a
year.

Would you also consider to make the
removal in UI remembered? Otherwise
I am afraid not many users will be
able to get rid of it.

Comment 5 Ben Cotton 2021-02-09 15:28:59 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 34 development cycle.
Changing version to 34.

Comment 6 Alexander Mikhalitsyn 2022-04-13 19:44:54 UTC
An issue still persists on Fedora 35.

Comment 7 Ben Cotton 2022-05-12 15:24:21 UTC
This message is a reminder that Fedora Linux 34 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 34 on 2022-06-07.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '34'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version' 
to a later Fedora Linux version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora Linux 34 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora Linux, you are encouraged to change the 'version' to a later version
prior to this bug being closed.

Comment 8 Ben Cotton 2022-06-07 21:49:06 UTC
Fedora Linux 34 entered end-of-life (EOL) status on 2022-06-07.

Fedora Linux 34 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.