Bug 504106 - firefox in RHEL 5.3 has SSL issues with remedy.
Summary: firefox in RHEL 5.3 has SSL issues with remedy.
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: xulrunner
Version: 5.3
Hardware: All
OS: Linux
high
high
Target Milestone: rc
: ---
Assignee: Martin Stransky
QA Contact: desktop-bugs@redhat.com
URL:
Whiteboard:
Depends On:
Blocks: 499522
TreeView+ depends on / blocked
 
Reported: 2009-06-04 09:12 UTC by Huzaifa S. Sidhpurwala
Modified: 2018-10-20 03:54 UTC (History)
11 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-11-03 10:48:19 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
backtrace from firefox hang (5.61 KB, text/plain)
2009-06-04 10:33 UTC, Huzaifa S. Sidhpurwala
no flags Details
new bt with xulrunner-debuginfo (6.84 KB, text/plain)
2009-06-04 11:23 UTC, Huzaifa S. Sidhpurwala
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Mozilla Foundation 412833 0 None None None 2018-12-17 16:31:30 UTC
Mozilla Foundation 500424 0 None None None 2018-12-17 16:31:30 UTC

Comment 2 Martin Stransky 2009-06-04 10:17:23 UTC
Thanks for the bug report.  We have reviewed the information you have provided
above, and there is some additional information we require that will be helpful
in our diagnosis of this issue.

First of all, could we get output of the command

 rpm -qa *xulrun* *firefox* *mozilla* *flash* *plugin*

Please also install firefox-debuginfo (debuginfo-install is from
yum-utils package).

 debuginfo-install firefox

Then run firefox with a parameter -g. That will start firefox running inside of
gdb debugger. Then use command run and do whatever you did to make firefox
crash. When it happens, you should go back to the gdb and run

 (gdb) thread apply all backtrace

This produces usually many screens of the text. Copy all of them into a text
editor and attach the file to the bug as an uncompressed attachment.

We will review this issue again once you've had a chance to attach this
information.

Thanks in advance.

Comment 4 Huzaifa S. Sidhpurwala 2009-06-04 10:33:50 UTC
Created attachment 346512 [details]
backtrace from firefox hang

Comment 5 Martin Stransky 2009-06-04 10:50:21 UTC
Please install xulrunner-debuginfo package and attach the backtrace again. We're missing those symbols there.

Comment 6 Huzaifa S. Sidhpurwala 2009-06-04 11:23:54 UTC
Created attachment 346517 [details]
new bt with xulrunner-debuginfo

Comment 7 Martin Stransky 2009-06-04 11:28:34 UTC
Hm, I don't see anything wrong here. Can you please try to install other debuginfo packages and attach some new bactrace? I mean nspr-debuginfo, nss-debuginfo.

Comment 39 Bob Relyea 2009-06-25 16:09:14 UTC
Just to be clear...

old FF and NSS works (the version that doesn't know anything about Camillia). This means remedy does not need Camilla.

new FF and NSS work with Camilla turned on. Question: do we know if remedy is selecting the Camilla cipher suite?

If we turn Camilla off (either in softoken or the prefs) remedy stops working.

I think an ssltap output for the successful case (Camilla on) would be useful for upstream.

bob

Comment 40 Kai Engert (:kaie) (inactive account) 2009-06-25 17:01:34 UTC
(In reply to comment #39)
> Just to be clear...
> 
> old FF and NSS works (the version that doesn't know anything about Camillia).

I haven't tried an old NSS, prior to NSS 3.12. But given that we see some good connections, when operating slowly, we can conclude that Camellia is not needed.


> This means remedy does not need Camilla.

right


> new FF and NSS work with Camilla turned on. Question: do we know if remedy is
> selecting the Camilla cipher suite?

Not selecting Camellia, handshake log says
            cipher_suite = (0x0039) TLS/DHE-RSA/AES256-CBC/SHA
(even with Camellia enabled)


> If we turn Camilla off (either in softoken or the prefs) remedy stops working.

correct


> I think an ssltap output for the successful case (Camilla on) would be useful
> for upstream.

I have already filed an upstream bug and attached logfiles.
  https://bugzilla.mozilla.org/show_bug.cgi?id=500424

Comment 41 Bob Relyea 2009-06-25 17:21:16 UTC
> Not selecting Camellia, handshake log says
>             cipher_suite = (0x0039) TLS/DHE-RSA/AES256-CBC/SHA
> (even with Camellia enabled)

Hmm... we could try turning off the DHE ciphers? DHE is not really commonly used (thought the fact you are failing on reloads may indicate a problem with restarts...)


> I have already filed an upstream bug and attached logfiles.
>  https://bugzilla.mozilla.org/show_bug.cgi?id=500424  

thanks!

bob

Comment 51 RHEL Program Management 2009-10-05 21:17:21 UTC
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux maintenance release.  Product Management has requested
further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed
products.  This request is not yet committed for inclusion in an Update
release.

Comment 56 Jan Horak 2009-11-03 10:48:19 UTC
Already landed in last xulrunner 1.9.0.15 package.


Note You need to log in before you can comment on or make changes to this bug.