From owner-freebsd-gecko@freebsd.org Sat Dec 9 09:22:56 2017 Return-Path: Delivered-To: freebsd-gecko@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1DCA7E845FF for ; Sat, 9 Dec 2017 09:22:56 +0000 (UTC) (envelope-from jbeich@freebsd.org) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 0AA017E2F0 for ; Sat, 9 Dec 2017 09:22:56 +0000 (UTC) (envelope-from jbeich@freebsd.org) Received: by mailman.ysv.freebsd.org (Postfix) id 09FE1E845FE; Sat, 9 Dec 2017 09:22:56 +0000 (UTC) Delivered-To: gecko@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 09822E845FD; Sat, 9 Dec 2017 09:22:56 +0000 (UTC) (envelope-from jbeich@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "freefall.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DE40B7E2EF; Sat, 9 Dec 2017 09:22:55 +0000 (UTC) (envelope-from jbeich@freebsd.org) Received: by freefall.freebsd.org (Postfix, from userid 1354) id 21D1B8D8C; Sat, 9 Dec 2017 09:22:55 +0000 (UTC) From: Jan Beich To: Adam Weinberger Cc: Space Cadet , gecko@freebsd.org, freebsd-ports@freebsd.org Subject: Re: new firefox runs fine but won't open most web sites please advise References: <747C7C32-B5E4-4232-8251-D8EA5AE2B563@FreeBSD.org> Date: Sat, 09 Dec 2017 10:22:50 +0100 In-Reply-To: <747C7C32-B5E4-4232-8251-D8EA5AE2B563@FreeBSD.org> (Adam Weinberger's message of "Fri, 8 Dec 2017 19:26:21 -0700") Message-ID: <4lp0-cl1x-wny@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: freebsd-gecko@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Gecko Rendering Engine issues List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Dec 2017 09:22:56 -0000 Adam Weinberger writes: >> On 8 Dec, 2017, at 18:32, Space Cadet wrote: >> >> I just pkg installed the latest firefox for freebsd11 and suddenly all the >> most usefule websites are unavailable: google mail, you tube, schwab to >> name a few. >> >> I live on freebsd and I live on firefox. this version 54 of firefox works >> fine on a different machine. the new one 56.2_11 see below refuses to load >> most websites. here is the message i get when trying to load gmail. i >> think it is identical to all the others. >> >> ***** >> Your connection is not secure >> >> The website tried to negotiate an inadequate level of security. >> >> www.google.com uses security technology that is outdated and vulnerable to >> attack. An attacker could easily reveal information which you thought to be >> safe. The website administrator will need to fix the server first before >> you can visit the site. >> >> Error code: NS_ERROR_NET_INADEQUATE_SECURITY >> ***** >> Other info: >> >> $ uname -a >> FreeBSD fbsd11w701 11.0-RELEASE-p9 FreeBSD 11.0-RELEASE-p9 #0: Tue Apr 11 >> 08:48:40 UTC 2017 >> root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC >> amd64 > > FreeBSD 11.0 has reached EOL. Please update your system to 11.1, as > packages are no longer targeted to work on 11.0. You can find instructions > at https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/updating-upgrading-freebsdupdate.html Correct. I've just confirmed Firefox 56.0.2_11,1 from /quarterly on both 10.3 i386 and 11.1 amd64 works fine. What happened for the reporter is probably security/nss upgrade 3.34 -> 3.34.1 which killed https:// support due to a missing symbol (or something else) missing on 11.0. I wish pkg(8) didn't sabotage a working system but simply refused to upgrade. Unfortunately, pkg(8) doesn't seem to track ABI of minor OS releases.