Your message dated Mon, 23 Nov 2020 20:19:56 +0800
with message-id <[email protected]>
and subject line Re: libnss3: Handshake failed (-12251) with Pidgin since
2:3.58-1
has caused the Debian Bug report #972713,
regarding libnss3: Handshake failed (-12251) with Pidgin since 2:3.58-1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
972713: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972713
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libnss3
Version: 2:3.58-1
Severity: important
Tags: upstream
Forwarded: https://bugzilla.mozilla.org/1672855
X-Debbugs-Cc: [email protected]
Dear Maintainer,
After installing libnss3 2:3.58-1, pidgin is unable to connect to (any?)
services using TLS. The issue occurs on all services I tested,
including: IRC (chat.freenode.net), XMPP (talk.google.com), Discord
(gateway.discord), and AIM (slogin.oscar.aol.com). Relevant output from
pidgin --debug:
nss: Handshake failed (-12251)
connection: Connection error on 0x55f37b4e6880 (reason: 5 description: SSL
Handshake Failed)
account: Disconnecting account [email protected] (0x55f37a78c4b0)
connection: Disconnecting connection 0x55f37b4e6880
connection: Destroying connection 0x55f37b4e6880
Downgrading to 2:3.56-1 resolves the issue. I have opened
https://bugzilla.mozilla.org/1672855 to investigate the issue with NSS
upstream.
Cheers,
Kevin
Note: Although the "Handshake failed" is similar to
https://bugs.debian.org/790610, I think this is a different issue caused
by a specific commit rather than the weak FFDHE group causing the issue
in that bug.
-- System Information:
Debian Release: bullseye/sid
APT prefers testing-debug
APT policy: (990, 'testing-debug'), (990, 'testing'), (500,
'unstable-debug'), (500, 'unstable'), (101, 'experimental'), (1,
'experimental-debug')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.9.0 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages libnss3 depends on:
ii libc6 2.31-4
ii libnspr4 2:4.28-1
ii libsqlite3-0 3.33.0-1
libnss3 recommends no packages.
libnss3 suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 2:3.59-1
On Thu, 22 Oct 2020 16:41:54 -0600 Kevin Locke wrote:
> After installing libnss3 2:3.58-1, pidgin is unable to connect to (any?)
> services using TLS.
This is now fixed in unstable and testing:
nss (2:3.59-1) unstable; urgency=medium
* New upstream release. Fixes: #972713.
* debian/libnss3.symbols: Add NSS_3.59/NSSUTIL_3.59 symbol version.
-- Mike Hommey <[email protected]> Wed, 18 Nov 2020 07:26:57 +0900
--
bye,
pabs
https://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part
--- End Message ---
