Bug#837186: Loading certain (SSL?) sites like google.com and facebook.com aborts

2017-02-18 Thread cacatoes
Package: firefox-esr
Version: 45.7.0esr-4
Followup-For: Bug #837186

Experiencing something alike here, I get blank page as soon as I try to visit 
some specific website : https://uzbl.org
No error message, no answer from webserver.
I can get the page well with simple wget or other web browsers.
Wireshark & openssl logs attached as a bonus.

-- Package-specific info:

-- Extensions information
Name: Firefox Hello Beta
Location: ${PROFILE_EXTENSIONS}/l...@mozilla.org.xpi
Status: enabled

Name: Français Language Pack locale
Location: 
/usr/lib/firefox-esr/browser/extensions/langpack...@firefox-esr.mozilla.org.xpi
Package: firefox-esr-l10n-fr
Status: enabled

Name: Thème par défaut theme
Location: 
/usr/lib/firefox-esr/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
Package: firefox-esr
Status: enabled

Name: uBlock Origin
Location: 
/usr/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/ublo...@raymondhill.net
Package: xul-ext-ublock-origin
Status: enabled

-- Plugins information
Name: Shockwave Flash (13.1.2.3)
Location: 
/usr/lib/browser-plugin-freshplayer-pepperflash/libfreshwrapper-flashplayer.so
Package: browser-plugin-freshplayer-pepperflash
Status: enabled


-- Addons package information
ii  browser-plugin 0.3.5-1+b1   i386 PPAPI-host NPAPI-plugin adapter f
ii  firefox-esr45.7.0esr-4  i386 Mozilla Firefox web browser - Ext
ii  firefox-esr-l1 45.7.0esr-4  all  French language package for Firef
ii  xul-ext-ublock 1.10.4+dfsg- all  general-purpose lightweight ads, 

-- System Information:
Debian Release: 9.0
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 4.9.0-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages firefox-esr depends on:
ii  debianutils   4.8.1
ii  fontconfig2.11.0-6.7
ii  libasound21.1.3-4
ii  libatk1.0-0   2.22.0-1
ii  libc6 2.24-9
ii  libcairo2 1.14.8-1
ii  libdbus-1-3   1.10.14-1
ii  libdbus-glib-1-2  0.108-2
ii  libevent-2.0-52.0.21-stable-2.1
ii  libffi6   3.2.1-6
ii  libfontconfig12.11.0-6.7
ii  libfreetype6  2.6.3-3+b1
ii  libgcc1   1:6.3.0-6
ii  libgdk-pixbuf2.0-02.36.4-1
ii  libglib2.0-0  2.50.2-2
ii  libgtk2.0-0   2.24.31-2
ii  libhunspell-1.4-0 1.4.1-2+b1
ii  libnspr4  2:4.12-6
ii  libnss3   2:3.26.2-1
ii  libpango-1.0-01.40.3-3
ii  libsqlite3-0  3.16.2-2
ii  libstartup-notification0  0.12-4
ii  libstdc++66.3.0-6
ii  libvpx4   1.6.1-2
ii  libx11-6  2:1.6.4-3
ii  libxcomposite11:0.4.4-2
ii  libxdamage1   1:1.1.4-2+b1
ii  libxext6  2:1.3.3-1
ii  libxfixes31:5.0.3-1
ii  libxrender1   1:0.9.10-1
ii  libxt61:1.1.5-1
ii  procps2:3.3.12-3
ii  zlib1g1:1.2.8.dfsg-5

Versions of packages firefox-esr recommends:
pn  gstreamer1.0-libav 
pn  gstreamer1.0-plugins-good  

Versions of packages firefox-esr suggests:
pn  fonts-lmodern  
pn  fonts-stix | otf-stix  
pn  libcanberra0   
pn  libgnomeui-0   
ii  libgssapi-krb5-2   1.15-1
pn  mozplugger 

-- no debconf information

CONNECTED(0003)
Server did acknowledge servername extension.
---
Certificate chain
 0 s:/CN=uzbl.org
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-BEGIN CERTIFICATE-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Bug#837186: Loading certain (SSL?) sites like google.com and facebook.com aborts

2016-11-10 Thread Christopher Sasarak
Package: firefox-esr
Version: 45.4.0esr-2
Followup-For: Bug #837186

Dear Maintainer,

This bug also exists for me, sometimes the page will also load but some assets 
like CSS are missing 
so the page looks totally wrong. I'm not sure what this means either, but the 
problem
also exists when I run a copy of Firefox 49 (without EME) that I got from 
Mozilla. 

If I download a page using Curl there's no problem with SSL, nor did I see a 
problem in Midori
when I tried to go to a page which breaks in firefox. 



-- Package-specific info:

-- Extensions information
Name: ADB Helper
Location: ${PROFILE_EXTENSIONS}/adbhel...@mozilla.org
Status: enabled

Name: Default theme
Location: 
/usr/lib/firefox-esr/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
Package: firefox-esr
Status: enabled

Name: Firefox Hello Beta
Location: ${PROFILE_EXTENSIONS}/l...@mozilla.org.xpi
Status: enabled

Name: Greasemonkey
Location: ${PROFILE_EXTENSIONS}/{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
Status: enabled

Name: Html Validator
Location: ${PROFILE_EXTENSIONS}/{3b56bcc7-54e5-44a2-9b44-66c3ef58c13e}
Status: enabled

Name: HTTPS Everywhere
Location: ${PROFILE_EXTENSIONS}/https-everywhere-...@eff.org.xpi
Status: enabled

Name: REST Easy
Location: ${PROFILE_EXTENSIONS}/rest-e...@quickmediasolutions.com.xpi
Status: enabled

Name: Shumway
Location: ${PROFILE_EXTENSIONS}/shum...@research.mozilla.org
Status: app-disabled

Name: Tab Groups
Location: ${PROFILE_EXTENSIONS}/tabgro...@quicksaver.xpi
Status: enabled

Name: uBlock Origin
Location: ${PROFILE_EXTENSIONS}/ublo...@raymondhill.net.xpi
Status: enabled

Name: uMatrix
Location: ${PROFILE_EXTENSIONS}/umat...@raymondhill.net.xpi
Status: enabled

Name: User-Agent Switcher
Location: ${PROFILE_EXTENSIONS}/jid1-kyxeacwua7b...@jetpack.xpi
Status: enabled

Name: Valence
Location: ${PROFILE_EXTENSIONS}/fxdevtools-adapt...@mozilla.org
Status: enabled

Name: VimFx
Location: ${PROFILE_EXTENSIONS}/vi...@akhodakivskiy.github.com.xpi
Status: enabled

Name: XPath Checker
Location: ${PROFILE_EXTENSIONS}/{7eb3f691-25b4-4a85-9038-9e57e2bcd537}.xpi
Status: enabled

-- Plugins information
Name: GNOME Shell Integration
Location: /usr/lib/mozilla/plugins/libgnome-shell-browser-plugin.so
Package: gnome-shell
Status: enabled

Name: IcedTea-Web Plugin (using IcedTea-Web 1.6.2 (1.6.2-3))
Location: /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/IcedTeaPlugin.so
Package: icedtea-8-plugin:amd64
Status: enabled

Name: iTunes Application Detector
Location: /usr/lib/mozilla/plugins/librhythmbox-itms-detection-plugin.so
Package: rhythmbox-plugins
Status: enabled


-- Addons package information
ii  firefox-esr45.4.0esr-2  amd64Mozilla Firefox web browser - Ext
ii  gnome-shell3.22.1-1 amd64graphical shell for the GNOME des
ii  icedtea-8-plug 1.6.2-3  amd64web browser plugin based on OpenJ
ii  rhythmbox-plug 3.4.1-2  amd64plugins for rhythmbox music playe

-- System Information:
Debian Release: stretch/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.7.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages firefox-esr depends on:
ii  debianutils   4.8
ii  fontconfig2.11.0-6.7
ii  libasound21.1.2-1
ii  libatk1.0-0   2.22.0-1
ii  libc6 2.24-5
ii  libcairo2 1.14.6-1+b1
ii  libdbus-1-3   1.10.12-1
ii  libdbus-glib-1-2  0.108-1
ii  libevent-2.0-52.0.21-stable-2+b1
ii  libffi6   3.2.1-6
ii  libfontconfig12.11.0-6.7
ii  libfreetype6  2.6.3-3+b1
ii  libgcc1   1:6.2.0-10
ii  libgdk-pixbuf2.0-02.36.0-1
ii  libglib2.0-0  2.50.1-1
ii  libgtk2.0-0   2.24.31-1
ii  libhunspell-1.4-0 1.4.1-2+b1
ii  libnspr4  2:4.12-2
ii  libnss3   2:3.26.2-1
ii  libpango-1.0-01.40.3-2
ii  libsqlite3-0  3.15.0-1
ii  libstartup-notification0  0.12-4
ii  libstdc++66.2.0-10
ii  libvpx4   1.6.0-2
ii  libx11-6  2:1.6.3-1
ii  libxcomposite11:0.4.4-1
ii  libxdamage1   1:1.1.4-2+b1
ii  libxext6  2:1.3.3-1
ii  libxfixes31:5.0.2-1
ii  libxrender1   1:0.9.9-2
ii  libxt61:1.1.5-1
ii  procps2:3.3.12-2
ii  zlib1g1:1.2.8.dfsg-2+b3

Versions of packages firefox-esr recommends:
ii  gstreamer1.0-libav 1.10.0-1
ii  gstreamer1.0-plugins-good  1.10.0-1

Versions of packages firefox-esr suggests:
pn  fonts-lmodern  
pn  fonts-stix | otf-stix  
ii  libcanberra0   0.30-3
pn  libgnomeui-0   
ii  libgssapi-krb5-2   

Bug#837186: Loading certain (SSL?) sites like google.com and facebook.com aborts

2016-09-09 Thread Joachim Breitner
Package: firefox-esr
Version: 45.3.0esr-2
Severity: important
Control: notfound it 45.3.0esr-1

Hi,

after upgrading from 45.3.0esr-1 to 45.3.0esr-2 (and not any more after
downgrading from 45.3.0esr-2 to 45.3.0esr-1), when I try to navigate to
google.com or facebook.com, after about a second or so, the page loading
aborts. No error message shown -- just as if I pressed the abort button.

No extensions enabled.

Other SSL enabled pages work, so while judging from the changelog,
something TLS relatedis possible, I am not quite sure.

Greetings,
Joachim



-- Package-specific info:

-- Extensions information
Name: Deutsch (DE) Language Pack locale
Location: 
/usr/lib/firefox-esr/browser/extensions/langpack...@firefox-esr.mozilla.org.xpi
Package: firefox-esr-l10n-de
Status: enabled

Name: Firefox Hello Beta
Location: ${PROFILE_EXTENSIONS}/l...@mozilla.org.xpi
Status: enabled

Name: Greasemonkey
Location: ${PROFILE_EXTENSIONS}/{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
Status: user-disabled

Name: Open in Browser
Location: ${PROFILE_EXTENSIONS}/openinbrow...@www.spasche.net.xpi
Status: enabled

Name: Perspectives
Location: 
/usr/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/perspecti...@cmu.edu
Package: xul-ext-perspectives
Status: user-disabled

Name: Standard theme
Location: 
/usr/lib/firefox-esr/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
Package: firefox-esr
Status: enabled

Name: Video DownloadHelper
Location: ${PROFILE_EXTENSIONS}/{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi
Status: user-disabled

Name: Web Developer
Location: 
/usr/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/{c45c406e-ab73-11d8-be73-000a95be3b12}
Package: xul-ext-webdeveloper
Status: user-disabled

Name: Yahoo Mail service
Status: enabled

-- Plugins information
Name: Evince Browser Plugin
Location: /usr/lib/mozilla/plugins/libevbrowserplugin.so
Package: browser-plugin-evince
Status: enabled

Name: GNOME Shell Integration
Location: /usr/lib/mozilla/plugins/libgnome-shell-browser-plugin.so
Package: gnome-shell
Status: enabled

Name: Google Talk Plugin
Location: /opt/google/talkplugin/libnpgoogletalk.so
Package: google-talkplugin
Status: enabled

Name: Google Talk Plugin Video Renderer
Location: /opt/google/talkplugin/libnpo1d.so
Package: google-talkplugin
Status: enabled

Name: IcedTea-Web Plugin (using IcedTea-Web 1.6.2 (1.6.2-3))
Location: /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/IcedTeaPlugin.so
Package: icedtea-8-plugin:amd64
Status: enabled

Name: iTunes Application Detector
Location: /usr/lib/mozilla/plugins/librhythmbox-itms-detection-plugin.so
Package: rhythmbox-plugins
Status: enabled

Name: MozPlugger 1.14.5 handles QuickTime and Windows Media Player Plugin 
(1.14.5)
Location: /usr/lib/mozilla/plugins/mozplugger.so
Package: mozplugger
Status: enabled

Name: Shockwave Flash (11.2.202.632)
Location: /usr/lib/flashplugin-nonfree/libflashplayer.so
Status: enabled


-- Addons package information
ii  browser-plugin 3.21.4-1 amd64plugin for web browsers to displa
ii  firefox-esr45.3.0esr-1  amd64Mozilla Firefox web browser - Ext
ii  firefox-esr-l1 45.3.0esr-1  all  German language package for Firef
ii  gnome-shell3.20.3-1+b1  amd64graphical shell for the GNOME des
ii  google-talkplu 5.41.3.0-1   amd64Google Talk Plugin
ii  icedtea-8-plug 1.6.2-3  amd64web browser plugin based on OpenJ
ii  mozplugger 1.14.5-2 amd64Plugin allowing external viewers 
ii  rhythmbox-plug 3.4-1amd64plugins for rhythmbox music playe
ii  xul-ext-perspe 4.6.4-1  all  verify HTTPS sites through notary
ii  xul-ext-webdev 1.2.5+repack all  web developer extension

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'buildd-unstable'), (500, 
'unstable'), (101, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.7.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages firefox-esr depends on:
ii  debianutils   4.8
ii  fontconfig2.11.0-6.7
ii  libasound21.1.2-1
ii  libatk1.0-0   2.21.90-2
ii  libc6 2.24-2
ii  libcairo2 1.14.6-1+b1
ii  libdbus-1-3   1.10.10-1
ii  libdbus-glib-1-2  0.108-1
ii  libevent-2.0-52.0.21-stable-2+b1
ii  libffi6   3.2.1-4
ii  libfontconfig12.11.0-6.7
ii  libfreetype6  2.6.3-3+b1
ii  libgcc1   1:6.2.0-3
ii  libgdk-pixbuf2.0-02.35.4-4
ii  libglib2.0-0  2.49.6-1
ii  libgtk2.0-0   2.24.30-4
ii  libhunspell-1.4-0 1.4.1-2
ii  libnspr4  2:4.12-2
ii  libnss3   2:3.25-1
ii  libpango-1.0-0