Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-08-29 Thread Vincent Lefevre
On 2012-05-01 02:59:12 +0200, Vincent Lefevre wrote: The problem seems to be that the new libnss3-1d is confused by intermediate certificates from cert8.db that are in the chain. For instance, if I remove the UTN-USERFirst-Hardware certificate with certutil -D -d

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-05-11 Thread Mike Hommey
severity 670882 important thanks On Mon, Apr 30, 2012 at 11:27:42AM +0200, Mike Hommey wrote: On Mon, Apr 30, 2012 at 10:58:50AM +0200, Vincent Lefevre wrote: On 2012-04-30 07:52:29 +0200, Mike Hommey wrote: Both pages work for me. I've done some tests, and the problem still occurs

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-05-01 Thread Mike Hommey
On Tue, May 01, 2012 at 02:59:12AM +0200, Vincent Lefevre wrote: On 2012-04-30 11:49:11 +0200, Mike Hommey wrote: On Mon, Apr 30, 2012 at 11:38:02AM +0200, Vincent Lefevre wrote: On 2012-04-30 11:27:42 +0200, Mike Hommey wrote: On Mon, Apr 30, 2012 at 10:58:50AM +0200, Vincent Lefevre

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-05-01 Thread Vincent Lefevre
On 2012-05-01 08:15:47 +0200, Mike Hommey wrote: On Tue, May 01, 2012 at 02:59:12AM +0200, Vincent Lefevre wrote: The problem seems to be that the new libnss3-1d is confused by intermediate certificates from cert8.db that are in the chain. For instance, if I remove the

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-04-30 Thread Vincent Lefevre
On 2012-04-30 07:52:29 +0200, Mike Hommey wrote: Both pages work for me. I've done some tests, and the problem still occurs with my usual profile. And it occurs with a new profile if I copy the old cert8.db file. -- Vincent Lefèvre vinc...@vinc17.net - Web: http://www.vinc17.net/ 100%

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-04-30 Thread Mike Hommey
On Mon, Apr 30, 2012 at 10:58:50AM +0200, Vincent Lefevre wrote: On 2012-04-30 07:52:29 +0200, Mike Hommey wrote: Both pages work for me. I've done some tests, and the problem still occurs with my usual profile. And it occurs with a new profile if I copy the old cert8.db file. That would

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-04-30 Thread Vincent Lefevre
On 2012-04-30 11:27:42 +0200, Mike Hommey wrote: On Mon, Apr 30, 2012 at 10:58:50AM +0200, Vincent Lefevre wrote: I've done some tests, and the problem still occurs with my usual profile. And it occurs with a new profile if I copy the old cert8.db file. That would seem to indicate

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-04-30 Thread Mike Hommey
On Mon, Apr 30, 2012 at 11:38:02AM +0200, Vincent Lefevre wrote: On 2012-04-30 11:27:42 +0200, Mike Hommey wrote: On Mon, Apr 30, 2012 at 10:58:50AM +0200, Vincent Lefevre wrote: I've done some tests, and the problem still occurs with my usual profile. And it occurs with a new profile if

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-04-30 Thread Vincent Lefevre
On 2012-04-30 11:49:11 +0200, Mike Hommey wrote: On Mon, Apr 30, 2012 at 11:38:02AM +0200, Vincent Lefevre wrote: On 2012-04-30 11:27:42 +0200, Mike Hommey wrote: On Mon, Apr 30, 2012 at 10:58:50AM +0200, Vincent Lefevre wrote: I've done some tests, and the problem still occurs with my

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-04-29 Thread Vincent Lefevre
Package: libnss3-1d Version: 3.13.4-1 Severity: grave Justification: renders package unusable After the upgrade to the new libnss3-1d version and restarting Iceweasel, Iceweasel now says that various sites use an invalid security certificate. This includes identi.ca and www.zeroforfait.fr. If one

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-04-29 Thread Vincent Lefevre
On 2012-04-30 00:48:30 +0200, Vincent Lefevre wrote: It could be related to bug 659501, but it was fixed (I had no problems with libnss3-1d 3.13.3-1). The problem disappears after reverting to libnss3-1d 3.13.3-1. A difference with bug 659501 is that with libnss3-1d 3.13.4-1, the error seems

Bug#670882: libnss3-1d: Iceweasel says that various sites use an invalid security certificate

2012-04-29 Thread Mike Hommey
tag 670882 unreproducible thanks On Mon, Apr 30, 2012 at 12:48:30AM +0200, Vincent Lefevre wrote: Package: libnss3-1d Version: 3.13.4-1 Severity: grave Justification: renders package unusable After the upgrade to the new libnss3-1d version and restarting Iceweasel, Iceweasel now says that