From cmt@haidundneu23.net  Thu Dec  1 15:08:16 2005
Return-Path: <cmt@haidundneu23.net>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 03AC416A41F
	for <FreeBSD-gnats-submit@freebsd.org>; Thu,  1 Dec 2005 15:08:16 +0000 (GMT)
	(envelope-from cmt@haidundneu23.net)
Received: from smtp.burggraben.net (smtp.burggraben.net [217.160.216.62])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 87CB043DF4
	for <FreeBSD-gnats-submit@freebsd.org>; Thu,  1 Dec 2005 14:38:51 +0000 (GMT)
	(envelope-from cmt@haidundneu23.net)
Received: from localhost (localhost [127.0.0.1])
	by smtp.burggraben.net (Postfix) with ESMTP id 90B2DB7E2
	for <FreeBSD-gnats-submit@freebsd.org>; Thu,  1 Dec 2005 15:38:49 +0100 (CET)
Received: from smtp.burggraben.net ([127.0.0.1])
 by localhost (burggraben.net [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 11636-22 for <FreeBSD-gnats-submit@freebsd.org>;
 Thu,  1 Dec 2005 15:38:49 +0100 (CET)
Received: from storage.haidundneu23.net (storage.haidundneu23.net [IPv6:2001:8d8:81:700:202:b3ff:fe32:ac42])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client CN "storage.haidundneu23.net", Issuer "Christoph Moench-Tegeder" (verified OK))
	by smtp.burggraben.net (Postfix) with ESMTP
	for <FreeBSD-gnats-submit@freebsd.org>; Thu,  1 Dec 2005 15:38:49 +0100 (CET)
Received: from elch.haidundneu23.net (elch.haidundneu23.net [IPv6:2001:8d8:81:700:202:b3ff:fe25:7065])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client CN "elch.haidundneu23.net", Issuer "Christoph Moench-Tegeder" (verified OK))
	by storage.haidundneu23.net (Postfix) with ESMTP id 06D9D1819B9
	for <FreeBSD-gnats-submit@freebsd.org>; Thu,  1 Dec 2005 15:38:48 +0100 (CET)
Received: by elch.haidundneu23.net (Postfix, from userid 1000)
	id 302906C; Thu,  1 Dec 2005 15:38:58 +0100 (CET)
Message-Id: <20051201143858.302906C@elch.haidundneu23.net>
Date: Thu,  1 Dec 2005 15:38:58 +0100 (CET)
From: Christoph Moench-Tegeder <cmt@burggraben.net>
Reply-To: Christoph Moench-Tegeder <cmt@burggraben.net>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: Firefox 1.5 does not recognize common/built-in CAs - libnssckbi.so not found
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         89796
>Category:       ports
>Synopsis:       Firefox 1.5 does not recognize common/built-in CAs - libnssckbi.so not found
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    gnome
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Dec 01 15:10:02 GMT 2005
>Closed-Date:    Fri Dec 02 05:32:18 GMT 2005
>Last-Modified:  Fri Dec 02 05:32:18 GMT 2005
>Originator:     Christoph Moench-Tegeder
>Release:        FreeBSD 5.4-RELEASE-p8 i386
>Organization:
>Environment:
System: FreeBSD elch.haidundneu23.net 5.4-RELEASE-p8 FreeBSD 5.4-RELEASE-p8 #7: Tue Oct 11 17:14:59 CEST 2005 cmt@elch.haidundneu23.net:/usr/obj/usr/src/sys/CMT i386

firefox-1.5_2,1
nss-3.10

>Description:
Firefox (as cvsup'ed today) asks me to accept certificates issued by
the "well known"/"built-in" CAs as RSA DS and Verisign when
using SSL.
This seems to be related to the issue described in this thread
http://lists.freebsd.org/pipermail/freebsd-gnome/2005-August/011919.html
(libnssckbi.so is not searched for in /usr/local/lib/ where it resides
but in /usr/local/lib/netscape/ which does not exist).
Indeed ktrace/kdump shows
  25152 firefox-bin CALL  stat(0x8698ac0,0xbfbfa738)
  25152 firefox-bin NAMI  "/usr/X11R6/lib/firefox/libnssckbi.so"
  25152 firefox-bin RET   stat -1 errno 2 No such file or directory
  25152 firefox-bin CALL  stat(0x8698b40,0xbfbfa738)
  25152 firefox-bin NAMI  "/usr/local/lib/netscape/libnssckbi.so"
  25152 firefox-bin RET   stat -1 errno 2 No such file or directory
  25152 firefox-bin CALL  stat(0x8698b80,0xbfbfa738)
  25152 firefox-bin NAMI  "/usr/X11R6/lib/firefox/libnssckbi.so"
  25152 firefox-bin RET   stat -1 errno 2 No such file or directory
  25152 firefox-bin CALL  gettimeofday(0xbfbfa960,0)

>How-To-Repeat:

>Fix:
Should work as described in
http://lists.freebsd.org/pipermail/freebsd-gnome/2005-August/011933.html


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->gnome 
Responsible-Changed-By: barner 
Responsible-Changed-When: Thu Dec 1 15:44:20 GMT 2005 
Responsible-Changed-Why:  
Over to maintainers. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=89796 
State-Changed-From-To: open->closed 
State-Changed-By: mezz 
State-Changed-When: Fri Dec 2 05:31:08 GMT 2005 
State-Changed-Why:  
Committed a fix, thanks for reported. Wait for CVSup mirror to catch up the 
changes. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=89796 
>Unformatted:
