Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Still getting warning for self signed certificates #34

Closed
ComeGitSome opened this issue Sep 4, 2011 · 7 comments
Closed

Still getting warning for self signed certificates #34

ComeGitSome opened this issue Sep 4, 2011 · 7 comments

Comments

@ComeGitSome
Copy link

From what I understand I shouldn't get warnings about sites using self signed certificates but I still do. Here's some random site I found that my browser warns me about: https://lists.gno.org/self-signed.html

lists.gno.org uses an invalid security certificate.
The certificate is not trusted because it is self-signed.
(Error code: sec_error_ca_cert_invalid)

I'm also seeing "Verified by: Digicert Inc" instead of Verified by: Convergence" which is what I should see if I remember the Blackhat talk correctly.
Here's a screenshot of that: http://img839.imageshack.us/img839/8849/screenshotznq.png

As you can see Convergence is enabled. I haven't done any changes in the options so it's all default.

I'm using Iceweasel 6.0-3~bpo60+1 from http://mozilla.debian.net and Convergence 0.03

@moxie0
Copy link
Owner

moxie0 commented Sep 4, 2011

Sounds like Convergence isn't working at all for you. We had some problems with people using "distributed" FF installs, as Debian does, but thought we fixed them in 0.03. Can you post the console output of running firefox from a terminal?

@ComeGitSome
Copy link
Author

user@debian:~$ iceweasel
WARNING: Application calling GLX 1.3 function "glXCreatePixmap" when GLX 1.3 is not supported! This is an application bug!
WARNING: Application calling GLX 1.3 function "glXDestroyPixmap" when GLX 1.3 is not supported! This is an application bug!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ctypes/NSPR.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ctypes/NSS.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ctypes/SSL.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ctypes/SQLITE.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/sockets/ConvergenceDestinationSocket.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/sockets/ConvergenceServerSocket.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/sockets/ConvergenceSocket.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ctypes/Serialization.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ssl/CertificateManager.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ssl/CertificateInfo.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/protocols/HttpProxyServer.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/components/LocalProxy.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ssl/Notary.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/components/SettingsManager.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/components/ConnectionManager.js
Loaded!
Loading: /home/user/.mozilla/firefox/tx49cue1.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ssl/NativeCertificateCache.js
Loaded!
Failed to find nspr4 in installed directory, checking system paths.
Failed to find nss3 in installed directory, checking system paths.
Failed to find ssl3 in installed directory, checking system paths.
Failed to find mozsqlite3 in installed directory, checking system paths for sqlite3.
Failed to find standard sqlite3 permutations, checking debian-specific libsqlite3.so.0.
Settings loaded threshold: majority
Configuring cache...
Generating new ca certificate..
KeyPair generation error: -8037
Initializing error: Error generating keypair! , undefined

@moxie0
Copy link
Owner

moxie0 commented Sep 4, 2011

Do you have nspr4, nss3, ssl3, and sqlite libraries somewhere on your system?

@moxie0
Copy link
Owner

moxie0 commented Sep 4, 2011

Do you have a master password set for your PSM?
#22

@ComeGitSome
Copy link
Author

I do have a master password and after following the instructions in the the link everything seems to work. I'm still seeing "Failed to find *** in installed directory, checking system paths." though, is that a problem?

user@debian:~$ locate nspr4
/usr/lib/libnspr4.so
/usr/lib/libnspr4.so.0d
/usr/lib32/libnspr4.so
/usr/lib32/libnspr4.so.0d
/usr/share/doc/libnspr4-0d
/usr/share/doc/libnspr4-0d/changelog.Debian.gz
/usr/share/doc/libnspr4-0d/copyright
/usr/share/lintian/overrides/libnspr4-0d
/var/lib/dpkg/info/libnspr4-0d.list
/var/lib/dpkg/info/libnspr4-0d.md5sums
/var/lib/dpkg/info/libnspr4-0d.postinst
/var/lib/dpkg/info/libnspr4-0d.postrm
/var/lib/dpkg/info/libnspr4-0d.shlibs
/var/lib/dpkg/info/libnspr4-0d.symbols

user@debian:$ locate nss3
/usr/lib/libnss3.so
/usr/lib/libnss3.so.1d
/usr/lib32/libnss3.so
/usr/lib32/libnss3.so.1d
/usr/share/doc/libnss3-1d
/usr/share/doc/libnss3-1d/changelog.Debian.gz
/usr/share/doc/libnss3-1d/copyright
/usr/share/lintian/overrides/libnss3-1d
/var/cache/apt/archives/libnss3-1d_3.12.10-2
bpo60+1_amd64.deb
/var/lib/dpkg/info/libnss3-1d.list
/var/lib/dpkg/info/libnss3-1d.md5sums
/var/lib/dpkg/info/libnss3-1d.postinst
/var/lib/dpkg/info/libnss3-1d.postrm
/var/lib/dpkg/info/libnss3-1d.shlibs
/var/lib/dpkg/info/libnss3-1d.symbols

user@debian:~$ locate ssl3
/usr/lib/libssl3.so
/usr/lib/libssl3.so.1d
/usr/lib32/libssl3.so
/usr/lib32/libssl3.so.1d

@ewanm89
Copy link

ewanm89 commented Sep 4, 2011

looks like it could still be the same as this one: #38
More ctypes problems! Seems firefox expects it in a lib/firefox/ subdirectory, not shared with the rest of the system files in just lib/

@moxie0
Copy link
Owner

moxie0 commented Sep 5, 2011

I'm closing this as a duplicate of #22

@moxie0 moxie0 closed this as completed Sep 5, 2011
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants