Bug#833719: firefox: NS_ERROR_NET_INADEQUATE_SECURITY on Google & Facebook only with i386 build

[Amit Gurdasani]

Package: firefox
Version: 48.0-1
Severity: important

Dear Maintainer,

-- Package-specific info:
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20160808/76babd7c/attachment.ksh>
-------------- next part --------------

I get an NS_ERROR_NET_INADEQUATE_SECURITY on some, but not all,
websites using TLS, when using the i386 build of firefox.

I used a fresh Firefox profile, with this command line in addition:

MOZILLA_DISABLE_PLUGINS=1 firefox -safe-mode

Websites where I face this issue include:

https://www.google.com/
https://facebook.com/
https://www.mozilla.org/
https://www.whatismyip.com/

Websites where I do not face this issue include:

https://theoldreader.com/
https://www.theguardian.com/uk


The issue was encountered with firefox:i386 48.0-1.
The issue was not encountered with firefox:amd64 48-0.1 or
firefox-esr:i386 45.2.0esr-1.
The issue was not encountered with Firefox 48.0 i386 binaries from
upstream.

I conclude that the firefox:i386 build may have packaging issues that
the upstream version does not, and nor does the amd64 build.

I ought to note that I am running Debian testing (stretch) i386 with
an x86_64 kernel, a relatively unusual configuration.

Screenshots:

https://ibin.co/2qoTUHw5QWIU.png
https://ibin.co/2qoTppbYHNG6.png

Thanks,

Amit


-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (950, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 4.6.0-1-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

Versions of packages firefox depends on:
ii  debianutils               4.8
ii  fontconfig                2.11.0-6.4
ii  libasound2                1.1.1-2
ii  libatk1.0-0               2.20.0-1
ii  libc6                     2.23-4
ii  libcairo2                 1.14.6-1+b1
ii  libdbus-1-3               1.10.8-1
ii  libdbus-glib-1-2          0.106-1
ii  libevent-2.0-5            2.0.21-stable-2+b1
ii  libffi6                   3.2.1-4
ii  libfontconfig1            2.11.0-6.4
ii  libfreetype6              2.6.3-3+b1
ii  libgcc1                   1:6.1.1-10
ii  libgdk-pixbuf2.0-0        2.34.0-1
ii  libglib2.0-0              2.48.1-2
ii  libgtk2.0-0               2.24.30-4
ii  libhunspell-1.4-0         1.4.1-2
ii  libnspr4                  2:4.12-2
ii  libnss3                   2:3.23-2
ii  libpango-1.0-0            1.40.1-1
ii  libsqlite3-0              3.13.0-1
ii  libstartup-notification0  0.12-4
ii  libstdc++6                6.1.1-10
ii  libvpx3                   1.5.0-3
ii  libx11-6                  2:1.6.3-1
ii  libxcomposite1            1:0.4.4-1
ii  libxdamage1               1:1.1.4-2+b1
ii  libxext6                  2:1.3.3-1
ii  libxfixes3                1:5.0.2-1
ii  libxrender1               1:0.9.9-2
ii  libxt6                    1:1.1.5-1
ii  procps                    2:3.3.12-2
ii  zlib1g                    1:1.2.8.dfsg-2+b1

firefox recommends no packages.

Versions of packages firefox suggests:
pn  fonts-lmodern          <none>
pn  fonts-stix | otf-stix  <none>
ii  libcanberra0           0.30-3
pn  libgnomeui-0           <none>
ii  libgssapi-krb5-2       1.14.3+dfsg-1
pn  mozplugger             <none>

-- no debconf information