Puppy Linux Discussion Forum

[d(O o O)b]

Hi,

Not sure if this is a bug or just something missing from my system.

Iron 15.0.900.2 cannot access any HTTPS pages. Instead it reports error code 9.
I have no problem accessing HTTPS pages with either firefox or elinks.

Additionally in Iron when I try to access preferences/Under the Bonnet/HTTPS-SSL/Manage Certificates, Iron totally crashes and the process exits.

Has anyone else ever repeated this problem and more importantly does anyone know how to fix it? I would much rather use Iron than firefox, it seem faster.

I hope I am not repeating some earlier thread. I have searched and cannot find any previous occurrence.

[rameshiyer]

I am also facing same problem in Google Chrome or Chromium. This problem only in Linux only. ( some versions do not have such problem) However, no problem in Windows version. I feel, Iron browser also built in chromium build.

[d(O o O)b]

I have done some more googling.

The problem is not with the pet, but appears to be inherent in all chromium browsers on linux, due to the google chaps not creating a certificate manager but instead relying on shared nss database. The intricacies of merging my firefox nss database are currently beyond me. I have tried nss-tools certutil, but have stumbled at the 'libsoftokn3.so: cannot open shared object file'

I think I will just stick with firefox for now

Don't suppose anyone fancies writing a chromium certificate manager pet ?

[d(O o O)b]

I have managed to solve the HTTPS/SSL problem - at least for my system. Below is how I did it in case anyone else is still having similar problems:-

I managed to get rid of the 'libsoftokn3.so: cannot open shared object file' error by
downloading a later edition of the nss package from the following address using firefox.

https://launchpad.net/~ubuntu-mozilla-security/+archive/ppa/+build/2772094

I then decided to have another go with importing certificates into a shared database for Iron and Firefox.

First I created the directory structure /root/.pki/nssdb, because it didnt exist. I then moved the following files into it from /root/.mozilla/firefox/nunzpnku.default directory (the last dirname might be different on other installations)
cert8.db
key3.db
After moving them I created symlinks to them in the /root/.mozilla/firefox/nunzpnku.default directory so firefox could still get at them.

All the above I found through google, but cannot quite remember where.

I then downloaded needed certificates for chromium:-
$ wget -O cacert-root.crt "http://www.cacert.org/certs/root.crt"
$ wget -O cacert-class3.crt "http://www.cacert.org/certs/class3.crt"


Then I tried to import them into the certificate database

$ certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org" -i cacert-root.crt
$ certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org Class 3" -i cacert-class3.crt

and got this error:
/usr/lib/libnssutil3.so: undefined symbol: PL_ClearArenaPool.

Googling that error got me back to the puppy linux forum and a post by Danello dated Wed 22 Feb 2012, 13:38 Post subject: How I fixed firefox 10.0.2
In this post he mentioned the same error and had fixed it by symlinking some of the /usr/lib libraries to the ones in /usr/lib/firefox

So:-

In /usr/lib, I renamed all of these with .old extension

libnspr4.so
libnssutil3.so
libplds4.so
libssl3.so
libnss3.so
libplc4.so
libsmime3.so

and symlinked from there to the corresponding files in /usr/lib/firefox

I then found that 'certutil' reporting problem with version of libnssutil3.so - I restored the version in /usr/lib by removing the .old extension

Next problem, 'certutil' reporting problem with libnss3.so - restored the version in /usr/lib by removing the .old extension

certutil now working fine.

Updated certificate database with previously downloaded certificates:-
$ certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org" -i cacert-root.crt
$ certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org Class 3" -i cacert-class3.crt

Iron browser is now handling HTTPS pages just fine. Maybe later I will move the library files permanantly out of /usr/lib/firefox and uninstall firefox completely. For now I will just wait and see how we go.