mozilla / tls-canary

DEPRECATED - TLS regression scanner for Firefox
https://tlscanary.mozilla.org/
Mozilla Public License 2.0
18 stars 15 forks source link

SEC_ERROR_LIBRARY_FAILURE for all hosts on Firefox 77.0.1 for Ubuntu 20.04 #226

Closed jcjones closed 2 years ago

jcjones commented 4 years ago

A simple call of tlscanary --debug regression --source top --parallel 32 --onecrlpin origin/master -l 5 is yielding all hosts as errors, where all hosts yield SEC_ERROR_LIBRARY_FAILURE on Ubuntu 20.04. This includes the code from PRs #225 and #224.

Log attached tls-canary-sec-errors.log

mozmark commented 4 years ago

OK, I've narrowed it down to something introduced in fx75.

mozmark commented 4 years ago

There's some change that results in default profile data causing SEC_LIBRARY_ERRORS. One fix could be to update the default profile data in canary.

arroway commented 4 years ago

I'm hitting the same issue when running tlscanary. @mozmark would you happen to remember any clue regarding the default profile data causing the issue, since you had a look at it?

g-k commented 4 years ago

Kinda weird, but I'm not seeing the SEC_ERROR_LIBRARY_FAILURE in a ubuntu docker image in https://github.com/mozilla/tls-canary/pull/229

g-k commented 4 years ago

@arroway do you have time to verify whether https://github.com/mozilla/tls-canary/pull/229 fixes the error for you? (ping me if repro steps aren't clear)