With latest update PureBrowser is not working with some websites (examples: translate.google.com, archlinux.org, youtube.com, etc), it simply does not load them. Confirmed for at least two users.
Plugins disabled, vendor.js et friends disabled, but it doesn't help.
| Status | Assigned | Task | ||
|---|---|---|---|---|
| Wontfix | jonas.smedegaard | T147 Rework purebrowser packaging | ||
| Resolved | chris.lamb | T140 PureBrowser not loading some websites |
Also, why is there a Firefox on the list of programs on a freshly installed PureOS? Firefox works, but PureBrowser does not.
After a lot of investigating and comparing sites that do and do not work, this is caused by some bug or misconfiguration where the browser does not handle SSL extended master secrets correctly. To cut a very long story short, we can work around it by setting security.ssl.enable_alpn to false.
Tue 18 21:49 < zlatan > lamby, for purebrowser - don't investigate it as it is probably done in quite bad manner/shape
diff --git a/netwerk/base/security-prefs.js b/netwerk/base/security-prefs.js index 17b851b7e..11a2ffdf5 100644 --- a/netwerk/base/security-prefs.js +++ b/netwerk/base/security-prefs.js @@ -14,7 +14,7 @@ pref("security.ssl.enable_ocsp_stapling", true); pref("security.ssl.enable_false_start", true); pref("security.ssl.false_start.require-npn", false); pref("security.ssl.enable_npn", true); -pref("security.ssl.enable_alpn", true); +pref("security.ssl.enable_alpn", false); pref("security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", true); pref("security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256", true);
I've updated Purebrowser to the latest version (and restarted both Purebrowser and my computer), and I still cannot access sites like youtube.com, without setting security.ssl.enable_alpn to "False".
Can you clarify exactly which version? Please paste the output of:
dpkg -l purebrowser
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend | |
| / Err?=(none)/Reinst-required (Status,Err: uppercase=bad) | |
| / Name Version Architecture Description | |
+++-==============-============-============-=================================
ii purebrowser 46.2.0esr+re amd64 Pureos web browser
Ah, that should have been:
dpkg -s purebrowser | grep Version
However, I can just about see that you were using 46.2.0esr+really45.4.0esr+pureos-1pureos1 as I can see the "+re" at the end of "46.2.0esr+re".
Anyway, this should be fixed in 46.2.0esr+really45.4.0esr+pureos-1pureos2. Please let me know if you keep seeing this and, if so, paste the output of the above. :)