Page MenuHomePureOS Tracker

PureBrowser not loading some websites
Closed, ResolvedPublic


With latest update PureBrowser is not working with some websites (examples:,,, etc), it simply does not load them. Confirmed for at least two users.

Plugins disabled, vendor.js et friends disabled, but it doesn't help.

Event Timeline

mladen created this task.Jul 5 2017, 08:56
mladen updated the task description. (Show Details)Jul 6 2017, 07:48

Also, why is there a Firefox on the list of programs on a freshly installed PureOS? Firefox works, but PureBrowser does not.

mladen added a project: Restricted Project.Jul 17 2017, 05:19
mladen updated the task description. (Show Details)

Can reproduce.

After a lot of investigating and comparing sites that do and do not work, this is caused by some bug or misconfiguration where the browser does not handle SSL extended master secrets correctly. To cut a very long story short, we can work around it by setting security.ssl.enable_alpn to false.

Tue 18 21:49 <         zlatan > lamby, for purebrowser - don't investigate it as it is probably done in quite bad manner/shape
diff --git a/netwerk/base/security-prefs.js b/netwerk/base/security-prefs.js
index 17b851b7e..11a2ffdf5 100644
--- a/netwerk/base/security-prefs.js
+++ b/netwerk/base/security-prefs.js
@@ -14,7 +14,7 @@ pref("security.ssl.enable_ocsp_stapling", true);
 pref("security.ssl.enable_false_start", true);
 pref("security.ssl.false_start.require-npn", false);
 pref("security.ssl.enable_npn", true);
-pref("security.ssl.enable_alpn", true);
+pref("security.ssl.enable_alpn", false);
 pref("security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", true);
 pref("security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256", true);

Thanks Chris! It fixes the issue for me.

chris.lamb closed this task as Resolved.Sep 12 2017, 09:03

Fixed in purebrowser 46.2.0esr-1pureos2.

ezs777 reopened this task as Open.Sep 15 2017, 14:27
ezs777 added a subscriber: ezs777.

I've updated Purebrowser to the latest version (and restarted both Purebrowser and my computer), and I still cannot access sites like, without setting security.ssl.enable_alpn to "False".

In T140#3059, @ezs777 wrote:

I've updated Purebrowser to the latest version

Can you clarify exactly which version? Please paste the output of:

dpkg -l purebrowser
ezs777 added a comment.Sep 15 2017, 14:38


/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
/ Name Version Architecture Description

ii purebrowser 46.2.0esr+re amd64 Pureos web browser

chris.lamb closed this task as Resolved.Sep 16 2017, 01:48
In T140#3063, @ezs777 wrote:

ii purebrowser 46.2.0esr+re amd64 Pureos web browser

Ah, that should have been:

dpkg -s purebrowser | grep Version

However, I can just about see that you were using 46.2.0esr+really45.4.0esr+pureos-1pureos1 as I can see the "+re" at the end of "46.2.0esr+re".

Anyway, this should be fixed in 46.2.0esr+really45.4.0esr+pureos-1pureos2. Please let me know if you keep seeing this and, if so, paste the output of the above. :)