PureBrowser not loading some websites
Closed, ResolvedPublic

Description

With latest update PureBrowser is not working with some websites (examples: translate.google.com, archlinux.org, youtube.com, etc), it simply does not load them. Confirmed for at least two users.

Plugins disabled, vendor.js et friends disabled, but it doesn't help.

Task Graph

StatusAssignedTask
OpenNone
Resolvedchris.lamb

Also, why is there a Firefox on the list of programs on a freshly installed PureOS? Firefox works, but PureBrowser does not.

mladen.pejakovic added a project: Restricted Project.Jul 17 2017, 12:19 PM
mladen.pejakovic edited the task description. (Show Details)

Can reproduce.

After a lot of investigating and comparing sites that do and do not work, this is caused by some bug or misconfiguration where the browser does not handle SSL extended master secrets correctly. To cut a very long story short, we can work around it by setting security.ssl.enable_alpn to false.

Tue 18 21:49 <         zlatan > lamby, for purebrowser - don't investigate it as it is probably done in quite bad manner/shape
diff --git a/netwerk/base/security-prefs.js b/netwerk/base/security-prefs.js
index 17b851b7e..11a2ffdf5 100644
--- a/netwerk/base/security-prefs.js
+++ b/netwerk/base/security-prefs.js
@@ -14,7 +14,7 @@ pref("security.ssl.enable_ocsp_stapling", true);
 pref("security.ssl.enable_false_start", true);
 pref("security.ssl.false_start.require-npn", false);
 pref("security.ssl.enable_npn", true);
-pref("security.ssl.enable_alpn", true);
+pref("security.ssl.enable_alpn", false);
 
 pref("security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", true);
 pref("security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256", true);

Thanks Chris! It fixes the issue for me.

chris.lamb closed this task as "Resolved".Sep 12 2017, 4:03 PM

Fixed in purebrowser 46.2.0esr-1pureos2.

ezs777 reopened this task as "Open".Sep 15 2017, 9:27 PM
ezs777 added a subscriber: ezs777.

I've updated Purebrowser to the latest version (and restarted both Purebrowser and my computer), and I still cannot access sites like youtube.com, without setting security.ssl.enable_alpn to "False".

In T140#3059, @ezs777 wrote:

I've updated Purebrowser to the latest version

Can you clarify exactly which version? Please paste the output of:

dpkg -l purebrowser

Desired=Unknown/Install/Remove/Purge/Hold

Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
/ Name Version Architecture Description

+++-==============-============-============-=================================
ii purebrowser 46.2.0esr+re amd64 Pureos web browser

chris.lamb closed this task as "Resolved".Sep 16 2017, 8:48 AM
In T140#3063, @ezs777 wrote:

ii purebrowser 46.2.0esr+re amd64 Pureos web browser

Ah, that should have been:

dpkg -s purebrowser | grep Version

However, I can just about see that you were using 46.2.0esr+really45.4.0esr+pureos-1pureos1 as I can see the "+re" at the end of "46.2.0esr+re".

Anyway, this should be fixed in 46.2.0esr+really45.4.0esr+pureos-1pureos2. Please let me know if you keep seeing this and, if so, paste the output of the above. :)

Add Comment