From mboxrd@z Thu Jan  1 00:00:00 1970
From: Mark H Weaver <mhw@netris.org>
Subject: bug#32833: IceCat 60 showing sites as "insecure" despite using HTTPS
Date: Tue, 25 Sep 2018 20:16:16 -0400
Message-ID: <87a7o5cdv3.fsf@netris.org>
References: <87k1nadx4v.fsf@gnu.org> <87o9clck40.fsf@netris.org>
Mime-Version: 1.0
Content-Type: text/plain
Return-path: <bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:55740)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1g4xVq-0000XS-UF
	for bug-guix@gnu.org; Tue, 25 Sep 2018 20:17:07 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1g4xVm-0004I4-0g
	for bug-guix@gnu.org; Tue, 25 Sep 2018 20:17:06 -0400
Received: from debbugs.gnu.org ([208.118.235.43]:49947)
	by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
	(Exim 4.71) (envelope-from <Debian-debbugs@debbugs.gnu.org>)
	id 1g4xVl-0004Hu-S2
	for bug-guix@gnu.org; Tue, 25 Sep 2018 20:17:01 -0400
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
Resent-Message-ID: <handler.32833.B32833.15379209936539@debbugs.gnu.org>
In-Reply-To: <87o9clck40.fsf@netris.org> (Mark H. Weaver's message of "Tue, 25
	Sep 2018 18:01:19 -0400")
List-Id: Bug reports for GNU Guix <bug-guix.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/bug-guix>,
	<mailto:bug-guix-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/bug-guix/>
List-Post: <mailto:bug-guix@gnu.org>
List-Help: <mailto:bug-guix-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/bug-guix>,
	<mailto:bug-guix-request@gnu.org?subject=subscribe>
Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org
Sender: "bug-Guix" <bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org>
To: Mike Gerwitz <mtg@gnu.org>
Cc: 32833@debbugs.gnu.org

Mark H Weaver <mhw@netris.org> writes:
> To begin, I'm currently building IceCat using the bundled NSPR and NSS,
> to see if that helps.

Using the bundled NSPR and NSS works around the problem for me.  I just
pushed this change in commit 6d328879378fac95240005233331f596fb5c68ed on
'master'.  See also the related, immediately preceding commits
257e3247910610fe24ae1b86f38e85552d53e48c and
94e96f7f68c3b9053fdb5dee5b0ab614163aaa08.

I'm keeping this bug report open, since it would be good to find a
better fix which avoids using the bundled libraries.

      Mark