This is huge. This had a huge impact on my work in the last hours. Still not fixed for me. What's going on???
All extensions disabled due to expiration of intermediate signing cert
591–600 of 955 posts
Re: All extensions disabled due to expiration of intermediate signing cert
#592Update: We have rolled out a partial fix for this issue. We generated a new intermediate certificate with the same name/key but an updated validity window and pushed it out to users via Normandy (this should be most users). Users who have Normandy on should see their add-ons start working over the next few hours. We are continuing to work on packaging up the new certificate for users who have Normandy disabled.
I read at https://discourse.mozilla.org/t/certificate-issue-causing-ad... >12:50 p.m. UTC / 03:50 a.m. PDT: We rolled-out a fix for release, beta and nightly users. The fix will be automatically applied in the background within the next few hours, you don’t need to take active steps. >In order to be able to provide this fix on short notice, we are using the Studies system. You can check if you have studies enabled by…
JSON response from the `normandy` API here: https://xor.cat/assets/other/random/2019-05-04/normandy_sign...
hotfix-update-xpi-signing-intermediate-bug-1548973: https://storage.googleapis.com/moz-fx-normandy-prod-addons/e...
From the looks, it installs the above plugin, and changes `app.update.lastUpdateTime.xpi-signature-verification` to `1556945257`
I can't get it to work in ESR 60 though. Getting file not found on "resource://gre/modules/addons/XPIDatabase.jsm"
edit: The linked XPI definitely seems to add the new certificate, whatever mechanism used to reverify the signatures just doesn't seem to work in 60.
edit2: Restarting Firefox appears to have forced the reverify... Possibly a flag that I twiddled with though, hard to be sure. Either way, the above should help people get everything running again without having to enable studies/normandy.
Re: All extensions disabled due to expiration of intermediate signing cert
#593Earlier quoted context omitted.
The UI knob is Options -> Privacy & Security > Allow Firefox to install and run studies They're using the studies system to push this hotfix faster for those that have it enabled. Edit: Source: See: https://discourse.mozilla.org/t/certificate-issue-causing-ad... > In order to be able to provide this fix on short notice, we are using the Studies system. You can check if you have studies enabled by going to Firefox Pre…
> The UI knob is > Options -> Privacy & Security > Allow Firefox to install and run studies That is not true. I've had that disabled forever Despite that, when I went into about:config, app.normandy.enabled was set to true, and app.normandy.user_id was defined. So, overnight Firefox decides it won't let me use uBlock Origin any more and now I find out all my browsing history has been logged to Firefox servers. All of…
> now I find out all my browsing history has been logged to Firefox servers.
Where are you getting this from?
Re: All extensions disabled due to expiration of intermediate signing cert
#594Earlier quoted context omitted.
I read at https://discourse.mozilla.org/t/certificate-issue-causing-ad... >12:50 p.m. UTC / 03:50 a.m. PDT: We rolled-out a fix for release, beta and nightly users. The fix will be automatically applied in the background within the next few hours, you don’t need to take active steps. >In order to be able to provide this fix on short notice, we are using the Studies system. You can check if you have studies enabled by…
> This comes very close after the IE6 conspiracy revelation, where ends justifies the means. What?!
you probably missed this story: https://news.ycombinator.com/item?id=19798678
Re: All extensions disabled due to expiration of intermediate signing cert
#595Earlier quoted context omitted.
pushed it out to users via Normandy (this should be most users) Is the existence of a back door method of updating Firefox preferences something that will be disclosed to users? What about a UI knob to disable it?
This is the first I hear about Normandy[1]. Firefox has been my main browser for a long time, only because I could use uBlock origin. Now, all of a sudden that is disabled, and with the recent version they got rid of my ability to always prevent autoplaying of videos. Apparently, there is no one associated with browsers can be trusted in the least. [1]: https://wiki.mozilla.org/Firefox/Normandy/PreferenceRollout
[deleted]
Re: All extensions disabled due to expiration of intermediate signing cert
#596Earlier quoted context omitted.
I read at https://discourse.mozilla.org/t/certificate-issue-causing-ad... >12:50 p.m. UTC / 03:50 a.m. PDT: We rolled-out a fix for release, beta and nightly users. The fix will be automatically applied in the background within the next few hours, you don’t need to take active steps. >In order to be able to provide this fix on short notice, we are using the Studies system. You can check if you have studies enabled by…
The last sentence you quoted literally said that they will provide you with the option to fix this without needing to enable studies.
correct, and I am emphasizing and pointing out my choice to wait such that others can make the same informed choice if they so wish.
(I would have wanted to read my comment if someone else had written it, so by the golden rule I make the comment I wish I had read)
Re: All extensions disabled due to expiration of intermediate signing cert
#597Earlier quoted context omitted.
The wiki entry evidently doesn't describe what it does because according to the wiki entry it allows for the enabling and disabling of preferences. The updating of a certificate is beyond what is described in the wiki. Mozilla should follow up with a post describing exactly how Normandy works and the full capabilities it gives them.
So search elsewhere if you want more info. All code is available.
Users shouldn't have to search and then be able to understand the code found for such a feature. When a remote capability such as this exists it is Mozilla's responsibility to document how the feature works and the exact capabilities it gives them. Instead of doing so they have produced a wiki entry which appears to falsely describe the capabilities of this remote feature by stating it is used to change default preference values.
Re: All extensions disabled due to expiration of intermediate signing cert
#598Earlier quoted context omitted.
The UI knob is Options -> Privacy & Security > Allow Firefox to install and run studies They're using the studies system to push this hotfix faster for those that have it enabled. Edit: Source: See: https://discourse.mozilla.org/t/certificate-issue-causing-ad... > In order to be able to provide this fix on short notice, we are using the Studies system. You can check if you have studies enabled by going to Firefox Pre…
No, it's not. This Normandy nonsense and stories are two separate, yet creepy features. I've already disabled stories but it looks like Mozilla still retains control of my preferences (without disclosing it).
I sure wonder how people so suspicious of Mozilla dare use their browser.
Re: All extensions disabled due to expiration of intermediate signing cert
#599Earlier quoted context omitted.
> This comes very close after the IE6 conspiracy revelation, where ends justifies the means. What?!
you probably missed this story: https://news.ycombinator.com/item?id=19798678
I actually did read that story but I don't understand what that has to do with anything being discussed here.
Yes, Youtube put up a banner asking IE6 users to move to a more modern browser 10 years ago. How is that in any way related to Firefox pushing a hotfix in 2019 to fix a certificate issue? Are you worried there is a big evil conspiracy to use this mechanism to uninstall Internet Explorer from peoples' computers?!
Re: All extensions disabled due to expiration of intermediate signing cert
#600There's a workaround that involves going to about:config and setting xpinstall.signatures.required to false. However, if you're running the Stable or Beta version, it will only work under Linux. On Windows and MacOS you'll need to download Nightly or the Developer Edition. To fix this on MacOS I did the following: 1. Downloaded and installed Firefox Nightly 2. Ran /Applications/Firefox\ Nightly.app/Contents/MacOS/fir…
This worked for me on Firefox 60.6.1esr on Debian 9 Linux—changing the setting instantly restored my addons.
No go for me on Firefox 59.0 / Debian 64bit. I even restarted Firefox but they're all still "Legacy Extensions". :(