Unable to access application on Mozilla Firefox v112.0.1(64 bit)
Dear Team, Our application is accessible on Firefox v101.0.1. But recently we have upgraded our desktops with Firefox v112.0.1. The same application accessible on Firefox 101.0.1 is not able to accessible on v112.0.1.
The error code we could see on browser is SEC_ERROR+PKCS11_GENERAL_ERROR. We have already raised a case with HTTP support team but they have suggested to check at browser level. We had also collected traces from firefox but unable to upload the same. Kindly help here at the earliest. Thanks, Shruti Fegade
All Replies (8)
SEC_ERROR_PKCS11_GENERAL_ERROR
Would it be possible for you to use mozregression to try to figure out when exactly it stopped working?
Hi , We could not run mozregression. But collected the logs from working(101.0.1) and non working(112.0.1) mozilla browsers. Kindly go through the logs and suggest. Thanks, Shruti
Why coudn't you run mozgression?
That error code can only happen when you are using an external PKCS#11 module instead of the built-in Firefox crypto functionality, and it means the module has returned a general error. Unfortunately not very descriptive -- the error could be just about anything! A very common source of a PKCS#11 module is from smartcard hardware, but there are other kinds of security software (typically "enterprise" software) that would install a PKCS#11 module.
The first step would be to determine what specific PCKS#11 module and version you are using so we can reproduce this error. Otherwise it's impossible to tell whether the problem is a bug in Firefox or if it's a bug in the PKCS#11 module that simply hasn't been apparent until it was triggred by some slight change in Firefox.
The same crypto setup is working for Mozilla Firefox 101.0.1. But not working on Mozilla 112.0.1. Are there any specific configuration changed in Mozilla 112.0.1 version? Please find crypto version in our environment. [root@P35W ~]# rpm -qa|grep opencryptoki opencryptoki-libs-3.17.0-5.el8_6.s390x opencryptoki-3.17.0-5.el8_6.s390x opencryptoki-ep11tok-3.17.0-5.el8_6.s390x opencryptoki-tpmtok-3.17.0-5.el8_6.s390x opencryptoki-ccatok-3.17.0-5.el8_6.s390x opencryptoki-swtok-3.17.0-5.el8_6.s390x opencryptoki-icsftok-3.17.0-5.el8_6.s390x opencryptoki-icatok-3.17.0-5.el8_6.s390x [root@P35W ~]# rpm -qa|grep cca libkcapi-hmaccalc-1.2.0-2.el8.s390x csulcca-6.0.9-12.s390x opencryptoki-ccatok-3.17.0-5.el8_6.s390x Request to help at the earliest. Regards, Shruti
Dear Team, Kindly support at the earliest. Also share the link where i can upload the logs collected from working and non working firefox browser.
Thanks, Shruti
What logs did you do specifically?
Is there any chance you could try with Firefox 114 and go to about:config and set the preference
security.osclientcerts.assume_rsa_pss_support
to false and see if that fixes the problem?