Firefox Addons Being Disabled Due to an Expired Certificate

Everything about X, Gnome, KDE, ... and everything running on it

Firefox Addons Being Disabled Due to an Expired Certificate

Postby None1975 » 2019-05-04 14:21

Today, using Firefox browser I noticed that all Firefox extensions are automatically disabled. I tried to install some productivity add-ons but failed to install any....When I tried to find a way to solve the problem, I found out that Firefox addons being disabled due to an expired certificate....So colleagues, be vigilant!
I'm currently using a Chromium browser. Let's hope the problem will be resolved...
More info here and here.
OS: Debian 10.3 Buster / WM: xmonad
Debian Wiki | DontBreakDebian, My config files on github
User avatar
None1975
 
Posts: 1019
Joined: 2015-11-29 18:23
Location: Lithuania, Vilnius

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby None1975 » 2019-05-04 17:01

It is an error in Mozilla infrastructure upstream - they have fixed it by abusing a backdoor in Firefox to update a certificate, but Debian has that backdoor disabled by default.
https://blog.mozilla.org/addons/2019/05 ... n-firefox/
OS: Debian 10.3 Buster / WM: xmonad
Debian Wiki | DontBreakDebian, My config files on github
User avatar
None1975
 
Posts: 1019
Joined: 2015-11-29 18:23
Location: Lithuania, Vilnius

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby milomak » 2019-05-04 20:31

this is such a f**k up

apparently 66.0.4 fixes this
Desktop: iMac Late-2015 27" 5K Retina (17,1 - 3.3GHz) - MacOS and Windows 10 (Bootcamp)/ Sid (External SSD)
Laptop: Lenovo ideapad Y700-15ISK [nVidia Optimus] (64-bit) - Sid, Win10, Solus
Kodi Box: AMD Athlon 5150 APU w/Radeon HD 8400 - Sid
milomak
 
Posts: 2046
Joined: 2009-06-09 22:20

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby NFT5 » 2019-05-04 21:07

Please note: The fix does not apply to Firefox ESR or Firefox for Android. We’re working on releasing a fix for both, and will provide updates here and on social media.

To provide this fix on short notice, we are using the Studies system. This system is enabled by default, and no action is needed unless Studies have been disabled.


Studies is disabled in Debian's version of ESR so, still out of action, as is my phone. :(
User avatar
NFT5
 
Posts: 400
Joined: 2014-10-10 11:38
Location: Canberra, Australia

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby milomak » 2019-05-04 21:07

not a great solution but the following seems to work in about:config
Code: Select all
xpinstall.signatures.required to false
Desktop: iMac Late-2015 27" 5K Retina (17,1 - 3.3GHz) - MacOS and Windows 10 (Bootcamp)/ Sid (External SSD)
Laptop: Lenovo ideapad Y700-15ISK [nVidia Optimus] (64-bit) - Sid, Win10, Solus
Kodi Box: AMD Athlon 5150 APU w/Radeon HD 8400 - Sid
milomak
 
Posts: 2046
Joined: 2009-06-09 22:20

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby 4D696B65 » 2019-05-04 23:31

webext-ublock-origin_1.18.10+dfsg-1_all.deb from experimental works ok on 66.0.1
User avatar
4D696B65
 
Posts: 2486
Joined: 2009-06-28 06:09

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby milomak » 2019-05-04 23:53

4D696B65 wrote:webext-ublock-origin_1.18.10+dfsg-1_all.deb from experimental works ok on 66.0.1

can i turn the above back to true?
Desktop: iMac Late-2015 27" 5K Retina (17,1 - 3.3GHz) - MacOS and Windows 10 (Bootcamp)/ Sid (External SSD)
Laptop: Lenovo ideapad Y700-15ISK [nVidia Optimus] (64-bit) - Sid, Win10, Solus
Kodi Box: AMD Athlon 5150 APU w/Radeon HD 8400 - Sid
milomak
 
Posts: 2046
Joined: 2009-06-09 22:20

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby 4D696B65 » 2019-05-04 23:58

milomak wrote:
4D696B65 wrote:webext-ublock-origin_1.18.10+dfsg-1_all.deb from experimental works ok on 66.0.1

can i turn the above back to true?

yes :D Mine is set to true
User avatar
4D696B65
 
Posts: 2486
Joined: 2009-06-28 06:09

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby milomak » 2019-05-05 13:12

this addon seems to fix the issue
Code: Select all
https://storage.googleapis.com/moz-fx-normandy-prod-addons/extensions/hotfix-update-xpi-intermediate%40mozilla.com-1.0.2-signed.xpi


and can set the attribute in about:config back to true
Desktop: iMac Late-2015 27" 5K Retina (17,1 - 3.3GHz) - MacOS and Windows 10 (Bootcamp)/ Sid (External SSD)
Laptop: Lenovo ideapad Y700-15ISK [nVidia Optimus] (64-bit) - Sid, Win10, Solus
Kodi Box: AMD Athlon 5150 APU w/Radeon HD 8400 - Sid
milomak
 
Posts: 2046
Joined: 2009-06-09 22:20

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby ramack » 2019-05-05 13:25

milomak wrote:not a great solution but the following seems to work in about:config
Code: Select all
xpinstall.signatures.required to false


This worked for me. Thanks!
homemade AMD64, Acer AspireOne 150, Asus eeePC 900, i386; Testing
i386,Dell Vostro 1000 AMD64, Dell Inspiron 1100; Sid
XFCE on all.
ramack
 
Posts: 463
Joined: 2008-01-28 15:31
Location: Centennial, CO

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby None1975 » 2019-05-06 13:38

A Firefox release has been pushed — version 66.0.4 on Desktop and Android, and version 60.6.2 for ESR. This release repairs the certificate chain to re-enable web extensions, themes, search engines, and language packs that had been disabled (Bug 1549061). There are remaining issues that devs are actively working to resolve, but they wanted to get this fix out before Monday to lessen the impact of disabled add-ons before the start of the week.
More information here.
OS: Debian 10.3 Buster / WM: xmonad
Debian Wiki | DontBreakDebian, My config files on github
User avatar
None1975
 
Posts: 1019
Joined: 2015-11-29 18:23
Location: Lithuania, Vilnius

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby Ardouos » 2019-05-06 15:48

Debian have now released an update to Firefox-ESR that fixes the issue. Just update with APT.

Code: Select all
$ dpkg -l firefox-esr
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name             Version       Architecture  Description
+++-================-=============-=============-======================================
ii  firefox-esr      60.6.2esr-1~d amd64         Mozilla Firefox web browser - Extended
User avatar
Ardouos
 
Posts: 1061
Joined: 2013-11-03 00:30
Location: Elicoor II

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby None1975 » 2019-05-06 16:46

Ardouos wrote:Debian have now released an update to Firefox-ESR that fixes the issue. Just update with APT.

Thank you for the info!
OS: Debian 10.3 Buster / WM: xmonad
Debian Wiki | DontBreakDebian, My config files on github
User avatar
None1975
 
Posts: 1019
Joined: 2015-11-29 18:23
Location: Lithuania, Vilnius

Re: Firefox Addons Being Disabled Due to an Expired Certific

Postby ramack » 2019-05-06 19:47

Ardouos wrote:Debian have now released an update to Firefox-ESR that fixes the issue. Just update with APT.


Upgraded, thank you.
homemade AMD64, Acer AspireOne 150, Asus eeePC 900, i386; Testing
i386,Dell Vostro 1000 AMD64, Dell Inspiron 1100; Sid
XFCE on all.
ramack
 
Posts: 463
Joined: 2008-01-28 15:31
Location: Centennial, CO


Return to Desktop & Multimedia

Who is online

Users browsing this forum: No registered users and 13 guests

fashionable