Firefox Addons Being Disabled Due to an Expired Certificate

[None1975]

Today, using Firefox browser I noticed that all Firefox extensions are automatically disabled. I tried to install some productivity add-ons but failed to install any....When I tried to find a way to solve the problem, I found out that Firefox addons being disabled due to an expired certificate....So colleagues, be vigilant!
I'm currently using a Chromium browser. Let's hope the problem will be resolved...
More info here and here.

[None1975]

It is an error in Mozilla infrastructure upstream - they have fixed it by abusing a backdoor in Firefox to update a certificate, but Debian has that backdoor disabled by default.
https://blog.mozilla.org/addons/2019/05 ... n-firefox/

[milomak]

this is such a f**k up

apparently 66.0.4 fixes this

[NFT5]

Please note: The fix does not apply to Firefox ESR or Firefox for Android. We’re working on releasing a fix for both, and will provide updates here and on social media.

To provide this fix on short notice, we are using the Studies system. This system is enabled by default, and no action is needed unless Studies have been disabled.

Studies is disabled in Debian's version of ESR so, still out of action, as is my phone.

[milomak]

not a great solution but the following seems to work in about:config

Code: Select all

xpinstall.signatures.required to false

[4D696B65]

webext-ublock-origin_1.18.10+dfsg-1_all.deb from experimental works ok on 66.0.1

[milomak]

webext-ublock-origin_1.18.10+dfsg-1_all.deb from experimental works ok on 66.0.1

can i turn the above back to true?

[4D696B65]

webext-ublock-origin_1.18.10+dfsg-1_all.deb from experimental works ok on 66.0.1

can i turn the above back to true?

yes Mine is set to true

[milomak]

this addon seems to fix the issue

Code: Select all

https://storage.googleapis.com/moz-fx-normandy-prod-addons/extensions/hotfix-update-xpi-intermediate%40mozilla.com-1.0.2-signed.xpi

and can set the attribute in about:config back to true

[ramack]

not a great solution but the following seems to work in about:config

Code: Select all

xpinstall.signatures.required to false

This worked for me. Thanks!

[None1975]

A Firefox release has been pushed — version 66.0.4 on Desktop and Android, and version 60.6.2 for ESR. This release repairs the certificate chain to re-enable web extensions, themes, search engines, and language packs that had been disabled (Bug 1549061). There are remaining issues that devs are actively working to resolve, but they wanted to get this fix out before Monday to lessen the impact of disabled add-ons before the start of the week.
More information here.

[Ardouos]

Debian have now released an update to Firefox-ESR that fixes the issue. Just update with APT.

Code: Select all

$ dpkg -l firefox-esr
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name             Version       Architecture  Description
+++-================-=============-=============-======================================
ii  firefox-esr      60.6.2esr-1~d amd64         Mozilla Firefox web browser - Extended


[None1975]

Debian have now released an update to Firefox-ESR that fixes the issue. Just update with APT.

Thank you for the info!

[ramack]

Debian have now released an update to Firefox-ESR that fixes the issue. Just update with APT.

Upgraded, thank you.