Pages tagged: FireFox

I was unable to access my E-banking at https://e-fibank.bg. It first happened on my Debian unstable box in the office. A few weeks later it also showed on my home PC running Debian testing.

My observations also showed that all the browsers stopped working at once. I'm using Iceweasel (Firefox) for the e-banking itself. Google chrome also showed some weird (unknown) SSL error.

This was enough for me to decide that the problem has been caused by recent package upgrade. I was pretty sure this was caused by the SSL libraries, especially with some recent Bugraq posts about SSL vulnerabilities.

So what I did was:

• remembered when was the last time I successfully used the e-banking
• checked which packages I upgraded recently (only one date showed after the last successful e-banking use - 2010-01-02 )
• looked at browser dependencies ( google-chrome-unstable deps were easier to use since iceweasel is deeply integrated within Debian with many chained dependencies )
• and put the results against each other

So the command I came up with was:

ls -rtl /var/lib/dpkg/info/*.list | \
    grep 2010-01-02 | awk '{print $8}' | \
    cut -d / -f 6 | \
    cut -d . -f 1 | \
    sort | \
    egrep \
       `dpkg -s google-chrome-unstable | \
          grep Depends | \
          tr ',' '\n' | \
          grep '^ ' | \
          awk '{print $1}' | \
          xargs echo | tr ' ' '|'`

So this showed two things only:

libfontconfig1
libnss3-1d

I was not familiar with libnss3 but looking at its package description(SSL related) was enough for me to blame it. So I've checked the aptitude logs:

# grep libnss /var/log/aptitude
[UPGRADE] libnss3-1d 3.12.4-1 -> 3.12.5-1

and have seen which was the older version I used. Then checked /var/cache/apt/archives and it was just sitting there waiting to be restored:

dpkg -i /var/cache/apt/archives/libnss3-1d_3.12.4-1_i386.deb

Then restarted Iceweasel and voila ..

I've then also checked the Debian bug reports to see if this has already been reported or was waiting for me to do that. This bug report showed up:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=561918

Hope this saves you some time ..