[GH-ISSUE #3200] firefox: keepassxc browser addon: Key exchange not successful

gitea-mirror commented

2026-05-05 08:40:17 -06:00

Owner

Originally created by @ericschdt on GitHub (Feb 3, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3200

If I start the Firefox with Firejail and try to connect the KeepassXC browser addon to the KeepassXC app, the addon says "key exchange unsuccessfull".

If however the Firefox is started outside of Firejail, everything is fine.

Any idea?

Additional notes

The KDEconnect browser addon runs fine with default settings + the ignore nodebus "trick".

System

FF 72.0.2
firejail 0.9.62
KeePassXC 2.5.2
KeepassXC Browser Addon 1.5.4
Archlinux

Originally created by @ericschdt on GitHub (Feb 3, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3200 If I start the Firefox with Firejail and try to connect the KeepassXC browser addon to the KeepassXC app, the addon says "key exchange unsuccessfull". If however the Firefox is started outside of Firejail, everything is fine. Any idea? #### Additional notes The KDEconnect browser addon runs fine with default settings + the ignore nodebus "trick". #### System FF 72.0.2 firejail 0.9.62 KeePassXC 2.5.2 KeepassXC Browser Addon 1.5.4 Archlinux

gitea-mirror closed this issue

2026-05-05 08:40:18 -06:00

gitea-mirror commented

2026-05-05 08:40:20 -06:00

Author

Owner

@ghost commented on GitHub (Feb 3, 2020):

@ericschdt I've installed keepassxc on Arch together with its browser addon and did some testing. With the firejail profiles from current git (which is what I use daily) I could reproduce. Editing the firejail options didn't do much in this context. And then I noticed this:

$ cat ~/.mozilla/native-messaging-hosts/org.keepassxc.keepassxc_browser.json
{
    "allowed_extensions": [
        "keepassxc-browser@keepassxc.org"
    ],
    "description": "KeePassXC integration with native messaging support",
    "name": "org.keepassxc.keepassxc_browser",
    "path": "/usr/local/bin/keepassxc-proxy",
    "type": "stdio"
}

On my system /usr/local/bin/keepassxc-proxy does not exist, /usr/bin/keepassxc-proxy does. As soon as I edited in the correct path and restarted Firefox the problem was gone. This was my first time ever using KeepassXC, so this might be beginners luck :)

@ghost commented on GitHub (Feb 3, 2020): @ericschdt I've installed keepassxc on Arch together with its browser addon and did some testing. With the firejail profiles from current git (which is what I use daily) I could reproduce. Editing the firejail options didn't do much in this context. And then I noticed this: ``` $ cat ~/.mozilla/native-messaging-hosts/org.keepassxc.keepassxc_browser.json { "allowed_extensions": [ "keepassxc-browser@keepassxc.org" ], "description": "KeePassXC integration with native messaging support", "name": "org.keepassxc.keepassxc_browser", "path": "/usr/local/bin/keepassxc-proxy", "type": "stdio" } ``` On my system /usr/local/bin/keepassxc-proxy does not exist, /usr/bin/keepassxc-proxy does. As soon as I edited in the correct path and restarted Firefox the problem was gone. This was my first time ever using KeepassXC, so this might be beginners luck :)

gitea-mirror commented

2026-05-05 08:40:21 -06:00

Author

Owner

@ericschdt commented on GitHub (Feb 4, 2020):

With the firejail profiles from current git (which is what I use daily) I could reproduce.

That's good, however unfortunately

On my system /usr/local/bin/keepassxc-proxy does not exist, /usr/bin/keepassxc-proxy does.

both exist on my system:

-rwxr-xr-x 1 root root 30624  4. Jan 23:00 /usr/bin/keepassxc-proxy*
lrwxrwxrwx 1 root root 17  2. Feb 15:03 /usr/local/bin/keepassxc-proxy -> /usr/bin/firejail*

and

 diff ~/.mozilla/native-messaging-hosts/org.keepassxc.keepassxc_browser.json
{
    "allowed_extensions": [
        "keepassxc-browser@keepassxc.org"
    ],
    "description": "KeePassXC integration with native messaging support",
    "name": "org.keepassxc.keepassxc_browser",
-   "path": "/usr/bin/keepassxc-proxy",
+   "path": "/usr/local/bin/keepassxc-proxy",
    "type": "stdio"
}

did not help me. :-(

I also found out that the KeepassXC browser addon always says "unsuccessful key exchange", no matter if KeepassXC is running and/or unlocked in the background.

This was my first time ever using KeepassXC, so this might be beginners luck :)

Definitely!

@ericschdt commented on GitHub (Feb 4, 2020): > With the firejail profiles from current git (which is what I use daily) I could reproduce. That's good, however unfortunately > On my system /usr/local/bin/keepassxc-proxy does not exist, /usr/bin/keepassxc-proxy does. both exist on my system: ``` -rwxr-xr-x 1 root root 30624 4. Jan 23:00 /usr/bin/keepassxc-proxy* lrwxrwxrwx 1 root root 17 2. Feb 15:03 /usr/local/bin/keepassxc-proxy -> /usr/bin/firejail* ``` and ``` diff ~/.mozilla/native-messaging-hosts/org.keepassxc.keepassxc_browser.json { "allowed_extensions": [ "keepassxc-browser@keepassxc.org" ], "description": "KeePassXC integration with native messaging support", "name": "org.keepassxc.keepassxc_browser", - "path": "/usr/bin/keepassxc-proxy", + "path": "/usr/local/bin/keepassxc-proxy", "type": "stdio" } ``` did not help me. :-( I also found out that the KeepassXC browser addon always says "unsuccessful key exchange", no matter if KeepassXC is running and/or unlocked in the background. > This was my first time ever using KeepassXC, so this might be beginners luck :) Definitely!

gitea-mirror commented

2026-05-05 08:40:22 -06:00

Author

Owner

@ericschdt commented on GitHub (Feb 4, 2020):

With the firejail profiles from current git (which is what I use daily) I could reproduce.

I replaced the profiles with their git counterparts and now it works! :)

@ericschdt commented on GitHub (Feb 4, 2020): > With the firejail profiles from **current git** (which is what I use daily) I could reproduce. I replaced the profiles with their git counterparts and now it works! :)

gitea-mirror commented

2026-05-05 08:40:22 -06:00

Author

Owner

@ericschdt commented on GitHub (Feb 5, 2020):

Okay, now it no longer works. I don't know what's happening and I will have to investigate more later.

@ericschdt commented on GitHub (Feb 5, 2020): Okay, now it no longer works. I don't know what's happening and I will have to investigate more later.

gitea-mirror commented

2026-05-05 08:40:23 -06:00

Author

Owner

@ghost commented on GitHub (Feb 6, 2020):

@ericschdt Feel free to re-open this if after additional investigation the issue persists.

@ghost commented on GitHub (Feb 6, 2020): @ericschdt Feel free to re-open this if after additional investigation the issue persists.

gitea-mirror commented

2026-05-05 08:40:24 -06:00

Author

Owner

@ericschdt commented on GitHub (Feb 9, 2020):

Feel free to re-open this if after additional investigation the issue persists.

I could resolve the issue by adding keepassxc-proxy to the private-bin line in the firefox.profile file:

private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which,keepassxc-proxy

Alternatively one could have uncommented
include firefox-common-addons.inc in firefox-common.profile
AND
private-bin keepassxc-proxy in firefox-common-addons.inc

@ericschdt commented on GitHub (Feb 9, 2020): > Feel free to re-open this if after additional investigation the issue persists. I could resolve the issue by adding `keepassxc-proxy` to the private-bin line in the `firefox.profile` file: ``` private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which,keepassxc-proxy ``` Alternatively one could have uncommented `include firefox-common-addons.inc` in `firefox-common.profile` AND `private-bin keepassxc-proxy` in `firefox-common-addons.inc`

gitea-mirror commented

2026-05-05 08:40:25 -06:00

Author

Owner

@saddy001 commented on GitHub (Oct 17, 2021):

For me this worked:

cat ~/.config/firejail/firefox.profile
private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which,keepassxc-proxy
whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer
include /etc/firejail/firefox.profile

Then restart Firefox. Also see #3952

@saddy001 commented on GitHub (Oct 17, 2021): For me this worked: ``` cat ~/.config/firejail/firefox.profile private-bin bash,dbus-launch,dbus-send,env,firefox,sh,which,keepassxc-proxy whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer include /etc/firejail/firefox.profile ``` Then restart Firefox. Also see #3952

gitea-mirror commented

2026-05-05 08:40:25 -06:00

Author

Owner

@rusty-snake commented on GitHub (Oct 17, 2021):

Also see https://github.com/keepassxreboot/keepassxc/discussions/6741#discussioncomment-1154242.

@rusty-snake commented on GitHub (Oct 17, 2021): Also see https://github.com/keepassxreboot/keepassxc/discussions/6741#discussioncomment-1154242.

gitea-mirror referenced this issue

2026-05-05 10:14:38 -06:00

[PR #1999] [MERGED] Create tor-browser-en directory, add missing bin programs #4147

Rows
Columns

[GH-ISSUE #3200] firefox: keepassxc browser addon: Key exchange not successful #1999

Additional notes

System