[GH-ISSUE #896] Firefox doesn't accept SSL certificates anymore #607

Closed
opened 2026-05-05 06:16:09 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @curiosity-seeker on GitHub (Nov 6, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/896

Today on my Fedora system I got Firefox 49.0.2 and the newest Firejail version from the heikoada-firejail copr. After starting Firefox it would no longer accept ANY SSL certificates. The same happened in Thunderbird 45.4.0 - obviously because firefox.profile is included in its profile.

Only after commenting the private-etc line in firefox.profile everything worked again as expected. So something has changed - presumably in Firejail, as there was no new Thunderbird version, and Thunderbird should not be affected by changes in Firefox itself.

If I'm not mistaken the private-etc line hasn't changed lately so it must be caused by something else.

EDIT: I should have mentioned that Firefox and Thunderbird started un-sandboxed didn't have any problems.

Originally created by @curiosity-seeker on GitHub (Nov 6, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/896 Today on my Fedora system I got Firefox 49.0.2 and the newest Firejail version from the heikoada-firejail copr. After starting Firefox it would no longer accept **ANY** SSL certificates. The same happened in Thunderbird 45.4.0 - obviously because firefox.profile is included in its profile. Only after commenting the `private-etc` line in firefox.profile everything worked again as expected. So something has changed - presumably in Firejail, as there was no new Thunderbird version, and Thunderbird should not be affected by changes in Firefox itself. If I'm not mistaken the `private-etc` line hasn't changed lately so it must be caused by something else. EDIT: I should have mentioned that Firefox and Thunderbird started un-sandboxed didn't have any problems.
gitea-mirror 2026-05-05 06:16:09 -06:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@curiosity-seeker commented on GitHub (Nov 6, 2016):

It seems that I found the culprit: alternatives is missing in the private-etc line. After adding it all is well.

The funny thing is that I have such an entry in my individual firefox.profile in ~/.config/firejail with /etc/firejail/firefox.profile included. So far I had no problems - doesn't it take precedence over the private-etc line in /etc/firejail/firefox.profile anymore?

<!-- gh-comment-id:258699032 --> @curiosity-seeker commented on GitHub (Nov 6, 2016): It seems that I found the culprit: `alternatives` is missing in the `private-etc` line. After adding it all is well. The funny thing is that I have such an entry in my individual firefox.profile in ~/.config/firejail with /etc/firejail/firefox.profile included. So far I had no problems - doesn't it take precedence over the `private-etc` line in /etc/firejail/firefox.profile anymore?
Author
Owner

@netblue30 commented on GitHub (Nov 6, 2016):

I took out private-etc from the profile, thanks.

<!-- gh-comment-id:258699043 --> @netblue30 commented on GitHub (Nov 6, 2016): I took out private-etc from the profile, thanks.
Author
Owner

@curiosity-seeker commented on GitHub (Nov 6, 2016):

Yes, but how can taking out private-bin cause this problem?

<!-- gh-comment-id:258699102 --> @curiosity-seeker commented on GitHub (Nov 6, 2016): Yes, but how can taking out private-bin cause this problem?
Author
Owner

@netblue30 commented on GitHub (Nov 6, 2016):

Sorry, I meant private-etc.

<!-- gh-comment-id:258700818 --> @netblue30 commented on GitHub (Nov 6, 2016): Sorry, I meant private-etc.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#607
No description provided.