Package: iceweasel Version: 24.4.0esr-1~deb7u2 Severity: normal File: /usr/bin/iceweasel
Dear Maintainer, trying to load a single encrypted websites, such as https://bugs.debian.org now takes more than 30 minutes during which (according to tcpdump, ifttop) firefox keeps talking to ocsp.commodoca.com, downloading over 70 Mbyte in the process. No, my internet connection is not the bottleneck here (> 10mbit). Seems to depend on certifcate authority, I was only able to reproduce this particlar problem for websites that use Comodo's CA. This may be result of the heartbleed bug causing lots of certificates to be revoked? Unfortunately it makes HTTPS (or OCSP) completely unusable. Once the site is loaded, further operation is nominal, but the delay occurs again when Iceweasel is restarted (note: I have disabled harddisk cache for privacy reasons, don't know whether configuring a sufficiently large cache would help). Update: It gets worse: during my last test Iceweasel crashed after 78 Megabyte had been downloaded from ocsp.comodoca.com, ca 45 minutes after initiating the loading of https://bugs.debian.org cheers, David -- Package-specific info:
-- Extensions information
Name: 4or6
Location: ${PROFILE_EXTENSIONS}/[email protected]
Status: enabled
Name: Adblock Plus
Location:
/usr/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
Package: xul-ext-adblock-plus
Status: enabled
Name: CipherFox
Location: ${PROFILE_EXTENSIONS}/[email protected]
Status: user-disabled
Name: Default theme
Location:
/usr/lib/iceweasel/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
Package: iceweasel
Status: enabled
Name: Facebook Disconnect
Location: ${PROFILE_EXTENSIONS}/[email protected]
Status: enabled
Name: Flashblock
Location: ${PROFILE_EXTENSIONS}/{3d7eb24f-2740-49df-8937-200b1cc08f8a}
Status: enabled
Name: Flash Video Downloader - Full HD Download
Location: ${PROFILE_EXTENSIONS}/[email protected]
Status: user-disabled
Name: Flash Video Resources Downloader
Location: ${PROFILE_EXTENSIONS}/[email protected]
Status: app-disabled
Name: Google Disconnect
Location: ${PROFILE_EXTENSIONS}/[email protected]
Status: enabled
Name: Greasemonkey
Location:
/usr/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
Package: xul-ext-greasemonkey
Status: user-disabled
Name: HTTPS-Everywhere
Location: ${PROFILE_EXTENSIONS}/[email protected]
Status: user-disabled
Name: lori (Life-of-request info)
Location: ${PROFILE_EXTENSIONS}/{6dfc4f52-26f0-4e5f-89c7-31d6de480db9}
Status: user-disabled
Name: NoScript
Location:
/usr/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/{73a6fe31-595d-460b-a920-fcc0f8843232}
Package: xul-ext-noscript
Status: enabled
Name: NoSquint
Location: ${PROFILE_EXTENSIONS}/[email protected]
Status: enabled
Name: Twitter Disconnect
Location: ${PROFILE_EXTENSIONS}/[email protected]
Status: enabled
Name: User Agent Switcher
Location: ${PROFILE_EXTENSIONS}/{e968fc70-8f95-4ab9-9e79-304de2a71ee1}
Status: user-disabled
-- Plugins information
Name: DivX Web Player
Location: /usr/lib/mozilla/plugins/libtotem-mully-plugin.so
Package: totem-mozilla
Status: enabled
Name: Gnome Shell Integration
Location: /usr/lib/mozilla/plugins/libgnome-shell-browser-plugin.so
Package: gnome-shell
Status: enabled
Name: iTunes Application Detector
Location: /usr/lib/mozilla/plugins/librhythmbox-itms-detection-plugin.so
Package: rhythmbox-plugins
Status: enabled
Name: Java(TM) Plug-in 1.6.0_26
Location: /usr/lib/jvm/java-6-sun-1.6.0.26/jre/lib/amd64/libnpjp2.so
Package: sun-java6-bin
Status: disabled
Name: MozPlugger 1.14.1 handles QuickTime and Windows Media Player Plugin
(1.14.1)
Location: /usr/lib/mozilla/plugins/mozplugger.so
Package: mozplugger
Status: enabled
Name: QuickTime Plug-in 7.6.6
Location: /usr/lib/mozilla/plugins/libtotem-narrowspace-plugin.so
Package: totem-mozilla
Status: enabled
Name: Shockwave Flash
Location: /usr/lib/flashplugin-nonfree/libflashplayer.so
Status: enabled
Name: VLC Multimedia Plugin (compatible Totem 3.0.1)
Location: /usr/lib/mozilla/plugins/libtotem-cone-plugin.so
Package: totem-mozilla
Status: enabled
Name: Windows Media Player Plug-in 10 (compatible; Totem)
Location: /usr/lib/mozilla/plugins/libtotem-gmp-plugin.so
Package: totem-mozilla
Status: enabled
-- Addons package information
ii gnome-shell 3.4.2-7+deb7 amd64 graphical shell for the GNOME des
ii iceweasel 24.4.0esr-1~ amd64 Web browser based on Firefox
ii mozplugger 1.14.1-1 amd64 Plugin allowing external viewers
ii rhythmbox-plug 2.97-2.1 amd64 plugins for rhythmbox music playe
ii sun-java6-bin 6.26-0squeez amd64 Sun Java(TM) Runtime Environment
ii totem-mozilla 3.0.1-8 amd64 Totem Mozilla plugin
ii xul-ext-adbloc 2.1-1+deb7u1 all Advertisement blocking extension
ii xul-ext-grease 0.9.20-1 all extension that enables customizat
ii xul-ext-noscri 2.1.4-1 all Javascript/plugins permissions ma
*** Please consider answering these questions, where appropriate ***
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these lines ***
-- System Information:
Debian Release: 7.4
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages iceweasel depends on:
ii debianutils 4.3.2
ii fontconfig 2.9.0-7.1
ii libc6 2.13-38+deb7u1
ii libgdk-pixbuf2.0-0 2.26.1-1
ii libglib2.0-0 2.33.12+really2.32.4-5
ii libgtk2.0-0 2.24.10-2
ii libsqlite3-0 3.7.13-1+deb7u1
ii libstdc++6 4.7.2-5
ii procps 1:3.3.3-3
ii xulrunner-24.0 24.4.0esr-1~deb7u2
iceweasel recommends no packages.
Versions of packages iceweasel suggests:
pn fonts-mathjax <none>
ii fonts-oflb-asana-math 000.907-4
ii fonts-stix [otf-stix] 1.1.0-1
ii libgssapi-krb5-2 1.10.1+dfsg-5+deb7u1
ii mozplugger 1.14.1-1
Versions of packages xulrunner-24.0 depends on:
ii libasound2 1.0.25-4
ii libatk1.0-0 2.4.0-2
ii libbz2-1.0 1.0.6-4
ii libc6 2.13-38+deb7u1
ii libcairo2 1.12.2-3
ii libdbus-1-3 1.6.8-1+deb7u1
ii libdbus-glib-1-2 0.100.2-1
ii libevent-2.0-5 2.0.19-stable-3
ii libfontconfig1 2.9.0-7.1
ii libfreetype6 2.4.9-1.1
ii libgcc1 1:4.7.2-5
ii libgdk-pixbuf2.0-0 2.26.1-1
ii libglib2.0-0 2.33.12+really2.32.4-5
ii libgtk2.0-0 2.24.10-2
ii libhunspell-1.3-0 1.3.2-4
ii libmozjs24d 24.4.0esr-1~deb7u2
ii libpango1.0-0 1.30.0-1
ii libstartup-notification0 0.12-1
ii libstdc++6 4.7.2-5
ii libvpx1 1.1.0-1
ii libx11-6 2:1.5.0-1+deb7u1
ii libxext6 2:1.3.1-2+deb7u1
ii libxrender1 1:0.9.7-1+deb7u1
ii libxt6 1:1.1.3-1+deb7u1
ii zlib1g 1:1.2.7.dfsg-13
Versions of packages xulrunner-24.0 suggests:
ii libcanberra0 0.28-6
ii libgnomeui-0 2.24.5-2
-- no debconf information
--
GnuPG public key: http://dvdkhlng.users.sourceforge.net/dk2.gpg
Fingerprint: B63B 6AF2 4EEB F033 46F7 7F1D 935E 6F08 E457 205F
pgpzLa8oAsIbx.pgp
Description: PGP signature
