Dear Marco,
Le 22/12/2024 à 17:34, Marco d'Itri a écrit :
Package: nss-passwords
Version: 0.4-1
Severity: important
Looks like #731378 a lot...
Whatever I do, I always get this error:
Like in #731378, I cannot reproduce. You'll have to give more details:
- What kind of profile are you operating on? Firefox? Thunderbird? Which
versions?
- Did it work at some point in the past?
- Do you get the error with any request? Including '' (the quoted empty
string)?
- Can you reproduce with an fresh new profile?
- Which pinentry do you use?
Fatal error: exception Main.NSS_decrypt_failed("~dWx0cmFzZWNvbmRhcnk=", -8183,
0)
The "~" looks suspicious. Is the string the same as the one you give to
pwdecrypt?
From looking at nss sources, error -8183 corresponds to
SEC_ERROR_BAD_DER, i.e. "improperly formatted DER-encoded message".
If I check with strace I see many calls like:
newfstatat(AT_FDCWD, "/run/pcscd/pcscd.comm", {st_mode=S_IFSOCK|0666,
st_size=0, ...}, 0) = 0
Do you use some kind of security device (such as a hardware token)?
pwdecrypt from nss-tools can decrypt the passwords just fine.
Does pwdecrypt also perform the syscall you quoted?
Versions of packages nss-passwords depends on:
ii libc6 2.40-4
ii libnspr4 2:4.36-1
ii libnss3 2:3.106-1
ii libsqlite3-0 3.46.1-1
ii pinentry-curses [pinentry] 1.2.1-4+b1
ii pinentry-gnome3 [pinentry] 1.2.1-4+b1
Same versions here.
Cheers,
--
Stéphane
