I have also experienced the same problem on ubuntu/clang - probably the same as yours. I downloaded a debug build from ftp.mozilla.org in order to test this with our "official debug builds", which are built with gcc:
Build platform target x86_64-unknown-linux-gnu Build tools Compiler Version Compiler flags /usr/bin/ccache /tools/gcc-4.5-0moz3/bin/gcc gcc version 4.5.2 (GCC) -pedantic -Wall -Wpointer-arith -Wdeclaration-after-statement -Werror=return-type -Wtype-limits -Wempty-body -Wno-unused -Wno-overlength-strings -Wcast-align -Wno-long-long -fno-strict-aliasing -ffunction-sections -fdata-sections -pthread -pipe -DDEBUG -D_DEBUG -DTRACING -g -Os -freorder-blocks -finline-limit=50 -fno-omit-frame-pointer /usr/bin/ccache /tools/gcc-4.5-0moz3/bin/g++ gcc version 4.5.2 (GCC) -pedantic -Wall -Wpointer-arith -Woverloaded-virtual -Werror=return-type -Wtype-limits -Wempty-body -Wno-ctor-dtor-privacy -Wno-overlength-strings -Wno-invalid-offsetof -Wno-variadic-macros -Wcast-align -Wno-long-long -fno-exceptions -fno-strict-aliasing -fno-rtti -ffunction-sections -fdata-sections -fno-exceptions -std=gnu++0x -pthread -pipe -DDEBUG -D_DEBUG -DTRACING -g -Os -freorder-blocks -finline-limit=50 -fno-omit-frame-pointer Configure arguments --enable-debug --enable-trace-malloc --enable-signmar --enable-stdcxx-compat --with-ccache=/usr/bin/ccache --enable-warnings-as-errors Naturally, these work fine. I wish I knew what was the problem here too. Cheers, David ----- Original Message ----- From: "Mihai Sucan" <mihai.su...@gmail.com> To: "Brian Smith" <bsm...@mozilla.com> Cc: "mozilla-dev-platform" <dev-platform@lists.mozilla.org> Sent: Wednesday, November 21, 2012 5:54:13 AM Subject: Re: Firefox debug build and https: sec_error_bad_signature Thank you for your reply. On Wed, 21 Nov 2012 00:20:37 +0200, Brian Smith <bsm...@mozilla.com> wrote: > Mihai Sucan wrote: >> Any https page I try to load shows: >> >> Peer's certificate has an invalid signature. >> Error code: sec_error_bad_signature >> >> I can't even run mochitests that load https pages. > > 1. Are you using --use-system-nss and/or --use-system-nspr? This is my mozconfig for dbg builds: https://github.com/mihaisucan/mozilla-work/blob/master/mozconfig/dbg I don't know what ./configure does. How can I check? > 1.1: Are you trying to build 64-bit Firefox? I remember that 64-bit NSS > doesn't always work. I'm on Ubuntu amd64. about:buildconfig: about:buildconfig Target: x86_64-unknown-linux-gnu Compiler: /usr/bin/ccache clang -Qunused-arguments -fcolor-diagnostics -w Flags: -Qunused-arguments -pedantic -Qunused-arguments -Wall -Wpointer-arith -Wdeclaration-after-statement -Werror=return-type -Wtype-limits -Wempty-body -Wno-unused -Wno-overlength-strings -Wno-long-long -fno-strict-aliasing -ffunction-sections -fdata-sections -pthread -pipe -DDEBUG -D_DEBUG -DTRACING -g -fno-omit-frame-pointer Compiler: /usr/bin/ccache clang++ -Qunused-arguments -fcolor-diagnostics -w Flags: -Qunused-arguments -pedantic -Qunused-arguments -Wall -Wpointer-arith -Woverloaded-virtual -Werror=return-type -Wtype-limits -Wempty-body -Wno-ctor-dtor-privacy -Wno-overlength-strings -Wno-invalid-offsetof -Wno-variadic-macros -Wno-c++0x-extensions -Wno-extended-offsetof -Wno-unknown-warning-option -Wno-return-type-c-linkage -Wno-mismatched-tags -Wno-long-long -fno-exceptions -fno-strict-aliasing -fno-rtti -ffunction-sections -fdata-sections -fno-exceptions -std=gnu++0x -pthread -pipe -DDEBUG -D_DEBUG -DTRACING -g -fno-omit-frame-pointer -Qunused-arguments Configure arguments: --enable-application=browser --disable-optimize --enable-debug --enable-tests --enable-chrome-format=symlink --with-ccache $ cclang -v Ubuntu clang version 3.0-6ubuntu3 (tags/RELEASE_30/final) (based on LLVM 3.0) Target: x86_64-pc-linux-gnu Thread model: posix $ file dist/bin/firefox-bin dist/bin/firefox-bin: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.24 $ ccache -V ccache version 3.1.6 > 2. What compiler are you building with? See above. > 3. Do things work with a new profile? Afaik, running mochitests always creates a new temporary profile and I have problems running them. I just tried with a new profile on my own (as a user): same problem. Here's what I get when I load google.com (something I haven't seen before): A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot. Error code: sec_error_pkcs11_device_error. > 4. Do thinks work in safe mode and/or with all addons disabled? No addons installed - new profile. Tried -safe-mode as well, no luck. > 5. File a bug, CC bsm...@mozilla.com, and attach one of the certificates > to the bug. Which certificate should I attach? I have this problem with all https servers. :( Thanks again for your detailed questions. I hope my answers help us go towards a fix. Best regards, Mihai _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
