The currently available fix for Firefox doesn't work with ESR, but there's a temporary fix that works. At least, it's working for me:
Go to about:config and set xpinstall.signatures.required to false.
The Firefox folks say that a fix for ESR will be coming at some point, but at least this gets things working again in the short term.
It's not clear to me if the fixed ESR (when available) will require a new Firefox rpm to be created and installed or if it's something that will just show up by magic and start working or if any steps will have to be taken to enable it.
Am 04.05.2019 um 19:09 schrieb Frank Cox theatre@sasktel.net:
The currently available fix for Firefox doesn't work with ESR, but there's a temporary fix that works. At least, it's working for me:
Go to about:config and set xpinstall.signatures.required to false.
The Firefox folks say that a fix for ESR will be coming at some point, but at least this gets things working again in the short term.
It's not clear to me if the fixed ESR (when available) will require a new Firefox rpm to be created and installed or if it's something that will just show up by magic and start working or if any steps will have to be taken to enable it.
There (Mozilla's) certificate expired, that is the reason. IMHO ignoring signatures checks is not the way to go. It opens a (small) attack window.
-- LF
On Sat, 4 May 2019 19:20:02 +0200 Leon Fauster via CentOS wrote:
There (Mozilla's) certificate expired, that is the reason. IMHO ignoring signatures checks is not the way to go. It opens a (small) attack window.
I suppose you pick your poison.
Your other choices are to use a different web browser (how much do you trust Google Chrome?) or use Firefox without any add-ons and accept the security risks that come with malvertising and unknown bits of javascript running on random websites.
What disturbs me is that, regardless of intention, we see an embedded timebomb where after an arbitrary date your Firefox installation will stop working as expected.
Le 04/05/2019 à 19:09, Frank Cox a écrit :
The Firefox folks say that a fix for ESR will be coming at some point, but at least this gets things working again in the short term.
uBlock Origin has been disabled on all our machines here, and all Firefox installations switched from french to english.
Nice job, Mozilla.
:o(
Hello Frank,
On Sat, 4 May 2019 11:09:22 -0600 Frank Cox theatre@sasktel.net wrote:
The currently available fix for Firefox doesn't work with ESR, but there's a temporary fix that works. At least, it's working for me:
Go to about:config and set xpinstall.signatures.required to false.
[snip]
And extensions.langpacks.signatures.required for language packs.
Regards,
On 05/05/2019 22:21, wwp wrote:
Hello Frank,
On Sat, 4 May 2019 11:09:22 -0600 Frank Cox theatre@sasktel.net wrote:
The currently available fix for Firefox doesn't work with ESR, but there's a temporary fix that works. At least, it's working for me:
Go to about:config and set xpinstall.signatures.required to false.
[snip]
And extensions.langpacks.signatures.required for language packs.
Regards,
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Does anyone know what the latest on this is? Specifically can I reset the xpinstall.signatures.required? My machine is running C7 patched today.
-
Frank Cox -
J Martin Rushton -
Leon Fauster -
Nicolas Kovacs -
wwp