GNU logs - #38341, boring messages

Message sent to bug-gnuzilla@HIDDEN:

Subject: bug#38341: webauthn support?
Resent-From: Chris Marusich <cmmarusich@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnuzilla@HIDDEN
Resent-Date: Sat, 23 Nov 2019 06:15:05 +0000
Resent-Message-ID: <handler.38341.B.157448969312480 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Jack Hill <jackhill@HIDDEN>
Cc: mhw@HIDDEN, 38341 <at> debbugs.gnu.org
From: Chris Marusich <cmmarusich@HIDDEN>
References: <alpine.DEB.2.20.1910271056380.11560@HIDDEN>
 <87h83k4ha2.fsf@HIDDEN>
 <alpine.DEB.2.20.1911041741110.11560@HIDDEN>
 <87a78vpwah.fsf@HIDDEN>
Date: Fri, 22 Nov 2019 22:14:30 -0800
In-Reply-To: <87a78vpwah.fsf@HIDDEN> (Chris Marusich's message of "Sat, 16
 Nov 2019 09:26:30 -0800")
Message-ID: <87sgmfyv95.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha256; protocol="application/pgp-signature"
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Chris Marusich <cmmarusich@HIDDEN> writes:

> I have a non-Guix GNU/Linux machine with Firefox, on which this
> problem does not occur, and I am able to log in correctly using my
> token (in Firefox).  I will try building IceCat 68 from source
> manually on that distribution.

I have successfully built IceCat using the Guix preview source (guix
build -S icecat) on a foreign GNU/Linux distro.  Things I noticed:

=2D When IceCat 68 is built from source on this foreign distro (without
  using any software from Guix to do the build), the built IceCat 68
  works.  The "Unknown U2F Error" does not occur.  This means that the
  system is configured correctly to allow me to use my security token,
  and IceCat is built correctly to use it.

=2D However, on the same foreign distro, when I install IceCat 68 from
  Guix, it doesn't work.  I get an "Unknown U2F Error".

=2D Reminder: Firefox also works on this foreign distro.  The "Unknown U2F
  Error" does not occur.

This suggests a bug in the Guix IceCat 68 packaging, but not the IceCat
68 source built by Guix.  For example, perhaps the Guix package
definition for IceCat 68 lacks a required runtime dependency for this
use case.  I will see if I can figure it out.  I think I will look into
the configuration/build logs/logic to see if we're missing a dependency
that is required for webauthn, U2F, PKCS11, or some other hardware token
thing.  I also think it might be productive to experiment using strace
to see if I can determine any differences in what's going on between the
good case and the bad case.  If anyone has any advice about how to
determine what code is actually emitting the "Unknown U2F Error", that
would really help me narrow down the possibilities quite a bit.

=2D-=20
Chris

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=MsWA
-----END PGP SIGNATURE-----
--=-=-=--

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Chris Marusich <cmmarusich@HIDDEN>
Subject: bug#38341: Acknowledgement (webauthn support?)
Message-ID: <handler.38341.B.157448969312480.ack <at> debbugs.gnu.org>
References: <87sgmfyv95.fsf@HIDDEN>
X-Gnu-PR-Message: ack 38341
X-Gnu-PR-Package: gnuzilla
Reply-To: 38341 <at> debbugs.gnu.org
Date: Sat, 23 Nov 2019 06:15:05 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-gnuzilla@HIDDEN

If you wish to submit further information on this problem, please
send it to 38341 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
38341: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D38341
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-gnuzilla@HIDDEN:

Subject: bug#38341: webauthn support?
Resent-From: Jack Hill <jackhill@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-gnuzilla@HIDDEN
Resent-Date: Sat, 23 Nov 2019 16:11:02 +0000
Resent-Message-ID: <handler.38341.B.157452543021831 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Chris Marusich <cmmarusich@HIDDEN>
Cc: mhw@HIDDEN, 38341 <at> debbugs.gnu.org
Date: Sat, 23 Nov 2019 11:10:22 -0500 (EST)
From: Jack Hill <jackhill@HIDDEN>
In-Reply-To: <87sgmfyv95.fsf@HIDDEN>
Message-ID: <alpine.DEB.2.20.1911231102550.11560@HIDDEN>
References: <alpine.DEB.2.20.1910271056380.11560@HIDDEN>
 <87h83k4ha2.fsf@HIDDEN>
 <alpine.DEB.2.20.1911041741110.11560@HIDDEN>
 <87a78vpwah.fsf@HIDDEN> <87sgmfyv95.fsf@HIDDEN>
User-Agent: Alpine 2.20 (DEB 67 2015-01-07)
MIME-Version: 1.0
Content-Type: multipart/mixed; BOUNDARY="925712948-104048584-1574525422=:11560"
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--925712948-104048584-1574525422=:11560
Content-Type: text/plain; format=flowed; charset=UTF-8
Content-Transfer-Encoding: 8BIT

On Fri, 22 Nov 2019, Chris Marusich wrote:

> Chris Marusich <cmmarusich@HIDDEN> writes:
> I have successfully built IceCat using the Guix preview source (guix
> build -S icecat) on a foreign GNU/Linux distro.  Things I noticed:
>
> - When IceCat 68 is built from source on this foreign distro (without
>  using any software from Guix to do the build), the built IceCat 68
>  works.  The "Unknown U2F Error" does not occur.  This means that the
>  system is configured correctly to allow me to use my security token,
>  and IceCat is built correctly to use it.
>
> - However, on the same foreign distro, when I install IceCat 68 from
>  Guix, it doesn't work.  I get an "Unknown U2F Error".
>
> - Reminder: Firefox also works on this foreign distro.  The "Unknown U2F
>  Error" does not occur.

Great work. What dependencies did you have to provide on the non-Guix 
system?

[…]
> If anyone has any advice about how to determine what code is actually 
> emitting the "Unknown U2F Error", that would really help me narrow down 
> the possibilities quite a bit.

I don't know if this will be helpful, but as I understand webauthn, 
browsers provide a new JavaScript API for interacting with security 
tokens. I suspect that the error is being generated some code the browser 
calls a JavaScript program it has loaded calls that API. The text may not 
be in the IceCat source, but presented by the JavaScript program in 
response to and error in its API call. I was thinking, but haven't had the 
time, to set up my own webauthn-using app, so I can control the 
JavaScript.

That's my best guess at least, but it could be wrong, so don't let me lead 
you astray :)

Best,
Jack
--925712948-104048584-1574525422=:11560--

Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.