GNU bug report logs - #38341
webauthn support?

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: gnuzilla; Reported by: Chris Marusich <cmmarusich@HIDDEN>; dated Sat, 23 Nov 2019 06:15:05 UTC; Maintainer for gnuzilla is bug-gnuzilla@HIDDEN.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 23 Nov 2019 16:10:30 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 23 11:10:30 2019
Received: from localhost ([127.0.0.1]:57648 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1iYXzR-0005g3-Tv
	for submit <at> debbugs.gnu.org; Sat, 23 Nov 2019 11:10:30 -0500
Received: from lists.gnu.org ([209.51.188.17]:51647)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <jackhill@HIDDEN>) id 1iYXzO-0005ft-9D
 for submit <at> debbugs.gnu.org; Sat, 23 Nov 2019 11:10:26 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10]:57524)
 by lists.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <jackhill@HIDDEN>) id 1iYXzN-0001j3-4o
 for bug-gnuzilla@HIDDEN; Sat, 23 Nov 2019 11:10:26 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50 autolearn=disabled
 version=3.3.2
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <jackhill@HIDDEN>) id 1iYXzM-00065y-3X
 for bug-gnuzilla@HIDDEN; Sat, 23 Nov 2019 11:10:25 -0500
Received: from minsky.hcoop.net ([104.248.1.95]:57974)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <jackhill@HIDDEN>)
 id 1iYXzL-00065f-W4
 for bug-gnuzilla@HIDDEN; Sat, 23 Nov 2019 11:10:24 -0500
Received: from marsh.hcoop.net ([45.55.52.66])
 by minsky.hcoop.net with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.89) (envelope-from <jackhill@HIDDEN>)
 id 1iYXzK-0001ma-SV; Sat, 23 Nov 2019 11:10:22 -0500
Date: Sat, 23 Nov 2019 11:10:22 -0500 (EST)
From: Jack Hill <jackhill@HIDDEN>
X-X-Sender: jackhill@HIDDEN
To: Chris Marusich <cmmarusich@HIDDEN>
Subject: Re: webauthn support?
In-Reply-To: <87sgmfyv95.fsf@HIDDEN>
Message-ID: <alpine.DEB.2.20.1911231102550.11560@HIDDEN>
References: <alpine.DEB.2.20.1910271056380.11560@HIDDEN>
 <87h83k4ha2.fsf@HIDDEN>
 <alpine.DEB.2.20.1911041741110.11560@HIDDEN>
 <87a78vpwah.fsf@HIDDEN> <87sgmfyv95.fsf@HIDDEN>
User-Agent: Alpine 2.20 (DEB 67 2015-01-07)
MIME-Version: 1.0
Content-Type: multipart/mixed; BOUNDARY="925712948-104048584-1574525422=:11560"
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
 [fuzzy]
X-Received-From: 104.248.1.95
X-Spam-Score: -1.4 (-)
X-Debbugs-Envelope-To: submit
Cc: Mark H Weaver <mhw@HIDDEN>, bug-gnuzilla@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.4 (--)

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--925712948-104048584-1574525422=:11560
Content-Type: text/plain; format=flowed; charset=UTF-8
Content-Transfer-Encoding: 8BIT

On Fri, 22 Nov 2019, Chris Marusich wrote:

> Chris Marusich <cmmarusich@HIDDEN> writes:
> I have successfully built IceCat using the Guix preview source (guix
> build -S icecat) on a foreign GNU/Linux distro.  Things I noticed:
>
> - When IceCat 68 is built from source on this foreign distro (without
>  using any software from Guix to do the build), the built IceCat 68
>  works.  The "Unknown U2F Error" does not occur.  This means that the
>  system is configured correctly to allow me to use my security token,
>  and IceCat is built correctly to use it.
>
> - However, on the same foreign distro, when I install IceCat 68 from
>  Guix, it doesn't work.  I get an "Unknown U2F Error".
>
> - Reminder: Firefox also works on this foreign distro.  The "Unknown U2F
>  Error" does not occur.

Great work. What dependencies did you have to provide on the non-Guix 
system?

[…]
> If anyone has any advice about how to determine what code is actually 
> emitting the "Unknown U2F Error", that would really help me narrow down 
> the possibilities quite a bit.

I don't know if this will be helpful, but as I understand webauthn, 
browsers provide a new JavaScript API for interacting with security 
tokens. I suspect that the error is being generated some code the browser 
calls a JavaScript program it has loaded calls that API. The text may not 
be in the IceCat source, but presented by the JavaScript program in 
response to and error in its API call. I was thinking, but haven't had the 
time, to set up my own webauthn-using app, so I can control the 
JavaScript.

That's my best guess at least, but it could be wrong, so don't let me lead 
you astray :)

Best,
Jack
--925712948-104048584-1574525422=:11560--




Information forwarded to bug-gnuzilla@HIDDEN:
bug#38341; Package gnuzilla. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 23 Nov 2019 06:14:53 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 23 01:14:52 2019
Received: from localhost ([127.0.0.1]:55779 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1iYOgy-0003F9-61
	for submit <at> debbugs.gnu.org; Sat, 23 Nov 2019 01:14:50 -0500
Received: from lists.gnu.org ([209.51.188.17]:35389)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cmmarusich@HIDDEN>) id 1iYOgq-0003Eu-Rv
 for submit <at> debbugs.gnu.org; Sat, 23 Nov 2019 01:14:41 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10]:56185)
 by lists.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <cmmarusich@HIDDEN>) id 1iYOgp-0006Kf-MQ
 for bug-gnuzilla@HIDDEN; Sat, 23 Nov 2019 01:14:40 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_20,FREEMAIL_FROM
 autolearn=disabled version=3.3.2
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <cmmarusich@HIDDEN>) id 1iYOgo-0007UR-Ik
 for bug-gnuzilla@HIDDEN; Sat, 23 Nov 2019 01:14:39 -0500
Received: from mail-pg1-x52e.google.com ([2607:f8b0:4864:20::52e]:46366)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
 (Exim 4.71) (envelope-from <cmmarusich@HIDDEN>)
 id 1iYOgo-0007TF-B0
 for bug-gnuzilla@HIDDEN; Sat, 23 Nov 2019 01:14:38 -0500
Received: by mail-pg1-x52e.google.com with SMTP id r18so4461885pgu.13
 for <bug-gnuzilla@HIDDEN>; Fri, 22 Nov 2019 22:14:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=from:to:cc:subject:references:date:in-reply-to:message-id
 :user-agent:mime-version;
 bh=6sPXk4rjcGB/G/IOLP/ThkTp/mQt9swuBELdJnZY91M=;
 b=YOi1MrpAxehuWEPH61y0Pj8ukrnb6z8OxwNnlCsKFX13avjMVipoW69w9cc6EMpf8m
 9XYtxB/Sy4iQznDAHa2qIPrE+FhrzIyhloW5HuVy2xjV9Ey/qpScyvEqflihIk1p+z8a
 elnMrvXc3tb2DxgOzMzeY4XjCY6A0vqJmEW/+XLmjSmFeehrONHGl1RhJMr2quHAkulK
 wy+xweCpCy9q1vuvWYoWids1RuXvm2s+z+unrntYybNGnLtpnpP4fQtdrsRnlAhw1kEE
 OQNyFNMHEKErtrVMyOmw5TYJCqj/cTur+/BirT07NRdlDsQ/DF+AYS6Q5PV9kGmnxDg+
 RRqQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to
 :message-id:user-agent:mime-version;
 bh=6sPXk4rjcGB/G/IOLP/ThkTp/mQt9swuBELdJnZY91M=;
 b=co2epQNjzOvWrhsaf72Um+WUy+y0kSR8j5ak/kx685u2HVt1Z/zM6rvFkeE6yMBSIp
 rwMmJeBK1qhJt/Me/wsQJD/8R+qtQzw13WZRGe2mgeKRRFtuWpJ/kiAEMOmWgG03XbUN
 F+MqBIhrpJlL6DQHEj8pdNS69vfzVUMN/0l1c7g12pOB4rbFQ2g1QBxJeh5rfjqMvxox
 xU6r5AmNeoy6lJPUHTNf5xsi1RhmUsbfflv0tXyZ4AU2/DqP0hNthzZ0yW7yikWDlUoj
 uNPV42NlU8vYzIDaSCx7QyObIJCXhI73Q1qPbSgyLW3QA9fnU6/10sOSj5jstkKr4dUj
 DJ+g==
X-Gm-Message-State: APjAAAXGa+G1C7RdQVBhRdKCzOL8r5SVjJy1NEI3kAn24IvdEnPNLu7q
 u8aGwR8p9LxIwoWfXQfcjXZWHyHf
X-Google-Smtp-Source: APXvYqy88KhvGQLgUyqDwlH+/G6SKu27JpIDi8wZRZezp1GHNR23PqhyrG5qrJsosAAdLB1IjY+KdQ==
X-Received: by 2002:a63:4441:: with SMTP id t1mr19671606pgk.179.1574489676239; 
 Fri, 22 Nov 2019 22:14:36 -0800 (PST)
Received: from garuda.local ([2601:601:9d80:25b2:28ff:ed79:ffa:afc1])
 by smtp.gmail.com with ESMTPSA id j20sm9267103pff.182.2019.11.22.22.14.33
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Fri, 22 Nov 2019 22:14:34 -0800 (PST)
From: Chris Marusich <cmmarusich@HIDDEN>
To: Jack Hill <jackhill@HIDDEN>
Subject: Re: webauthn support?
References: <alpine.DEB.2.20.1910271056380.11560@HIDDEN>
 <87h83k4ha2.fsf@HIDDEN>
 <alpine.DEB.2.20.1911041741110.11560@HIDDEN>
 <87a78vpwah.fsf@HIDDEN>
Date: Fri, 22 Nov 2019 22:14:30 -0800
In-Reply-To: <87a78vpwah.fsf@HIDDEN> (Chris Marusich's message of "Sat, 16
 Nov 2019 09:26:30 -0800")
Message-ID: <87sgmfyv95.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha256; protocol="application/pgp-signature"
X-detected-operating-system: by eggs.gnu.org: Genre and OS details not
 recognized.
X-Received-From: 2607:f8b0:4864:20::52e
X-Spam-Score: -1.3 (-)
X-Debbugs-Envelope-To: submit
Cc: Mark H Weaver <mhw@HIDDEN>, bug-gnuzilla@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Chris Marusich <cmmarusich@HIDDEN> writes:

> I have a non-Guix GNU/Linux machine with Firefox, on which this
> problem does not occur, and I am able to log in correctly using my
> token (in Firefox).  I will try building IceCat 68 from source
> manually on that distribution.

I have successfully built IceCat using the Guix preview source (guix
build -S icecat) on a foreign GNU/Linux distro.  Things I noticed:

=2D When IceCat 68 is built from source on this foreign distro (without
  using any software from Guix to do the build), the built IceCat 68
  works.  The "Unknown U2F Error" does not occur.  This means that the
  system is configured correctly to allow me to use my security token,
  and IceCat is built correctly to use it.

=2D However, on the same foreign distro, when I install IceCat 68 from
  Guix, it doesn't work.  I get an "Unknown U2F Error".

=2D Reminder: Firefox also works on this foreign distro.  The "Unknown U2F
  Error" does not occur.

This suggests a bug in the Guix IceCat 68 packaging, but not the IceCat
68 source built by Guix.  For example, perhaps the Guix package
definition for IceCat 68 lacks a required runtime dependency for this
use case.  I will see if I can figure it out.  I think I will look into
the configuration/build logs/logic to see if we're missing a dependency
that is required for webauthn, U2F, PKCS11, or some other hardware token
thing.  I also think it might be productive to experiment using strace
to see if I can determine any differences in what's going on between the
good case and the bad case.  If anyone has any advice about how to
determine what code is actually emitting the "Unknown U2F Error", that
would really help me narrow down the possibilities quite a bit.

=2D-=20
Chris

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=MsWA
-----END PGP SIGNATURE-----
--=-=-=--




Acknowledgement sent to Chris Marusich <cmmarusich@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-gnuzilla@HIDDEN. Full text available.
Report forwarded to bug-gnuzilla@HIDDEN:
bug#38341; Package gnuzilla. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.