qutebrowser fails with a certificate error in F28 - Seems that it is looking for linux-vdso.so.1 and not finding it in libnssckbi.so

[stan]

So, I'm trying qutebrowser from the Fedora package, and it starts, but
can't reach the web. It has this error that it is unable to verify the
certificate, not only for this website, but for any website I try.

[1853:1870:0509/180934.705609:ERROR:cert_verify_proc_nss.cc(902)] CERT_PKIXVerifyCert for
duckduckgo.com failed err=-5992

A little searching and messing about, and /usr/lib64/libnssckbi
follows some weird redirections twice, and its dependency on
linux-vdso.so.1. doesn't seem to be found.  But it seems that vdso
is automatically mapped into all executables, so shouldn't be an issue.

Everything else seems to be installed for certificates to work, and
they work fine in firefox. Can anyone shed light on a possible solution?

[Ed Greshko]

On 05/10/18 09:41, stan wrote:
>  So, I'm trying qutebrowser from the Fedora package, and it
> starts, but
>  can't reach the web. It has this error that it is unable to verify the
>  certificate, not only for this website, but for any website I try.
>
>  [1853:1870:0509/180934.705609:ERROR:cert_verify_proc_nss.cc(902)] CERT_PKIXVerifyCert for
> duckduckgo.com failed err=-5992
>
>  A little searching and messing about, and /usr/lib64/libnssckbi
>  follows some weird redirections twice, and its dependency on
>  linux-vdso.so.1. doesn't seem to be found.  But it seems that vdso
>  is automatically mapped into all executables, so shouldn't be an issue.
>
>  Everything else seems to be installed for certificates to work, and
>  they work fine in firefox. Can anyone shed light on a possible solution? 

Just FYI.  Sorry, I can't shed any light on this since I just installed qutebrowser
on a fully updated F28/KDE system and it starts and runs just fine.

-- 
Conjecture is just a conclusion based on incomplete information. It isn't a fact.

[stan]

On Thu, 10 May 2018 11:11:13 +0800
Ed Greshko <ed.greshko(a)greshko.com&gt; wrote:

>  Just FYI.  Sorry, I can't shed any light on this since I just
>  installed qutebrowser on a fully updated F28/KDE system and it starts
>  and runs just fine. 
Actually, that does shed some light.  qutebrowser uses qt5 with
qtwebengine and pyqt5.  I have all desktops installed, since I use
applications from other desktops (I usually use lxde), but obviously not
everything needed for qutebrowser to work.  So, I can boot into kde and
see if it works there to determine if it is lxde at fault, or if my kde
install isn't complete enough.

Thanks.

[stan]

On Thu, 10 May 2018 08:40:51 -0700
stan <stanl-fedorauser(a)vfemail.net&gt; wrote:

>  On Thu, 10 May 2018 11:11:13 +0800
>  Ed Greshko <ed.greshko(a)greshko.com&gt; wrote:
>  
>  > Just FYI.  Sorry, I can't shed any light on this since I just
>  > installed qutebrowser on a fully updated F28/KDE system and it
>  > starts and runs just fine.  
>  
>  Actually, that does shed some light.  qutebrowser uses qt5 with
>  qtwebengine and pyqt5.  I have all desktops installed, since I use
>  applications from other desktops (I usually use lxde), but obviously
>  not everything needed for qutebrowser to work.  So, I can boot into
>  kde and see if it works there to determine if it is lxde at fault, or
>  if my kde install isn't complete enough.
>  
>  Thanks. 
Well, my experience was different than yours; qutebrowser didn't work
for me in KDE either, with the same error.  So, it is some fundamental
configuration of my system that is not compatible with the way
qutebrowser wants to use certificates.  I did have a lot of errors and
warnings during kde startup because I have many services like
geolocation and dnfdaemon masked.  However, kde came up and worked just
fine, as far as I could tell.  It was responsive, and performed all my
requests without complaint.

Hmmm, back to the drawing board.

SOLVED: cruft, bad ldconfig path Re: qutebrowser fails with a certificate error in F28 - Seems that it is looking for linux-vdso.so.1 and not finding it in libnssckbi.so

[stan]

On Thu, 10 May 2018 09:50:49 -0700
stan <stanl-fedorauser(a)vfemail.net&gt; wrote:

This turned out to be a file in /etc/ld.so.conf.d that had a path set
to /usr/local/lib/firefox.  When I removed that file and ran ldconfig,
qutebrowser started just fine.  And it had no effect on running
nightly (firefox), which is installed in that directory along with the
libraries it needs by mach. I probably set it at some time in the past
to get nightly to start because of a library conflict with the fedora
packaged firefox.  It was dated January of this year.

SOLVED: cruft, bad ldconfig path Re: qutebrowser fails with a certificate error in F28 - Seems that it is looking for linux-vdso.so.1 and not finding it in libnssckbi.so

[Tim]

Allegedly, on or about 10 May 2018, stan sent:
>  This turned out to be a file in /etc/ld.so.conf.d that had a path
> set
>  to /usr/local/lib/firefox.  When I removed that file and ran
>  ldconfig, qutebrowser started just fine.  And it had no effect on
>  running nightly (firefox), which is installed in that directory along
>  with the libraries it needs by mach. I probably set it at some time
>  in the past to get nightly to start because of a library conflict
>  with the fedora packaged firefox.  It was dated January of this year. 
It's usually not a good idea to fix problems by hitting them with a big
hammer, instead let the packager fix the faults, so that everything
"just works."  But when you do take that approach, keep a log of your
manual fixes, to aid with with future debugging.

-- 
[tim@localhost ~]$ uname -rsvp
Linux 4.15.17-200.fc26.x86_64 #1 SMP Thu Apr 12 18:28:26 UTC 2018 x86_64

Boilerplate:  All mail to my mailbox is automatically deleted.
There is no point trying to privately email me, I only get to see
the messages posted to the mailing list.

Windows tablets are more like suppositories.