You are not logged in.

#1 2019-05-04 09:43:43

twoion
ほやほや
Registered: 2015-08-10
Posts: 2,555

ATTENTION: Global Firefox Addon Problems

All users who have Firefox installed may have already gotten, or will have, all installed Firefox addons disabled and cannot install new extensions because Mozilla failed to renew their signing certificate in time. The issue is global and unless you are using Firefox Nightly or Firefox Dev you cannot disable addon signing locally. Depending on your time zone and installed addons, the fix may take effect just in time.

Wait until a fix is released or set your system clocks to T minus some time (MAYBE this works) if you want your addons to work.

apt-get install faketime
faketime 'last friday 5 pm' /usr/bin/firefox

Alternatively, as already hinted, install Firefox Dev or Nightly builds and disable addon signing.

This issue is Mozilla's problem and BL/Debian can do nothing to mitigate.


At the end of the river the sundown beams

Offline

#2 2019-05-04 10:07:30

ohnonot
...again
Registered: 2015-09-29
Posts: 4,169
Website

Re: ATTENTION: Global Firefox Addon Problems

ah, and i thought debian users were spared this desaster.

using faketime helps; i reinstalled all my addons now (this step wouldn't have been necessary if i hadn't uninstalled them out of exasperation).
i was hoping that after that, with these settings:
xpinstall.png
i could use it again without faketime, but no, that's back to the old message...
maybe some other disabling of cert checks can help?

Last edited by ohnonot (2019-05-04 10:08:31)

Offline

#3 2019-05-04 15:13:12

Mardus
Member
From: Estonia
Registered: 2019-05-03
Posts: 13

Re: ATTENTION: Global Firefox Addon Problems

Set xpinstall.signatures.required to false in about:config

(nevermind, if that doesn't help)

Last edited by Mardus (2019-05-04 15:13:57)

Offline

#4 2019-05-04 20:42:49

Anaconda
crypto-anarchist
From: Quesnel BC Canada
Registered: 2015-09-29
Posts: 213

Re: ATTENTION: Global Firefox Addon Problems

My main system was not affected by this for some reason. Just timing I suppose. My virtual machine on the other hand was.

Mardus wrote:

Set xpinstall.signatures.required to false in about:config

(nevermind, if that doesn't help)

That worked for me. Didn't have to do anything else. Thanks.


“The university is well structured, well tooled, to turn out people with all the sharp edges worn off...." Mario Savio
"Protections for anonymous speech are vital to democratic discourse". Help enforce our right to free and anonymous speech by running a Tor relay.

Offline

#5 2019-05-05 02:52:38

johnraff
nullglob
From: Nagoya, Japan
Registered: 2015-09-09
Posts: 6,106
Website

Re: ATTENTION: Global Firefox Addon Problems

There is no fix yet for ESR firefox as far as I can see, but presumably it will come via a Debian upgrade eventually.


John
--------------------
( a boring Japan blog, idle Twitterings and GitStuff )
In case you forget, the rules.

Offline

#6 2019-05-05 04:21:17

obscurant
Member
Registered: 2017-08-06
Posts: 142

Re: ATTENTION: Global Firefox Addon Problems

There's a fix now. This will restore your addons.

https://storage.googleapis.com/moz-fx-n … signed.xpi

Edit: This fix is automatic on FF 66.03, but with ESR, the addons seem to have to be reinstalled.

Last edited by obscurant (2019-05-05 18:21:24)

Offline

#7 2019-05-05 05:16:28

linux_user
Member
Registered: 2016-11-04
Posts: 421

Re: ATTENTION: Global Firefox Addon Problems

If you enable Firefox studies in Preferences > Privacy & Security, there is a fix that'll be automatically patched to Firefox in the background. This is a temporary fix, but an official temporary fix.

Works fine until they renew the certificates or issue a permanent fix.

Last edited by linux_user (2019-05-05 05:45:01)


"Blind faith to authority is the greatest enemy of truth."

Offline

#8 2019-05-05 08:49:33

ohnonot
...again
Registered: 2015-09-29
Posts: 4,169
Website

Re: ATTENTION: Global Firefox Addon Problems

i think the fixes from post #6 and #7 are actually the same - you can install it manually or let FF's data collection feature do it for you.
but yeah, one should check the signature.

Offline

#9 2019-05-05 09:45:51

unklar
Member
Registered: 2015-10-31
Posts: 961

Re: ATTENTION: Global Firefox Addon Problems

Anaconda wrote:
Mardus wrote:

    Set xpinstall.signatures.required to false in about:config

    (nevermind, if that doesn't help)

That worked for me. Didn't have to do anything else. Thanks.

dito! Thanks!  FF-esr 32bit   smile

Last edited by unklar (2019-05-05 09:46:41)

Offline

#10 2019-05-05 15:13:28

hhh
Meep!
Registered: 2015-09-17
Posts: 8,748
Website

Re: ATTENTION: Global Firefox Addon Problems

unklar wrote:
Anaconda wrote:
Mardus wrote:

    Set xpinstall.signatures.required to false in about:config

    (nevermind, if that doesn't help)

That worked for me. Didn't have to do anything else. Thanks.

dito! Thanks!  FF-esr 32bit   smile

Correct me if I'm wrong, but isn't disabling xpi signatures a terrible security risk?

https://blog.mozilla.org/addons/2019/05 … n-firefox/

A better workaround would be to download the latest FF tarball from Mozilla and run it from your home folder with minimal addons until the fix for FF-esr is released...

https://www.mozilla.org/en-US/firefox/

  1. Download Firefox from the Firefox download page to your home directory.

  2. Open a Terminal and go to your home directory: cd ~

  3. Extract the contents of the downloaded file: tar xjf firefox-*.tar.bz2

  4. Close Firefox if it's open.

  5. To start Firefox, run the firefox script in the firefox folder: ~/firefox/firefox

https://support.mozilla.org/en-US/kb/in … efox-linux

Offline

#11 2019-05-05 17:49:06

glittersloth
...always giving it to you straight
Registered: 2015-09-30
Posts: 906

Re: ATTENTION: Global Firefox Addon Problems

^ If you insist on only using FF-ESR from the repos, another way to get your extensions working would be to add them manually each session. A bit inconvenient since you'll need to repeat the process every time you restart Firefox.

Steps;
1. Obtain path to your Profile Directory via Help > Troubleshooting Information.
2. Enter about:debugging in address bar.
3. Click on "Load Temporary Add-on" button.
4. Navigate to /[path/obtained/from/Step1]/extensions and load the .xpi files you want.

In theory, should be safe since it only lasts until you kill the browsing session, but I take no responsibility if anything breaks.

Last edited by glittersloth (2019-05-05 17:55:11)

Offline

#12 2019-05-06 03:31:06

johnraff
nullglob
From: Nagoya, Japan
Registered: 2015-09-09
Posts: 6,106
Website

Re: ATTENTION: Global Firefox Addon Problems

https://blog.mozilla.org/addons/2019/05 … n-firefox/

A Firefox release has been pushed — version 66.0.4 on Desktop and Android, and version 60.6.2 for ESR.

A little patience, and an official Debian upgrade will surely come.


John
--------------------
( a boring Japan blog, idle Twitterings and GitStuff )
In case you forget, the rules.

Offline

#13 2019-05-06 06:57:27

Mardus
Member
From: Estonia
Registered: 2019-05-03
Posts: 13

Re: ATTENTION: Global Firefox Addon Problems

I did get the hotfix through Mozilla Studies, but not without some consternation, as the entire "Firefox data collection and use" area was entirely grayed out, including "Allow Firefox to install and run studies".

In about:config, I had to set app.shield.optoutstudies.enabled to true, while toolkit.telemetry.enabled remains false and locked.

Offline

#14 2019-05-06 23:59:07

johnraff
nullglob
From: Nagoya, Japan
Registered: 2015-09-09
Posts: 6,106
Website

Re: ATTENTION: Global Firefox Addon Problems

The Debian upgrade has just arrived, and my addons all seem to be working again. No hacking of config files needed.


John
--------------------
( a boring Japan blog, idle Twitterings and GitStuff )
In case you forget, the rules.

Offline

Board footer

Powered by FluxBB