From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id D709D139085 for ; Mon, 19 Dec 2016 17:18:10 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 7446FE0C4C; Mon, 19 Dec 2016 17:16:44 +0000 (UTC) Received: from alt1.smtp5.plusvps.com (alt1.smtp5.plusvps.com [89.201.164.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 11EDBE0C45 for ; Mon, 19 Dec 2016 17:16:43 +0000 (UTC) Received: from lin16.mojsite.com ([178.218.164.164]) by smtp5.plusvps.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.84) (envelope-from ) id 1cJ1YC-000Gb4-Gj for gentoo-user@lists.gentoo.org; Mon, 19 Dec 2016 18:16:36 +0100 Received: from 93-138-96-237.adsl.net.t-com.hr ([93.138.96.237]:50720 helo=g0n.localdomain) by lin16.mojsite.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.87) (envelope-from ) id 1cJ1Y4-0007mE-W3; Mon, 19 Dec 2016 18:16:29 +0100 Received: by g0n.localdomain (Postfix, from userid 1000) id 69C256BC4; Mon, 19 Dec 2016 18:17:01 +0100 (CET) Date: Mon, 19 Dec 2016 18:17:01 +0100 From: Miroslav Rovis To: gentoo-user@lists.gentoo.org Cc: Taiidan@gmx.com Subject: Re: [gentoo-user] Reading the (SSL) traffic with Pale Moon Message-ID: <20161219171701.GE31077@g0n.xdwgrp> References: <20161217055952.GB13608@waltdnes.org> <20161217224455.GA9477@g0n.xdwgrp> <20161217232554.GB9477@g0n.xdwgrp> <20161218015637.GC18283@waltdnes.org> <20161218055009.GA11155@g0n.xdwgrp> <20161218070441.GA19833@waltdnes.org> <20161218181616.GA13242@g0n.xdwgrp> <20161218184347.GB13242@g0n.xdwgrp> <20161218202933.GA23487@waltdnes.org> <20161219111643.GA31077@g0n.xdwgrp> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="wchHw8dVAp53YPj8" Content-Disposition: inline In-Reply-To: <20161219111643.GA31077@g0n.xdwgrp> User-Agent: Mutt/1.7.2 (2016-11-26) X-PlusHosting-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details, Found to be clean X-PlusHosting-MailScanner-SpamCheck: X-Spam-Status: No, No X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - lin16.mojsite.com X-AntiAbuse: Original Domain - lists.gentoo.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - croatiafidelis.hr X-Get-Message-Sender-Via: lin16.mojsite.com: authenticated_id: miro.rovis@croatiafidelis.hr X-Authenticated-Sender: lin16.mojsite.com: miro.rovis@croatiafidelis.hr X-PlusHosting-MailScanner-Information: Please contact the ISP for more information X-PlusHosting-MailScanner-ID: 1cJ1YC-000Gb4-Gj X-PlusHosting-MailScanner-From: miro.rovis@croatiafidelis.hr X-Archives-Salt: 553da798-b93c-49c6-bc6a-a89ca88f41fc X-Archives-Hash: 69ed772f10244ad32449314ebb4d3c4f --wchHw8dVAp53YPj8 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 161219-12:16+0100, Miroslav Rovis wrote: > On 161218-15:29-0500, Walter Dnes wrote: =2E.. > First, I installed Pale Moon, but by no means is the task over. >=20 > And not just because I had issues, i.e. couldn't log into Pale Moon forum: >=20 > SSL-key logging with Pale Moon (the current title) > http://www.croatiafidelis.hr/foss/cap/cap-161218-palemoon/ > ( and great if we get some insight here by seniors as to why the > apparent *fork bomb* or something happened ). >=20 > ( Pls. do note that Pale Moon can SSL-key log just fine, except, it's an > old version of the nss library that Pale Moon uses, which is likely not > a good thing. ) =2E.. The NSS library that Palemoon uses (as I posted on that link above) is, IIUC, ancient (paste from about:support): NSS 3.19.5.0 Basic ECC 3.19.5.0 Basic ECC See in your own portage: # cd /usr/portage/dev-libs/nss/ # grep 'bug #' ChangeLog | cut -d# -f2 | sed 's/)//' | sed 's/\.//' \ | sed 's/\.//'|sort -u 564834 571086 574848 576862 585372 # Of the above Gentoo Bugzilla bugs, only the last one (585372) is not about = vulns but about stable request ("=3Ddev-libs/nss-3.23 stable request"). So all of these: