Firefox hangs on DNS validation. #1

Nouveau ticket

josh · 2018-08-23T22:54:21Z

josh a commenté

2018-08-23 22:54:21 +00:00

.

Collaborateur

Chrome is fine, but Firefox hangs on DNS domain validation Verifying Domains... (give us 5 seconds or so...)

Chrome is fine, but Firefox hangs on DNS domain validation `Verifying Domains... (give us 5 seconds or so...)`

coolaj86 a commenté

2018-08-23 23:07:41 +00:00

.

Propriétaire

Open up the JavaScript console and check the error message and let us know what that is please.

We’re not handling errors properly yet.

Open up the JavaScript console and check the error message and let us know what that is please. We’re not handling errors properly yet.

jshaver a commenté

2018-08-23 23:13:01 +00:00

.

Collaborateur

Confirmed, I see the same problem in Firefox. It could be one of my recent changes. I'll take a look.

jshaver s'est assigné ça 2018-08-23 23:13:13 +00:00.

jshaver a commenté

2018-08-23 23:58:27 +00:00

.

Collaborateur

It wasn't what I thought it was. It looks like this is the line throwing a DOMException:

return crypto.subtle.importKey(
          "jwk"
        , info.serverJwk
        , wcOpts
        , true
        , ["sign"]
).then(function (privateKey) {
	return window.crypto.subtle.exportKey("pkcs8", privateKey);
})

window.crypto.suble.exportKey is throwing "NotSupportedError: Operation is not supported".

Looks like there are a few bug reports already:

https://bugzilla.mozilla.org/buglist.cgi?quicksearch=export+pkcs8

It wasn't what I thought it was. It looks like this is the line throwing a DOMException: ```javascript return crypto.subtle.importKey( "jwk" , info.serverJwk , wcOpts , true , ["sign"] ).then(function (privateKey) { return window.crypto.subtle.exportKey("pkcs8", privateKey); }) ``` window.crypto.suble.exportKey is throwing "NotSupportedError: Operation is not supported". Looks like there are a few bug reports already: [https://bugzilla.mozilla.org/buglist.cgi?quicksearch=export+pkcs8](https://bugzilla.mozilla.org/buglist.cgi?quicksearch=export+pkcs8)

coolaj86 a commenté

2018-08-24 00:01:36 +00:00

.

Propriétaire

I don’t think we actually need that method. I was just using it for debugging if I recall.

jshaver a commenté

2018-08-24 00:03:28 +00:00

.

Collaborateur

Isn't it whats giving us PKCS #8 format for the private key? I'll see what it looks like without it.

coolaj86 a commenté

2018-08-24 01:14:05 +00:00

.

Propriétaire

I’d have to look and see. If it’s what I was using to then convert to a PEM, then yes.

There’s probably a pure JavaScript shim to convert from JWK to PEM, but that’s literally retarded if Firefox doesn’t support the oldest and most widely used format for key files...

I’d have to look and see. If it’s what I was using to then convert to a PEM, then yes. There’s probably a pure JavaScript shim to convert from JWK to PEM, but that’s literally retarded if Firefox doesn’t support the oldest and most widely used format for key files...

josh a commenté

2018-10-06 23:07:40 +00:00

.

Auteur

Collaborateur

Accidentally played this dance again.

jshaver a commenté

2018-11-27 00:39:48 +00:00

.

Collaborateur

We did get this working in firefox, although not with ECDSA. Right now, if it fails to export an ECDSA key, it will fall back to RSA.

jshaver a fermé ce ticket

2018-11-27 00:40:10 +00:00

.

Connectez-vous pour rejoindre cette conversation.

3 participants

Notifications

Échéance

Aucune échéance n'a été définie.

Dépendances

Aucune dépendance définie.

Référence : coolaj86/greenlock.html#1