Firefox hangs on DNS validation. #1

닫힘
josh6 년 전을 오픈 · 8개의 코멘트
josh 코멘트됨, 6 년 전
협업자

Chrome is fine, but Firefox hangs on DNS domain validation Verifying Domains... (give us 5 seconds or so...)

Chrome is fine, but Firefox hangs on DNS domain validation `Verifying Domains... (give us 5 seconds or so...)`
coolaj86 코멘트됨, 6 년 전
소유자

Open up the JavaScript console and check the error message and let us know what that is please.

We’re not handling errors properly yet.

Open up the JavaScript console and check the error message and let us know what that is please. We’re not handling errors properly yet.
jshaver 코멘트됨, 6 년 전
협업자

Confirmed, I see the same problem in Firefox. It could be one of my recent changes. I'll take a look.

Confirmed, I see the same problem in Firefox. It could be one of my recent changes. I'll take a look.
jshaver 자체적으로 할당됨 6 년 전
jshaver 코멘트됨, 6 년 전
협업자

It wasn't what I thought it was. It looks like this is the line throwing a DOMException:

return crypto.subtle.importKey(
          "jwk"
        , info.serverJwk
        , wcOpts
        , true
        , ["sign"]
).then(function (privateKey) {
	return window.crypto.subtle.exportKey("pkcs8", privateKey);
})

window.crypto.suble.exportKey is throwing "NotSupportedError: Operation is not supported".

Looks like there are a few bug reports already:

https://bugzilla.mozilla.org/buglist.cgi?quicksearch=export+pkcs8

It wasn't what I thought it was. It looks like this is the line throwing a DOMException: ```javascript return crypto.subtle.importKey( "jwk" , info.serverJwk , wcOpts , true , ["sign"] ).then(function (privateKey) { return window.crypto.subtle.exportKey("pkcs8", privateKey); }) ``` window.crypto.suble.exportKey is throwing "NotSupportedError: Operation is not supported". Looks like there are a few bug reports already: [https://bugzilla.mozilla.org/buglist.cgi?quicksearch=export+pkcs8](https://bugzilla.mozilla.org/buglist.cgi?quicksearch=export+pkcs8)
coolaj86 코멘트됨, 6 년 전
소유자

I don’t think we actually need that method. I was just using it for debugging if I recall.

I don’t think we actually need that method. I was just using it for debugging if I recall.
jshaver 코멘트됨, 6 년 전
협업자

Isn't it whats giving us PKCS #8 format for the private key? I'll see what it looks like without it.

Isn't it whats giving us PKCS #8 format for the private key? I'll see what it looks like without it.
coolaj86 코멘트됨, 6 년 전
소유자

I’d have to look and see. If it’s what I was using to then convert to a PEM, then yes.

There’s probably a pure JavaScript shim to convert from JWK to PEM, but that’s literally retarded if Firefox doesn’t support the oldest and most widely used format for key files...

I’d have to look and see. If it’s what I was using to then convert to a PEM, then yes. There’s probably a pure JavaScript shim to convert from JWK to PEM, but that’s literally retarded if Firefox doesn’t support the oldest and most widely used format for key files...
josh 코멘트됨, 6 년 전
포스터
협업자

Accidentally played this dance again.

Accidentally played this dance again.
jshaver 코멘트됨, 6 년 전
협업자

We did get this working in firefox, although not with ECDSA. Right now, if it fails to export an ECDSA key, it will fall back to RSA.

We did get this working in firefox, although not with ECDSA. Right now, if it fails to export an ECDSA key, it will fall back to RSA.
jshaver closed this issue 6 년 전
로그인하여 이 대화에 참여
레이블 없음
마일스톤 없음
참여자 3명
알림
마감일

마감일이 설정되지 않았습니다.

의존성

이 이슈는 어떠한 의존성도 가지지 않습니다.

불러오는 중...
아직 콘텐츠가 없습니다.