openjdk team mailing list archive

[Mercurial <561124@xxxxxxxxxxxxxxxxxx>]

details: http://icedtea.classpath.org//people/andrew/icedtea8?cmd=changeset;node=23684054d4dc
author: Matthias Klose <doko@xxxxxxxxxx>
date: Mon Apr 12 22:37:35 2010 +0200

        Fix PR icedtea/461, plugin working for NSS enabled builds
working together with firefox including a private NSS copy

        2010-04-12  Matthias Klose  <doko@xxxxxxxxxx>

	        PR icedtea/461
	        * plugin/icedteanp/IcedTeaNPPlugin.cc (plugin_filter_ld_library_path):
	        New, filter out paths in LD_LIBRARY_PATH which start with
	        MOZILLA_FIVE_HOME.
	        (plugin_filter_environment): New, build environment to pass to the
	        appletviewer process.
	        (plugin_test_appletviewer, plugin_start_appletviewer): Start the new
	        process with the filtered environment.

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-6 in Ubuntu.
https://bugs.launchpad.net/bugs/561124

Title:
  firefox sets LD_LIBRARY_PATH which breaks the icedtea6-plugin

Status in OpenJDK:
  Won't Fix
Status in firefox package in Ubuntu:
  Fix Released
Status in openjdk-6 package in Ubuntu:
  Fix Released
Status in firefox source package in Lucid:
  Fix Released
Status in openjdk-6 source package in Lucid:
  Fix Released

Bug description:
  Binary package hint: firefox

  starting with openjdk/icedtea-1.7, a NSS based security provider is
  supported by icedtea.

  The firefox start script in MOZILLA_FIVE_HOME sets LD_LIBRARY_PATH to
  include MOZILLA_FIVE_HOME and a number of subdirectories of
  MOZILLA_FIVE_HOME. The current NSS provider code seems to honor
  LD_LIBRARY_PATH, and loads the libnss3.so provided by the browser.

  Caused by: java.io.IOException: An incompatible version of NSS is already loaded, 3.7 or later required
          at sun.security.pkcs11.Secmod.isInitialized(Secmod.java:130)
          at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:168)

  (wondering why the nss version shipped with firefox 3.6.3 identifies
  itself as 3.7).

  However the openjdk build is configured for the nss version configured
  at build time, and you can run it with more than one browser, so it
  makes sense to use the libnss version which was detected at openjdk
  build time.

  My current solution/workaround is to pass a modified LD_LIBRARY_PATH
  to the subprocess such that the libnss3.so which was configured at
  build time is always used.

  The setting of LD_LIBRARY_PATH in the run-mozilla.sh start script may
  be convenient, but it does break plugins which are built to be
  independent of the browser used.

  Things to do on the browser side:

   - why does firefox use it's own outdated libnss copy, and doesn't use the system nss3?
   - why does the nss shipped with firefox identifies itself with 3.7?
   - the firefox startup script should not set LD_LIBRARY_PATH, but search itself for libs
     in known places.

  for a proposed workaround for the icedtea6-plugin to work with this
  broken plugin, see
  http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=461

To manage notifications about this bug go to:
https://bugs.launchpad.net/openjdk/+bug/561124/+subscriptions