1553672 - Master password dialog appears on every start of the browser

Status: RESOLVED WORKSFORME

(Firefox :: Enterprise Policies, defect, P1)

Description

[Mila]

Attachment: wscert.der

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0

Steps to reproduce:

Master password dialog appears on every start of the browser after install last versions AVG Internet Security. Problem is probably in about:policies with AVG Antivirus certificate.
In about:policies is: "Certificates Install "C:\ProgramData\AVG\Antivirus\wscert.der"".
(inside the path are always two backslash "")

Windows register (regedit):
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\Certificates\Install]
"1"="C:\ProgramData\AVG\Antivirus\wscert.der"

For testing purposes, I deleted the above entry from the windows registry (I don't know what kind of negative effect this can have on AVG). Master password dialog after start browser is not appears.

When the registry entry is restored to original value, Master password dialog after start browser again appears.

Comment 1

[Mila]

In Firefox 67, Beta 68 or Nightly 69 is the same problem.

Comment 2

[Matthew N. [:MattN]]

Continuing the conversations from bug 1541927 comment 42 (and later) and bug 1547268 comment 15 (and later) here.

Comment 3

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Can you run Firefox with the environment variables MOZ_LOG set to pipnss:4 and MOZ_LOG_FILE set to some file to dump the log to and attach the results here?

Comment 4

[Mila]

How I run Firefox with the environment variables MOZ_LOG set to pipnss:4 and MOZ_LOG_FILE ?

Comment 5

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Looks like you have Windows 7, so try this: https://www.nextofwindows.com/how-to-addedit-environment-variables-in-windows-7

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

:mkmail, since this bug is a regression, could you fill (if possible) the regressed_by field?
For more information, please visit auto_nag documentation.

Comment 7

[Mila]

I discovered a possible solution for this problem:

1. Deactivate Master Password
2. Close Firefox
3. Activate Master Password
4. Enter password (same or other)
5. Close Firefox
6. Open Firefox -> Master Password dialog don't appears

Tested more times on Firefox 67 and 68b.

Comment 8

[Emil Ghitta, QA [:emilghitta]]

Here are my findings:

I have managed to reproduce this issue while using AVG Internet Security on Windows 10 64bit and Windows 7 32bit with the following Fx versions:

Fx 69.0a1 (BuildId:20190530214830)
Fx 68.0b6 (BuildId:20190529145824)
Fx 67.0 (BuildId:20190516215225)
Fx 60.7.0 esr ( BuildId:20190514153425)
Fx 67.0.1 (BuildId:20190529130856)

Reproducible Steps:

1. Launch Firefox.
2. Create a master password.
3. Add a certificate group policy to install wscert.der
4. Restart Firefox.

This seems to be a regression :

https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=9728b79f2ff41f879452ab78e565896f3de431b8&tochange=6eb370cb386c62e17f1a58bb0cc7d9e788587f83

Possible caused by Bug 1506734

Comment 9

[Emil Ghitta, QA [:emilghitta]]

Attachment: log.txt

Attached the log that was requested in comment 3

Comment 10

[Emil Ghitta, QA [:emilghitta]]

Also this doesn't seem to be reproducible only with the AVG's certificate. This is reproducible (for me) with any certificates as long as the master password is created first and the policy is added after.

Comment 11

[Liz Henry (:lizzard) (relman/hg->git project)]

From discussion yesterday in triage, we may want to deal with this by explaining in SUMO that AVG users may hit this issue and how to work around it. We could then link to that in the release notes as a known issue.

Erin, what do you think?

Joni, can you or someone else who works on documentation start a SUMO article?

Comment 12

[Mike Kaply [:mkaply]]

I can't recreate this. I see the master password dialog once (as expected), but I do not see it again if I put in my password and allow the certificate to be installed.

Bug 1541927 had a specific fix for this problem.

Comment 13

[Pascal Chevrel:pascalc (PTO until April 26)]

This is a general 67 regression, marking as wontfix for our next dot release.

Comment 14

[Joni Chan]

I've started a draft for a SUMO article here: https://docs.google.com/document/d/1P2hULJDGB_HKw725D-sRJdzGEPluHn_nE06foHnT494/edit?usp=sharing

Please review and we'll publish the article as soon as it's finalized.

Comment 15

[Liz Henry (:lizzard) (relman/hg->git project)]

Looks good to me! Thank you!

Comment 16

[Joni Chan]

Great! We've published the article here: https://support.mozilla.org/kb/firefox-keeps-asking-me-master-password

Comment 17

[Pascal Chevrel:pascalc (PTO until April 26)]

Liz, should that be mentioned in 67 release notes as a known unresolved issue?

Comment 18

[Liz Henry (:lizzard) (relman/hg->git project)]

Added to the 67.0 release notes with a link, as "For some Firefox users who have antivirus programs installed, the master password dialog appears more than once. Information for a workaround fix is on support.mozilla.org. " Feel free to tweak the wording or suggest improvements here and n-i me if you want me to change anything!

Comment 19

[Liz Henry (:lizzard) (relman/hg->git project)]

Unsure if this is still happening for users.
Emil, can you reproduce it? If not, we can close this bug as resolved worksforme.

Comment 20

[Emil Ghitta, QA [:emilghitta]]

Odd.. It seems that I can't reproduce this issue anymore. The master password prompt appears only once (as expected). Entering the master password and allowing the certificate to be installed doesn't trigger the master password prompt again after closing and opening the browser or after browser restarts.

Closing this as worksforme. Please feel free to reopen this issue if the faulty behavior is encountered again.