748465 - Sync Service in Aurora 13.0a2 (2012-04-24) logs "Failed to fetch and verify keys: PK11_ExtractKeyValue failed."

Status: RESOLVED DUPLICATE of bug 443386

(Firefox :: Sync, defect)

Description

[Max Vernon]

Attachment: error-1335290993825.txt

User Agent: Mozilla/5.0 (Windows NT 5.2; WOW64; rv:13.0) Gecko/20120424 Firefox/13.0a2
Build ID: 20120424042009

Steps to reproduce:

Setup a Sync account with a modified computer name being the only non-standard choice.  Name chosen is DEV02. 


Actual results:

Tools -> Sync Now returns after several seconds with "Sync encountered an error while syncing: Unknown error.  Sync will automatically retry this action."

About:Sync-log latest log contains the following at the end:

1335290993594	Sync.Service	INFO	Sync key is up-to-date: no need to upgrade.
1335290993699	Sync.Resource	DEBUG	mesg: DELETE success 200 https://phx-sync265.services.mozilla.com/1.1/px4kleww2uzc5gligf6h2vk3b7adyjnp/storage
1335290993699	Sync.Resource	DEBUG	DELETE success 200 https://phx-sync265.services.mozilla.com/1.1/px4kleww2uzc5gligf6h2vk3b7adyjnp/storage
1335290993700	Sync.Service	DEBUG	New metadata record: {"syncID":"LQnUXQ-oLHbK","storageVersion":5}
1335290993700	Sync.Resource	DEBUG	PUT Length: 78
1335290993820	Sync.Resource	DEBUG	mesg: PUT success 200 https://phx-sync265.services.mozilla.com/1.1/px4kleww2uzc5gligf6h2vk3b7adyjnp/storage/meta/global
1335290993820	Sync.Resource	DEBUG	PUT success 200 https://phx-sync265.services.mozilla.com/1.1/px4kleww2uzc5gligf6h2vk3b7adyjnp/storage/meta/global
1335290993821	Sync.Service	INFO	Generating new keys WBO...
1335290993821	Sync.BulkKeyBundle	INFO	BulkKeyBundle being created for [default]
1335290993822	Sync.Service	DEBUG	Failed to fetch and verify keys: PK11_ExtractKeyValue failed. Stack trace: resource:///modules/services-crypto/WeaveCrypto.js:553 < generateRandom()@resource://services-sync/record.js:614 < resource://services-sync/record.js:390 < resource://services-sync/record.js:409 < WeaveSvc_generateNewSymmetricKeys()@resource:///modules/services-sync/service.js:826 < WeaveSvc__freshStart()@resource:///modules/services-sync/service.js:1599 < verifyAndFetchSymmetricKeys()@resource:///modules/services-sync/service.js:695 < WeaveSvc__remoteSetup()@resource:///modules/services-sync/service.js:1214 < resource:///modules/services-sync/service.js:766 < WrappedNotify()@resource://services-sync/util.js:148 < verifyLogin()@resource:///modules/services-sync/service.js:717 < resource:///modules/services-sync/service.js:1006 < WrappedNotify()@resource://services-sync/util.js:148 < WrappedLock()@resource://services-sync/util.js:103 < WrappedCatch()@resource://services-sync/util.js:77 < WeaveSvc_login()@resource:///modules/services-sync/service.js:980 < resource:///modules/services-sync/service.js:1272 < WrappedCatch()@resource://services-sync/util.js:77 < sync()@resource:///modules/services-sync/service.js:1268
1335290993822	Sync.Service	WARN	Failed to fetch symmetric keys. Failing remote setup.
1335290993823	Sync.Service	WARN	Remote setup failed.
1335290993823	Sync.SyncScheduler	DEBUG	Clearing sync triggers and the global score.
1335290993824	Sync.SyncScheduler	DEBUG	Next sync in 86400000 ms.

I've attached my sync-logs to this bug rep.


Expected results:

Sync should work.

Comment 1

[Max Vernon]

I've deleted my sync account from https://account.services.mozilla.com and clicked 'un-link this device' in Tools -> Options -> Sync settings.  I then clicked Tools -> Setup Sync and re-created my account with the standard computer name assigned by Aurora.  The first sync-log now shows a slightly different error:

1335291790667	Sync.Service	INFO	Generating new keys WBO...
1335291790667	Sync.BulkKeyBundle	INFO	BulkKeyBundle being created for [default]
1335291790668	Sync.Service	DEBUG	verifyLogin failed: PK11_ExtractKeyValue failed. Stack trace: resource:///modules/services-crypto/WeaveCrypto.js:553 < generateRandom()@resource://services-sync/record.js:614 < resource://services-sync/record.js:390 < resource://services-sync/record.js:409 < WeaveSvc_generateNewSymmetricKeys()@resource:///modules/services-sync/service.js:826 < WeaveSvc__freshStart()@resource:///modules/services-sync/service.js:1599 < WeaveSvc__remoteSetup()@resource:///modules/services-sync/service.js:1166 < resource:///modules/services-sync/service.js:766 < WrappedNotify()@resource://services-sync/util.js:148 < verifyLogin()@resource:///modules/services-sync/service.js:717 < resource:///modules/services-sync/service.js:1006 < WrappedNotify()@resource://services-sync/util.js:148 < WrappedLock()@resource://services-sync/util.js:103 < WrappedCatch()@resource://services-sync/util.js:77 < WeaveSvc_login()@resource:///modules/services-sync/service.js:980 < resource:///modules/services-sync/service.js:1272 < WrappedCatch()@resource://services-sync/util.js:77 < sync()@resource:///modules/services-sync/service.js:1268
1335291790668	Sync.Status	DEBUG	Status.login: error.login.reason.no_username => error.login.reason.network
1335291790668	Sync.Status	DEBUG	Status.service: success.status_ok => error.login.failed
1335291790669	Sync.SyncScheduler	DEBUG	Clearing sync triggers and the global score.
1335291790670	Sync.SyncScheduler	DEBUG	Next sync in 86400000 ms.

I've attached error-1335291790671.txt which is the sync-log with this error.

Comment 2

[Max Vernon]

Attachment: sync-log

Comment 3

[Max Vernon]

Attachment: sync-log #3

This sync-log contains the results of trying to sync this computer with an already existing weave account created on another computer.

Comment 4

[Max Vernon]

Looks like enabling FIPS-140 support in Tools -> Options -> Advanced -> Encryption -> Security Devices causes the encryption key failures documented in the attached sync-logs.  I removed FIPS-140 support and now sync works perfectly.

Comment 5

[Matthias Versen [:Matti]]

Either sync or something like NSS

Comment 6

[Gregory Szorc [:gps]]

Sync does not work in FIPS mode... yet. If FIPS mode is active, Sync fails in many different ways.