GNU bug report logs - #59175
GNU Icecat not loading cloudflare

Previous Next

To reply to this bug, email your comments to 59175 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: bob kolf <bob.graff33 <at> yandex.com>
To: "bug-gnuzilla <at> gnu.org" <bug-gnuzilla <at> gnu.org>
Subject: GNU Icecat not loading cloudflare
Date: Wed, 09 Nov 2022 21:03:03 +0200

[Message part 1 (text/html, inline)]

Message #8 received at 59175 <at> debbugs.gnu.org (full text, mbox):

From: bill-auger <bill-auger <at> peers.community>
To: bob kolf <bob.graff33 <at> yandex.com>
Cc: 59175 <at> debbugs.gnu.org
Subject: Re: bug#59175: GNU Icecat not loading cloudflare
Date: Sat, 12 Nov 2022 21:01:11 -0500

On Sat, 12 Nov 2022 12:38:12 +0100 Antonio wrote:
> Do you know of this GitLab bug
> https://gitlab.com/gitlab-org/gitlab/-/issues/345328?

yes, that bug is years-old now - it has been addressed on this
mailing list; but the patches are yet to be accepted:
https://lists.gnu.org/archive/html/bug-gnuzilla/2021-05/msg00005.html

that mentions bug#47276 "Stuck at Cloudflare 'browser checks'"
(perhaps still open), of which this (bug#59175) is a duplicate

Message #11 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Ruben Rodriguez <ruben <at> gnu.org>
To: bug-gnuzilla <at> gnu.org
Subject: Re: bug#59175: GNU Icecat not loading cloudflare
Date: Sun, 13 Nov 2022 20:18:44 +0100

On 11/13/22 03:01, bill-auger wrote:
> On Sat, 12 Nov 2022 12:38:12 +0100 Antonio wrote:
>> Do you know of this GitLab bug
>> https://gitlab.com/gitlab-org/gitlab/-/issues/345328?
> yes, that bug is years-old now - it has been addressed on this
> mailing list; but the patches are yet to be accepted:
> https://lists.gnu.org/archive/html/bug-gnuzilla/2021-05/msg00005.html
>
> that mentions bug#47276 "Stuck at Cloudflare 'browser checks'"
> (perhaps still open), of which this (bug#59175) is a duplicate
>
>
IceCat 102 is not set to spoof the referrer. I have tried both the 
methods those patches indicate, and the problem is not resolved. I have 
tried a long list of changes and I cannot figure out the reason, but it 
doesn't seem to be the user agent. A bad user agent should result in the 
cloudflare check failing and showing a captcha, what we have is a 
redirect loop. I have tested with other cloudflare-served sites and they 
all seem to fail the same way. I'm considering this a release blocker.

A head scratcher is that Abrowser, when loading the same settings file 
from IceCat, works correctly. Same for Firefox 102 ESR binaries from 
mozilla, suggesting that the problem may be in some other part of the 
IceCat build process, either in a patch or other code change; or in the 
toolchain, or in a library embedded at build time. My next step will be 
to build icecat tests with no customization, and add them in chunks, to 
isolate the problem. Ideas and tests are welcome!

Message #14 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Ruben Rodriguez <ruben <at> gnu.org>
To: bug-gnuzilla <at> gnu.org
Subject: Re: bug#59175: GNU Icecat not loading cloudflare
Date: Mon, 14 Nov 2022 01:39:49 +0100

On 11/13/22 03:01, bill-auger wrote:
> On Sat, 12 Nov 2022 12:38:12 +0100 Antonio wrote:
>> Do you know of this GitLab bug
>> https://gitlab.com/gitlab-org/gitlab/-/issues/345328?
> yes, that bug is years-old now - it has been addressed on this
> mailing list; but the patches are yet to be accepted:
> https://lists.gnu.org/archive/html/bug-gnuzilla/2021-05/msg00005.html
I overlooked how those values apply, the useragent string is not 
currently spoofed, but the navigator.oscpu (and others) are spoofed, 
this mismatch breaks things. I'm removing the custom spoofing values as 
this is all handled together by the fingerprinting protection mechanism 
at this point.

Message #17 received at 59175 <at> debbugs.gnu.org (full text, mbox):

From: bob kolf <bob.graff33 <at> yandex.com>
To: bill-auger <bill-auger <at> peers.community>
Cc: "59175 <at> debbugs.gnu.org" <59175 <at> debbugs.gnu.org>
Subject: Re: bug#59175: GNU Icecat not loading cloudflare
Date: Mon, 14 Nov 2022 13:12:37 +0200

[Message part 1 (text/html, inline)]

Message #20 received at 59175 <at> debbugs.gnu.org (full text, mbox):

From: bill-auger <bill-auger <at> peers.community>
To: Ruben Rodriguez <ruben <at> gnu.org>
Cc: 59175 <at> debbugs.gnu.org
Subject: Re: bug#59175: GNU Icecat not loading cloudflare
Date: Mon, 14 Nov 2022 22:05:57 -0500

On Mon, 14 Nov 2022 01:39:49 +0100 Ruben wrote:
> this mismatch breaks things.

On Mon, 14 Nov 2022 13:12:37 +0200 bob wrote:
> would it fix the bug by changing it back to 'firefox'?

the mismatch was the problem - the user-agent alone was acceptable
- i had explained it better on a preceding message:
https://lists.gnu.org/archive/html/bug-gnuzilla/2021-05/msg00002.html


here is a test page:
  <html><body><script type="text/javascript">
  document.write("codeName="   + navigator.appCodeName + "<br />");
  document.write("appName="    + navigator.appName     + "<br />");
  document.write("appVersion=" + navigator.appVersion  + "<br />");
  document.write("oscpu="      + navigator.oscpu       + "<br />");
  document.write("platform="   + navigator.platform    + "<br />");
  document.write("product="    + navigator.product     + "<br />");
  document.write("buildID="    + navigator.buildID     + "<br />");
  document.write("userAgent="  + navigator.userAgent   + "<br />");
  </script><body><html>

icecat:
  codeName=Mozilla
  appName=Netscape
  appVersion=78.0
  oscpu=Windows NT 6.1
  platform=Win32
  product=Gecko
  buildID=Gecko/20100101
  userAgent=Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 IceCat/78.0

notice that 'userAgent' has "Linux x86_64" while 'oscpu' and 'platform' declare "Windows"
- that is probably why cloudflare rejects the clients as insane

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.