New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 830895 link

Starred by 5 users

Issue metadata

Status: Assigned
Owner:
Last visit > 30 days ago
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

NaCl issue : NaCl SDK fails to work on Linux

Reported by jason.so...@gmail.com, Apr 9 2018

Issue description

UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36

Steps to reproduce the problem:
1.  Download and extract the NaCl SDK : https://storage.googleapis.com/nativeclient-mirror/nacl/nacl_sdk/nacl_sdk.zip
2. Run the naclsdk list command
3. 

What is the expected behavior?
You will see a list of tools and nacl sdk versions output on screen.

What went wrong?
An error is displayed :

File "/home/jason/Downloads/nacl_sdk_updated/sdk_tools/third_party/fancy_urllib/__init__.py", line 414, in do_open
    url_error.reason.args[1])
third_party.fancy_urllib.InvalidCertificateException: Host storage.googleapis.com returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)): 

Did this work before? Yes Not sure

Chrome version: 63.0.3239.108  Channel: stable
OS Version: Ubuntu 16.04 LTS
Flash Version: 

You can manually edit the certs locally in /sdk_tools/cacerts.txt or alter sdk_tools/download.py to skip the certificate usage but it seems like the SDK should work when downloaded.  When I tried this on my Ma,c the downloaded SDK worked fine, so I don't know if there is something I should have updated in the OS to avoid this.
 

Comment 1 by raniel...@gmail.com, Apr 10 2018

I'm having the same issues on Ubuntu. It used to work just fine. Others are also having problems at https://groups.google.com/forum/#!topic/native-client-discuss/ViBofmhWpyM

Labels: Needs-Milestone Needs-Bisect
Labels: -Needs-Bisect -Type-Bug-Regression Triaged-ET M-67 Target-67 FoundIn-67 Type-Bug
Status: Untriaged (was: Unconfirmed)
Able to reproduce the issue on Ubuntu 14.04 using chrome reported version #65.0.3325.181 and latest canary #67.0.3390.0. Issue is not seen in OS-Mac.
On OS-Win the command naclsdk list was shown an not recognized command.
This is a non-regression issue as it is observed from M60 old builds. 

Hence, marking it as untriaged to get more inputs from dev team.

Thanks...!!
Owner: bradnelson@chromium.org
Status: Assigned (was: Untriaged)
cacerts.txt needs to be updated. This one works:
https://github.com/Kagami/nacl_sdk/blob/master/sdk_tools/cacerts.txt

You can create it by yourself by concatenating 3 certs from:

$ openssl s_client -showcerts -connect storage.googleapis.com:443
$ cat /etc/ssl/certs/GlobalSign_Root_CA_-_R2.pem
Components: -Platform>DevTools Platform>NaCl

Sign in to add a comment