Juju GUI does not load in Firefox

[Adam Collard]

Accessing the GUI using Firefox 33.0 on Ubuntu 14.04 LTS, just hangs the browser and causes CPU usage to spike. I don't have the same issue when using Chromium 39.0.2171.65.

[Jeff Pihach (hatch)]

Hi Adam, I'm not able to reproduce this. Can you give me a little information on the environment you're in? Is this just on demo.jujucharms.com? If it's a real environment was it deployed to Trusty or Precise? What version of the charm was deployed.

Thanks.

[Jeff Pihach (hatch)]

Also do you have any plugins installed in Firefox?

[Adam Collard (adam-collard)]

 H

On 28 November 2014 at 15:14, Jeff Pihach <email address hidden>
wrote:

> Hi Adam, I'm not able to reproduce this. Can you give me a little
> information on the environment you're in? Is this just on
> demo.jujucharms.com? If it's a real environment was it deployed to

Trusty or Precise?

Trusty, with a MAAS environment running OpenStack as installed by the
Autopilot.

> What version of the charm was deployed.
>

I just did a plain juju deploy juju-gui --to 0, so I'm guessing it's
whatever is in the charm store for Trusty.

> Also do you have any plugins installed in Firefox?

Before filing the bug I disabled almost all of my extensions. In terms of
actual plugins I have Flash, Google Talk, Totem+VLC, Java (IcedTea-Web)
running.

[Richard Harding (rharding)]

Adam can you step back juju-gui charm versions and see if there's some
regression in the latest release?
On Nov 28, 2014 11:10 AM, "Adam Collard" <email address hidden> wrote:

> H
>
> On 28 November 2014 at 15:14, Jeff Pihach <email address hidden>
> wrote:
>
> > Hi Adam, I'm not able to reproduce this. Can you give me a little
> > information on the environment you're in? Is this just on
> > demo.jujucharms.com? If it's a real environment was it deployed to
>
> Trusty or Precise?
>
>
> Trusty, with a MAAS environment running OpenStack as installed by the
> Autopilot.
>
>
> > What version of the charm was deployed.
> >
>
>
> I just did a plain juju deploy juju-gui --to 0, so I'm guessing it's
> whatever is in the charm store for Trusty.
>
> > Also do you have any plugins installed in Firefox?
>
> Before filing the bug I disabled almost all of my extensions. In terms of
> actual plugins I have Flash, Google Talk, Totem+VLC, Java (IcedTea-Web)
> running.
>
> --
> You received this bug notification because you are a member of Juju GUI
> Hackers, which is subscribed to juju-gui.
> https://bugs.launchpad.net/bugs/1397296
>
> Title:
> GUI inaccessible in Firefox 33.0
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/juju-gui/+bug/1397296/+subscriptions
>

[Adam Collard (adam-collard)]

Well after a bit of manual bisecting here's what I've found (all versions prefixed with cs:trusty/)

juju-gui-2 works fine
juju-gui-4, juju-gui-10, juju-gui-14, juju-gui-15, juju-gui-16 don't

juju-gui-3 gets further than any of the later versions (I see Connecting to the Juju environment and spin) but doesn't work nearly as well as -2

[Adam Collard (adam-collard)]

Note all versions were tested with Firefox 34.0 on Trusty, running in -safe-mode.

[Richard Harding (rharding)]

Talked with Adam, it happened both in and out of private mode in FF, worked in chromium.

This was the latest version of the juju-gui charm on trusty.

The FF browser was unable to connect to the gui server wss:

" Firefox can't establish a connection to the server at wss://IPGOESHERE/ws/environment/xxxxx/api."

[Andreas Hasenack (ahasenack)]

Same here. I use "juju deploy juju-gui --to lxc:0", trusty, and firefox can't see the login form. Chromium does it just fine.

[Richard Harding (rharding)]

Can anyone test this with the https turned off on the charm? I wonder if
the VPN/proxying is upsetting firefox security
On Mar 10, 2015 1:51 PM, "Andreas Hasenack" <email address hidden> wrote:

> Same here. I use "juju deploy juju-gui --to lxc:0", trusty, and firefox
> can't see the login form. Chromium does it just fine.
>
> ** Changed in: juju-gui
> Status: New => Confirmed
>
> --
> You received this bug notification because you are a member of Juju GUI
> Hackers, which is subscribed to juju-gui.
> https://bugs.launchpad.net/bugs/1397296
>
> Title:
> GUI inaccessible in Firefox 33.0
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/juju-gui/+bug/1397296/+subscriptions
>

[Jeff Pihach (hatch)]

As a temporary workaround for this issue you can either:
  - Use chrome/chromium
  OR
  - Set the `secure` option in the GUI charm to `false` and then visit the non https url. (port 80). `juju set juju-gui secure=false`
    - You may have to refresh the page a couple times.

[Richard Harding (rharding)]

Thanks everyone for the details and info that let us narrow this down to something that Firefox's security model doesn't like about secure websocket connections through the company firewall. We'll be chasing down replicating this and getting a fix out. We don't normally have a lot of need to go through the company vpn so it'll take some setup to chase down the recent email/docs on that and tracking this down.

[Andreas Hasenack (ahasenack)]

I started firefox with a new profile (firefox -P) and accessed the URL that was hanging. It works. Adam, can you try that too?

[Adam Collard (adam-collard)]

Confirmed that accessing with a clean Firefox profile has no issues.

Yikes!

[Richard Harding (rharding)]

so now the question is what in the word was in everyone's profile (e.g.
really common) that a fresh profile does not have?
On Mar 11, 2015 7:11 AM, "Adam Collard" <email address hidden> wrote:

> Confirmed that accessing with a clean Firefox profile has no issues.
>
> Yikes!
>
> --
> You received this bug notification because you are a member of Juju GUI
> Hackers, which is subscribed to juju-gui.
> https://bugs.launchpad.net/bugs/1397296
>
> Title:
> GUI inaccessible in Firefox 33.0
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/juju-gui/+bug/1397296/+subscriptions
>

[Adam Collard (adam-collard)]

Indeed. I tried to narrow this down, but failed pretty quickly

> diff -u $CLEAN_PROFILE/prefs.js $DEFAULT_PROFILE/prefs.js | wc -l
539

A lot of it seems to be extension related (e.g. LastPass) even though I've removed all extensions that aren't in the clean profile

[Richard Harding (rharding)]

Thanks to Adam he's found this far less destructive method of fixing things in Firefox at the moment:

https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings

That gives you a button and maintains bookmarks and the like you might have setup for a demo and such.

[Richard Harding (rharding)]

Just to document some research from Adam to help us trace it farther.

12:15 sparkiege| rick_h: copying my cert8.db from the broken profile into my new refreshed profile reintroduces the breakage
12:19 sparkiege| rick_h: so my current hand waving answer is "something to do with certificates combined with lack of reverse
                  DNS entries"
12:19 sparkiege| rick_h: what's curious is I *don't* have a trusted entry for that IP
12:19 sparkiege| (am accessing over IP)

[Jeff Pihach (hatch)]

Adam and I spent time to track down this issue in its entirety and come up with a solution which doesn't involve you using Chrome or an insecure connection.

Workaround:
    - In Firefox open the Preferences and switch to the Advanced pane.
    - Click the View Certificates button.
    - Change to the Authorities tab and scroll down to certificates with the name your-jujugui.local
    - Delete all of these certificates
    - Restart Firefox and revisit the page and it will load up as expected.

Fix:
    The juju-gui charm generates a self signed certificate on install. It uses a CN of your-jujugui.local. This needs to be changed to contain a unique hash for every install.