Don’t enable HTTPS-Only Mode --Firedragon (Not Working)

Issues & Assistance FireDragon
1 
System:
  Kernel: 6.10.0-zen1-2-zen arch: x86_64 bits: 64 compiler: gcc v: 14.1.1
    clocksource: tsc avail: acpi_pm
    parameters: BOOT_IMAGE=/@/boot/vmlinuz-linux-zen
    root=UUID=06ceeb9f-eb5d-400b-b1c9-1120b55c6af1 rw rootflags=subvol=@
    quiet loglevel=3 ibt=off
  Desktop: Hyprland v: 0.41.2 with: waybar tools: avail: xautolock vt: 8
    dm: LightDM v: 1.32.0 Distro: Garuda base: Arch Linux
Machine:
  Type: Laptop System: Hewlett-Packard product: HP EliteBook 840 G2
    v: A3009D510203 serial: <superuser required> Chassis: type: 10
    serial: <superuser required>
  Mobo: Hewlett-Packard model: 2216 v: KBC Version 96.56
    serial: <superuser required> part-nu: N0Y03UC#ABU uuid: <superuser required>
    UEFI: Hewlett-Packard v: M71 Ver. 01.09 date: 09/01/2015
Battery:
  ID-1: BAT0 charge: 8.3 Wh (98.8%) condition: 8.4/8.4 Wh (100.0%) volts: 12.3
    min: 11.4 model: Hewlett-Packard Primary type: Li-ion serial: <filter>
    status: not charging
CPU:
  Info: model: Intel Core i5-5300U bits: 64 type: MT MCP arch: Broadwell
    gen: core 5 level: v3 note: check built: 2015-18 process: Intel 14nm
    family: 6 model-id: 0x3D (61) stepping: 4 microcode: 0x2F
  Topology: cpus: 1x cores: 2 tpc: 2 threads: 4 smt: enabled cache:
    L1: 128 KiB desc: d-2x32 KiB; i-2x32 KiB L2: 512 KiB desc: 2x256 KiB
    L3: 3 MiB desc: 1x3 MiB
  Speed (MHz): avg: 1846 high: 2211 min/max: 500/2900 scaling:
    driver: intel_cpufreq governor: schedutil cores: 1: 1762 2: 1204 3: 2210
    4: 2211 bogomips: 18358
  Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx
  Vulnerabilities: <filter>
Graphics:
  Device-1: Intel HD Graphics 5500 vendor: Hewlett-Packard ZBook 15u G2
    Mobile Workstation driver: i915 v: kernel arch: Gen-8 process: Intel 14nm
    built: 2014-15 ports: active: eDP-1 empty: DP-1, DP-2, HDMI-A-1, HDMI-A-2
    bus-ID: 00:02.0 chip-ID: 8086:1616 class-ID: 0300
  Device-2: Cheng Uei Precision Industry (Foxlink) HP EliteBook integrated
    HD Webcam driver: uvcvideo type: USB rev: 2.0 speed: 480 Mb/s lanes: 1
    mode: 2.0 bus-ID: 2-7:5 chip-ID: 05c8:0374 class-ID: 0e02
  Display: wayland server: X.org v: 1.21.1.13 with: Xwayland v: 24.1.1
    compositor: Hyprland v: 0.41.2 driver: X: loaded: modesetting
    alternate: fbdev,intel,vesa dri: iris gpu: i915 display-ID: 1
  Monitor-1: eDP-1 model: AU Optronics 0x233e built: 2012 res: 1600x900
    dpi: 132 gamma: 1.2 size: 309x174mm (12.17x6.85") diag: 355mm (14")
    ratio: 16:9 modes: 1600x900
  API: Vulkan v: 1.3.279 layers: 4 device: 0 type: integrated-gpu name: Intel
    HD Graphics 5500 (BDW GT2) driver: mesa intel v: 24.1.4-arch1.2
    device-ID: 8086:1616 surfaces: xcb,xlib,wayland device: 1 type: cpu
    name: llvmpipe (LLVM 18.1.8 256 bits) driver: mesa llvmpipe
    v: 24.1.4-arch1.2 (LLVM 18.1.8) device-ID: 10005:0000
    surfaces: xcb,xlib,wayland
  API: EGL Message: EGL data requires eglinfo. Check --recommends.
Audio:
  Device-1: Intel Broadwell-U Audio vendor: Hewlett-Packard
    driver: snd_hda_intel v: kernel bus-ID: 00:03.0 chip-ID: 8086:160c
    class-ID: 0403
  Device-2: Intel Wildcat Point-LP High Definition Audio
    vendor: Hewlett-Packard driver: snd_hda_intel v: kernel bus-ID: 00:1b.0
    chip-ID: 8086:9ca0 class-ID: 0403
  API: ALSA v: k6.10.0-zen1-2-zen status: kernel-api tools: N/A
  Server-1: sndiod v: N/A status: off tools: aucat,midicat,sndioctl
  Server-2: PipeWire v: 1.2.1 status: active with: 1: pipewire-pulse
    status: active 2: wireplumber status: active 3: pipewire-alsa type: plugin
    4: pw-jack type: plugin tools: pactl,pw-cat,pw-cli,wpctl
Network:
  Device-1: Intel Ethernet I218-LM vendor: Hewlett-Packard driver: e1000e
    v: kernel port: 5080 bus-ID: 00:19.0 chip-ID: 8086:15a2 class-ID: 0200
  IF: enp0s25 state: down mac: <filter>
  Device-2: Intel Wireless 7265 driver: iwlwifi v: kernel pcie: gen: 1
    speed: 2.5 GT/s lanes: 1 bus-ID: 03:00.0 chip-ID: 8086:095a class-ID: 0280
  IF: wlo1 state: up mac: <filter>
  IF-ID-1: podman0 state: up speed: 10000 Mbps duplex: unknown mac: <filter>
  IF-ID-2: veth0 state: up speed: 10000 Mbps duplex: full mac: <filter>
  IF-ID-3: veth1 state: up speed: 10000 Mbps duplex: full mac: <filter>
  Info: services: NetworkManager, systemd-timesyncd, wpa_supplicant
Bluetooth:
  Device-1: Intel Bluetooth wireless interface driver: btusb v: 0.8 type: USB
    rev: 2.0 speed: 12 Mb/s lanes: 1 mode: 1.1 bus-ID: 2-4:3 chip-ID: 8087:0a2a
    class-ID: e001
  Report: btmgmt ID: hci0 rfk-id: 0 state: up address: <filter> bt-v: 4.0
    lmp-v: 6 status: discoverable: no pairing: no class-ID: 6c010c
RAID:
  Hardware-1: Intel 82801 Mobile SATA Controller [RAID mode] driver: ahci
    v: 3.0 port: 5060 bus-ID: 00:1f.2 chip-ID: 8086:282a rev: N/A class-ID: 0104
Drives:
  Local Storage: total: 111.79 GiB used: 86.51 GiB (77.4%)
  SMART Message: Required tool smartctl not installed. Check --recommends
  ID-1: /dev/sda maj-min: 8:0 vendor: Western Digital
    model: WD1200BEVS-60UST0 size: 111.79 GiB block-size: physical: 512 B
    logical: 512 B speed: 1.5 Gb/s tech: N/A serial: <filter> fw-rev: 1A01
    scheme: GPT
Partition:
  ID-1: / raw-size: 97.66 GiB size: 97.66 GiB (100.00%)
    used: 43.26 GiB (44.3%) fs: btrfs dev: /dev/sda1 maj-min: 8:1
  ID-2: /boot/efi raw-size: 500 MiB size: 499 MiB (99.80%)
    used: 584 KiB (0.1%) fs: vfat dev: /dev/sda3 maj-min: 8:3
  ID-3: /home raw-size: 97.66 GiB size: 97.66 GiB (100.00%)
    used: 43.26 GiB (44.3%) fs: btrfs dev: /dev/sda1 maj-min: 8:1
  ID-4: /var/log raw-size: 97.66 GiB size: 97.66 GiB (100.00%)
    used: 43.26 GiB (44.3%) fs: btrfs dev: /dev/sda1 maj-min: 8:1
  ID-5: /var/tmp raw-size: 97.66 GiB size: 97.66 GiB (100.00%)
    used: 43.26 GiB (44.3%) fs: btrfs dev: /dev/sda1 maj-min: 8:1
Swap:
  Kernel: swappiness: 133 (default 60) cache-pressure: 100 (default) zswap: no
  ID-1: swap-1 type: zram size: 11.56 GiB used: 1.08 GiB (9.4%)
    priority: 100 comp: zstd avail: lzo,lzo-rle,lz4,lz4hc,842 max-streams: 4
    dev: /dev/zram0
Sensors:
  System Temperatures: cpu: 53.0 C mobo: N/A
  Fan Speeds (rpm): N/A
Info:
  Memory: total: 12 GiB available: 11.56 GiB used: 5.71 GiB (49.4%)
  Processes: 254 Power: uptime: 1h 33m states: freeze,mem,disk suspend: deep
    avail: s2idle wakeups: 0 hibernate: platform avail: shutdown, reboot,
    suspend, test_resume image: 4.61 GiB services: upowerd Init: systemd
    v: 256 default: graphical tool: systemctl
  Packages: 1645 pm: pacman pkgs: 1623 libs: 440 tools: pacseek,paru
    pm: flatpak pkgs: 22 Compilers: clang: 18.1.8 gcc: 14.1.1 Shell: garuda-inxi
    default: fish v: 3.7.1 running-in: tmux: inxi: 3.3.35
Garuda (2.6.26-1):
  System install date:     2024-05-09
  Last full system update: 2024-07-25 ↻
  Is partially upgraded:   No
  Relevant software:       snapper NetworkManager dracut
  Windows dual boot:       No/Undetected
  Failed units:

As stated, Firedragon is upgrading all my http connections https despite me toggling this option on. Testing it on Floorp works just fine.
Firedragon is my daily driver now and I really don’t wan’t my connections upgraded.

2

Good thing you tried with Floorp.

Maybe there is a config set that forces this.

Can you follow the step (3rd one) about the config files in this post and it should help narrow-down.

Are you saying you cannot reach ANYTHING that starts with http://?
I know I can, so maybe it’s not the config file but let’s try.

3

I can reach sites with http://, it is just that the connections are upgraded to https://.

The problem is that:

  1. When going to the history tab and loading what I was previously viewing… since its going to https://, I will have to edit the url again back to http:// actually access the link I wanted.

Doing this once is not a problem, but having to do it over and over again is kinda tiresome.

Will try your recommendation and see… later on

4

Hum, when I take an http:// in my history and load it, some automatically switch to https:// as well, but it still loads the page and some others (local instance of Whoogle) keep http:// and loads the page.

You could also try to Manage Exception in the HTTPS-Only Mode. Of course you can’t add every site but just 1 to see if that works.

Not sure if a Proxy can affect here but I guess most people don’t use one.

5

As far as I can tell HTTPS-Only-Mode is not forced only activated by default for all sites (see line here). And I tested it in a fresh profile, I was able to deactivate HTTPS-Only-Mode.

Additionally HTTPS-Only-Mode normally does not upgrade to HTTPS when it is not available, it will show a warning message and allows you to continue to HTTP (see docs here). To not see this message you can also permanently add it to the exception list, as described in the docs.

If this does not work, check that your /usr/lib/firedragon/firedragon.cfg is identical to upstream. Or try testing it in a fresh profile (about:profile).

3 Likes
6

I don’t know how to explain,… I tweaked my theme to suite my workflow. I would love to create a new profile but I am kinda occupied.

image
image1430×30 6.26 KB

As you can see this is a locally hosted site on my machine. Since its been upgraded to https, I can not access it. I will be able to access it when I go back to http, but it will automatically upgrade it to https.

Tested on a different profile and it is fine. Its going to take a lot of time to switch to it. So I will mark this as the solution.

Thanks @FGD @stefanwimmer128

7

[quote=“Yada, post:6, topic:38288”]
Tested on a different profile and it is fine. Its going to take a lot of time to switch to it.[/quote]

This weird behavior with such a solution isn’t uncommon, I personally got hit by that as well, during testing months ago. For some reason the Profile got corrupted and yes it took a while to migrate to a new one from fresh, but in the end the problem never came back.
Others have experienced their own corruption and in many cases the new Profile fixed it. Which most probably explains why it worked on Floorp since it was a new Profile there.

2 Likes
8

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.