Updating revisited..

I’d like to revisit something about Updates and versions < 2.49.x.  [This could possibly be a repeat note.]

If you check for updates for versions < 2.38 [iirc],  you will get an “Update Failed” message along with information stating that the “Update XML file malformed (200)” message.

This is a known issue.  It stems from the fact that client doesn’t recognize the certificate that’s being supplied by the site.

Can something be done about this?  Aside for the user manually downloading and installing the latest version, unfortunately, there’s nothing that we can do.  At least, nothing that would make sense in doing.


What needs to be done is to make the old installed version recognize the certificates as well as support the correct set of ssl cyphers.  The former can probably be achieved by manually downloading the new certificate roots.  The latter, unfortunately will be blocking the former as well, since this is a code-based issue.  So patches will need to be created to be applied to the binary code.   I’d hazard a guess that no one will be able to take that time to create patches on old source to get old clients to update to the newest version.

So, all in all, it’d be a lot easier just to download and install the latest, providing the operating system is supported by the latest version.  [I can certainly post a rant on this support issue… but I digress..]

And with the possibility of aus2-community’s domain being decommissioned, versions <= 2.53.4  will require an addition to your “user.js” file to redirect to the actual updates site.

Best regards,



Posted in Infrastructure, seamonkey | 3 Comments

SeaMonkey 2.53.9 is out!


The SeaMonkey Project is pleased to announce the release of SeaMonkey
2.53.9 final.

So please check out [1] or [2].

Thanks to all involved.


PS: Yes, the updates are working.

[1] - https://www.seamonkey-project.org/releases/2.53.9
[2] - https://www.seamonkey-project.org/releases/seamonkey2.53.9/
Posted in Uncategorized | 9 Comments

SeaMonkey 2.53.9 Beta 1 is out!

Hi All,

The SeaMonkey Project is pleased to announce the immediate release of the next Beta version of SeaMonkey, 2.53.9b1.

Please check out [1] and [2].

Note that the updates are enabled; but seems to require some bit of time to be recognized.  Currently investigating the issue.


[1] – https://www.seamonkey-project.org/releases/seamonkey2.53.9/

[2] – https://www.seamonkey-project.org/releases/2.53.9b1


Posted in Uncategorized | 1 Comment

SeaMonkey 2.53.7, en-US/zh_TW..

Just for the sake of jogging memory (as I just forgot about this and was trying to figure out what I did wrong):

SeaMonkey 2.53.7 en-US/zh-TW users need to manually upgrade to

Or, for the sake of ‘fun’,  just install 2.53.8 and have the system upgrade it to  Why would you do that?  *shrug*  For <something> and giggles..   Just so to prove it works.



Posted in seamonkey | Leave a comment

SeaMonkey is out!

Hi All,

Just a quick note that SeaMonkey is out!  The Updates part should work as intended…

Please do read the Release notes at [1].


[1] – https://www.seamonkey-project.org/releases/seamonkey2.53.8.1/


Posted in seamonkey | 4 Comments


Hi All,

I hope everyone is doing well.


After struggling for so long, I’m happy to announce that I’ve pushed the Updates server to live.  While I (and others) have tested against our installed versions, with the user base so broad, it’s difficult to find the edge cases.  Hopefully this will help us improve the updates server.

Long form:

So updates are now being served with the following caveats:

  •  versions <= 2.49.5: are unfortunately not supported.  The main rationale for this is the fact that the changes from <= 2.49.5 to 2.53.* could corrupt client data. [*][**]
  • 2.53.1 -> 2.53.4: These version still use the old aus2-community.mozilla.org domain.  A simple user.js addition can fix this.  That said, this domain will be decommissioned (not under our control, but I’m guessing this will be an eventuality).  So when it does gets decommissioned, all versions <= 2.53.4 will be getting server not found or some such similar notice on the Update dialog.   While the user.js changes can fix it until the client is updated, it’s the only workaround.
  • 2.53.x: are not affected and can be updated but with the following sub-caveat:
    • 2.53.7, en-US/zh-TW: Due to a build issue, the en-US client would request zh-TW updates, which it would have gotten and thus confusing the user.  Workaround: Manually update to to get the update to 2.53.8…  or just install 2.53.8.  Again… this applies *only* to 2.53.7 and to locales en-US and zh-TW. All other locales are unaffected.

[*] – Manual update is still possible (provided that your operating system is supported.  Please *always* backup your profile.  While it is possible to use the same user.js to get clients to use the new update server,  versions <= 2.33 won’t actually recognize the new server due to the Certificate trust issues.  Unfortunately, this can’t be helped and it is impractical to fix (especially given the small group we have at SeaMonkey central).

[**] – Technically speaking, it is possible to get the update served for at least versions >= 2.38. (Anything less is not possible due to certificate trust issues and updating these clients’ certificate info has come to the stage of being ‘impractical’ given our resources.)  That said, while it is technically possible, it might just well be infeasible/impractical (again, given the resources we have).  To be honest, I’m not happy about this myself; but realistically speaking, we all have only so much time to spend on this project.  I feel this might be considered a cop-out/excuse.

I had the original intention when I first started the updates server project to update every (yes.. I mean *every* — incl. 1.x) single SeaMonkey version to the latest(depending on OS support);  but as I mentioned before during my update investigations,  it isn’t possible.

I’ll summarize here:

  • 1.x and 2.0.x are no longer supported (doubt anyone can support these versions.. not even sure the code can compile on  modern-day computers w/ modern day compilers.. but.. having not compiled anything lately…  I could be wrong).
  • Versions <= 2.33 have issues with certificate trust so they can’t even connect to the new update server without given you an “Untrusted connection issue”, if and when you use the user.js changes to point the clients to the new update server.
  • 2.49.1 – 2.49.5: These can be updated to 2.53.8 but require the following:
    • a special update package due to the change in update format which upgrades the 2.49.5 to 2.53.1, which can then upgrade to 2.53.8.
    • user.js changes/additions.
    • OS-supported.  2.49.5 is the last version that supports <=XP and <=OSX10.8
  • 2.53.1 – 2.53.4: Need a change/addition to user.js to update to 2.53.8 due to server change.

On the page, it looks simple and one may wonder why the hell can’t we update anything we want to the latest and greatest(again, OS dependent).  I can tell you it isn’t without trying.  I know that’s not saying a lot really.  Since I’ve been struggling with this for so long,  I sometimes wonder if someone else might do a better job… and I think someone can.  The project just needs to find that someone.  In the meantime, I’m continually plugging away at this.

My next project is the crash reporter server.  (Context-switching is difficult.) Hopefully, once that’s out of the way, I can go back and help out with the code.

Anyway, I’ve written a lot this time, and I do appreciate everyone’s patience (especially,  my fellow devs).

It’s been very tough on everyone lately due to the pandemic so I hope everyone is keeping safe and healthy.

Best Regards,


Posted in seamonkey | 3 Comments

SeaMonkey 2.53.8 is out!

Hi All,

This is a quick announcement that SeaMonkey 2.53.8 has been released!

Please check it out at [1] or [2].


PS: Updates are being tested..

[1] – https://www.seamonkey-project.org/releases/seamonkey2.53.8/

[2] – https://www.seamonkey-project.org/releases/2.53.8#official


Posted in seamonkey | 1 Comment

SeaMonkey 2.53.8 Beta 1 is out!

Hi All,

Just want to mention that SeaMonkey 2.53.8 Beta 1 is out.

Please visit [1] for more info:

[1] – https://www.seamonkey-project.org/releases/2.53.8b1

PS: Yes, quite a brief mention.  Working on the updates situation…

Posted in seamonkey | 2 Comments



Updates are still unavailable.


What I had thought was a working system turned out that it wasn’t working that well.  It worked when I ran updates and it worked for others on the test site.   But in production,  it worked only for a few.  Some updates were given in zh-*.    So instead of keeping it up and giving people bad updates, I’ve opted to switch off the updates altogether until I can get my stuff together.

So…  back to the drawing board (but not square one).

My apologies for those affected by the locale switch.  But I thank you all for the precious feedback.


Posted in seamonkey | Leave a comment

Updates [Addendum]

Hi again,

In my previous post, I mentioned aus2-community.mozilla.org’s update domain will be decommissioned.   Why?  Because while the system running as aus2-community.mozilla.org is under our control,  the domain itself is Mozilla’s.  It’s a Mozilla management/security concern that an external system is using their domain.  That’s understandable.  So this domain will eventually retire.  ;/

This means that all versions that point to that domain will be calling /dev/null. IOW, you won’t get any response.

Will there be a patch so that all versions point to the newer updates.seamonkey-project.org?   Unfortunately, no.

While it is possible to point old versions to the new update domain, there’s little point in doing so as mentioned in the previous post.  No updates.

Incidentally, while I’m at it (and can remember), the Mozilla crash-stats server will no longer be accepting crash-stats from SeaMonkey post 2nd Quarter (I think it was July).  This means that until we’ve set up a new crash-stats server (2nd in priority behind the updates server),  future crashes will be ignored by Mozilla’s crash-stats server.

Why is this happening?  Lessens the burden of Mozilla’s crash-stats system and maintenance.  That’s the gist of it.  Since this has already been decided, I’m not going to dwell on it.  It’s just another added priority for us.

Best Regards,


Posted in seamonkey | Leave a comment