105432 - cannot connect to SSL at http://www.net2phone.com/home.html

Status: VERIFIED WORKSFORME

(Core Graveyard :: Security: UI, defect, P3)

Description

[Gabor Liptak]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.5+)
Gecko/20011014
BuildID:    2001101408

cannot connect to SSL at http://www.net2phone.com/home.html

Reproducible: Always
Steps to Reproduce:
1. browse to http://www.net2phone.com/home.html
2. fill in anything for Account/Username and PIN/Password in the top left corner
3. Submit

Actual Results:  You will see a popup indicating SSL error

Expected Results:  proper connection

Comment 1

[Olivier Cahagne]

wfm using build 2001101308 on Win2k. I do get any SSL popup. The certificate
appears to be a valid one.

Reporter, perhaps you can try latest Mozilla build or create a new profile
(Start Mozilla with 'mozilla -profilemanager') and try again.

Then might be dup of bug 104699.

Comment 2

[Olivier Cahagne]

wfm using build 2001101308 on Win2k. I do get any SSL popup. The certificate
appears to be a valid one.

Reporter, perhaps you can try latest Mozilla build or create a new profile
(Start Mozilla with 'mozilla -profilemanager') and try again.

Then might be dup of bug 104699.

Comment 3

[Gabor Liptak]

on 2001101803,new profile does work.

on the existing profile the error message is:

unknown SSL error (-8061)

Comment 4

[Mitchell Stoltz (not reading bugmail)]

->PSM

Comment 5

[Stephane Saux]

There is something wrong with your profile. I tried and I can connect to the
site with an existing profile.
marking worksforme.

Comment 6

[Gabor Liptak]

Stephane,

Maybe this "something wrong" could be investigated in more detail (before the 
1.0 user population starts experiencing similar problems ...)

Comment 7

[John Unruh]

cc nelsonb - can you tells us what unknown SSL error (-8061) means in Additional 
Comments From Gabor Liptak 2001-10-18 11:14 -------?

Comment 8

[Nelson Bolyard (seldom reads bugmail)]

John,  For future reference ...

error numbers in the range [-12k .. -11K] are SSL errors.
Their values and symbolic names are defined in 
http://lxr.mozilla.org/mozilla/source/security/nss/lib/ssl/sslerr.h
and the suggested ASCII English strings for those errors are in
http://lxr.mozilla.org/mozilla/source/security/nss/cmd/lib/SSLerrs.h#37

error numbers in the range [-8k .. -7k] are NSS ("SEC") errors.
Their values and symbolic names are defined in 
http://lxr.mozilla.org/mozilla/source/security/nss/lib/util/secerr.h#38
and the suggested ASCII English strings for those errors are in
http://lxr.mozilla.org/mozilla/source/security/nss/cmd/lib/SECerrs.h#37

error numbers in the range [-6000 .. -5001] are NSPR errors.
Their values and symbolic names are defined in 
http://lxr.mozilla.org/mozilla/source/nsprpub/pr/include/prerr.h#44
and the suggested ASCII English strings for those errors are in
http://lxr.mozilla.org/mozilla/source/security/nss/cmd/lib/NSPRerrs.h#33

Comment 9

[Nelson Bolyard (seldom reads bugmail)]

So, if my arithmetic is correct, -8061 == -8192 + 131
According to 
http://lxr.mozilla.org/mozilla/source/security/nss/lib/util/secerr.h#178
that's SEC_ERROR_OCSP_FUTURE_RESPONSE
And, according to 
http://lxr.mozilla.org/mozilla/source/security/nss/cmd/lib/SECerrs.h#438
this means
"The OCSP response is not yet valid (contains a date in the future)"

Comment 10

[Gabor Liptak]

out of synch clocks between my machine and the website?

Comment 11

[Nelson Bolyard (seldom reads bugmail)]

Is your system a Windows 9x system, perhaps?
Those are notorious for being confused about what timezone they're in.

Regardless of the O.S. you're using, if your machine thinks it is in a 
timezone that is to the east of the zone it's really in, you might get this 
error.  

Comment 12

[Gabor Liptak]

hmmm .. I have Eastern Time (with daylight savings) set, which should be correct

Comment 13

[Gabor Liptak]

and I do not recall seeing this when accessing other https sites

Comment 14

[Gabor Liptak]

actually I'm just seeing this when connecting to hotmail.passport.com. The same
error code -8061

Comment 15

[Gabor Liptak]

and it also showing for http://www.rebatestatus.com/ (which forwards to https) ...

Comment 16

[John Unruh]

Verified. Dupe of bug 130885