139746 - user configuration breaks the display of SSL-encrypted pages

Status: VERIFIED DUPLICATE of bug 136210

(Core Graveyard :: Security: UI, defect, P2)

Description

[Matt Drew]

with my normal .mozilla (I've had the same one since 0.9.8) I cannot access ANY
https:// site.  When I try to go to the site, cookies are placed, the lock icon
activates, and either no page is displayed or the previous page is displayed.  A
refresh of the page results in the previous page, not the SSL page I was trying
to go to.  I have tried several sites with no success.  Two which I think could
be relied upon to be configured correctly on the server side do not work:

https://rhn.redhat.com
https://sourceforge.net

removing my .mozilla directory and starting over clears the problem, so I'm
fairly certain it is something in my configuration, but have no idea what.

Comment 1

[Matt Drew]

Attachment: the offending configuration

Here's my configuration minus my 30M Mail directory.  I can supply that if
necessary.

Comment 2

[Matt Drew]

http://appdb.codeweavers.com

is another page that does not display with this configuration as-is, but does on
a clean config. Also, Manage Stored Cookies (Privacy and Security) is blank,
though cookies are being stored and used properly.

Comment 3

[Wan-Teh Chang]

Changed the QA contact to Bishakha.

Comment 4

[Wan-Teh Chang]

Target NSS 3.5, priority P2.

Comment 5

[Nelson Bolyard (seldom reads bugmail)]

I think this is a PSM bug, not an NSS bug.

Comment 6

[Wan-Teh Chang]

Changed to product PSM for investigation.

Comment 7

[Stephane Saux]

Works for me on win2k.

John, can you try on linux?

Reporter, what's your OCSP configuration?  (prefs->Priv&Sec->validation).  If
you use OCSp turn it off.

Another thing to try is see whether you security database was somehow corrupted.
Exit Moz, Find your profile directory, and move the following files out of the way:
cert7.db
key3.db
secmod.db
restart Moz.

Which version of moz are you using?

Comment 8

[John Unruh]

WFM on Linux with the 5/9 branch build. It sounds like a corrupted DB file.

Comment 9

[Matt Drew]

Mozilla version is 1.0RC1, Build 2002041717.

OCSP option is "Do not use OCSP for certificate validation".

I removed cert7.db, key3.db, and secmod.db and restarted Mozilla, no luck.  I
noticed some other symptoms, such as the inability to manage my cookies and
several other list-based options -- all I get is a blank set of entries.

I'll try to get a chance to test this bad config against a recent build this
weekend.

Comment 10

[Matt Drew]

against build ID 2002052316 (RC3):

Shows the same error -- tries to connect, gets cookies, lock icon changes to
locked ... and no page.  Refresh brings up previous page.

Those of you who are WFM -- is it working with my .mozilla directory?

Comment 11

[John Unruh]

Duplicate. After viewing your prefs.js, I see 
user_pref("browser.cache.memory.capacity", 0);
The workaround is to set both caches to 0, or set memory cache to something 
other than 0.

*** This bug has been marked as a duplicate of 136210 ***

Comment 12

[John Unruh]

Verified.