1146090 - netbanking.yesbank.co.in is RC4 only

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Mayank Bansal]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0
Build ID: 20150320030211

Steps to reproduce:

1. Go to http://www.yesbank.in/
2. On the right hand side is the login button. Click on it.
3.  A popup window will open.  Press "Continue" button on it.


Actual results:

The page shows "Secure Connection failed" error


Expected results:

The login page should have opened up.

Comment 1

[Andre Klapper]

The page does not show "Secure Connection failed" error here, but on https://netbanking.yesbank.co.in/netbanking/entry I get "This website does not supply identity information" when clicking on the icon in the address bar.
The login page DOES open here.

Please provide a screenshot and try without add-ons etc.

Comment 2

[Mayank Bansal]

Attachment: bug.png

This is what i get on https://netbanking.yesbank.co.in/netbanking/entry

Comment 3

[Mayank Bansal]

Attachment: no bug.png

This is what i get on chrome beta.

Comment 4

[:Cykesiopka]

This server is RC4 only.

https://www.ssllabs.com/ssltest/analyze.html?d=netbanking.yesbank.co.in :
> Cipher Suites (sorted by strength; the server has no preference)
> TLS_RSA_WITH_RC4_128_MD5 (0x4)
> TLS_RSA_WITH_RC4_128_SHA (0x5)

(In reply to Andre Klapper from comment #1)
> The page does not show "Secure Connection failed" error here, but on
> https://netbanking.yesbank.co.in/netbanking/entry I get "This website does
> not supply identity information" when clicking on the icon in the address
> bar.

RC4 connections get this treatment starting from Firefox 36. Firefox 39 and above fail the connection for sites not on a whitelist, and show a SSL_ERROR_NO_CYPHER_OVERLAP error page.

Comment 5

[Masatoshi Kimura [:emk]]

Fixed.