56935 - Cannot post using ssl proxy

Status: VERIFIED FIXED

(Core :: Networking, defect, P1)

Description

[Tom Everingham]

Overview Description:  Cannot post data while going through ssl proxy.

Steps to Reproduce:  
1.)  Go to url
2.)  select 'proceed' to secure voting site

Actual Results:  Browser does not make it to the https site.  Busy bar spins for 
a few seconds and then stops.

Expected Results:  Should make it to an online voting page or get a message that 
the page is closed.

Build Date & Platform Bug Found:
WinNT 1016 build, Mac os9 1016 build

Additional Information:

relevant html -
<FORM METHOD="POST" ACTION="https://www.eproxyvote.com/cgi-bin/voting.cgi" 
NAME="welcome">

using trace+ sniffer - when I click proceed I see all kinds of garbage data 
being sent back and forth across the network before a CONNECT is sent such as:
S 0010  2E 65 6E 61 62 6C 65 5F-73 73 6C 32 00 00 00 04   .enable_ssl2....
S 0020  74 72 75 65 00 00 00 01-00 00 00 14 73 65 63 75   true........secu
S 0030  72 69 74 79 2E 65 6E 61-62 6C 65 5F 73 73 6C 33   rity.enable_ssl3
S 0040  00 00 00 04 74 72 75 65-00 00 00 01 00 00 00
etc. 

bug 31174 needs to be fixed before you can view an https page with a proxy

Comment 1

[Tom Everingham]

This is bad because it will block users from making any kind of transaction from 
behind a firewall where a secure log-in is required.  ie. buying something on 
Amazon, logging in to Etrade, etc.   Nominating for rtm.  

Comment 2

[Nikolay Igotti]

Attachment: Rich B. asked me to add the POST fix also here.

Comment 3

[Nikolay Igotti]

Seems working for all test servers I can test beside sun.net - so it's blocker
for Sun even with my fix. But for all other people this fix allows to use HTTPS
 in real life :).

Comment 4

[Rich Burridge]

All, could you please test the fix that Nikolay has attached to this
bug. As he mentions, this seems to work nicely with all sites except
our own Sun.net. This is a separate problem which we will continue to
investigate. As the checkin process for fixes at this stage of the 
end-game is involved, we'd like to get this approved for checkin to 
the Mozilla main trunk asap. When this has been soak-tested, we'll 
work towards getting the fix into the RTM branch.

Note that you should be using tip-of-the-tree Mozilla for your testing; 
in other words have the fix for 31174 already applied. Thanks.

Comment 5

[Rich Burridge]

Changing the priority/severity to reflect how important a fix to
this problem is to Sun. 

Comment 6

[Peter Trudelle]

PDT says rtm need info: need to get a=/r=, land on trunk and test it there for a
day, then mark bug rtm+ so we'll see it again.

Comment 7

[Gagan]

r=gagan 

Comment 8

[Jason Eager]

This should be a stop ship. Otherwise this kills corporate use.

Comment 9

[lchiang]

tever - Tom, can you work with Gagan after this lands on the trunk and to test
the fix to make sure of no regressions?  Pls post your findings to this bug report.

Thanks. 

Comment 10

[Scott MacGregor]

sr=mscott

Comment 11

[Tom Everingham]

when will this fix be in the trunk build?

Comment 12

[Gagan]

Fix checked into trunk. Also nominating this for the branch. PDT: This is a safe
and a needed fix.

Comment 13

[Jason Eager]

PDT: Put basically, without this fix, people behind a proxy (Which will be most
corporate users), won't be able to buy anything online (and this includes
stocks). This will pretty much kill the adoption of this browser as a corporate
standard.

Comment 14

[Phil Peterson]

rtm++

Comment 15

[Gagan]

checked into the branch as well. all done. 

Comment 16

[Tom Everingham]

verified branch - used ssl proxy frame.packetgram.com:443
- was able to login to etrade and eproxyvote
WinNT 102008
Mac os9 102008
Linux rh6 102009

needs verified on trunk 

Comment 17

[Ben Bucksch (:BenB)]

While verifying, please make sure to have no network connection other than to
the proxy.

Verified on trunk Linux. Was able to log in to my bank account via squid proxy.

Comment 18

[Rodney Velasco]

verified on trunk using SSL proxy frame.packetgram.com:443
Oct 19 Linux Trunk
Oct 23 Mac Trunk
Oct 23 Windows Trunk
Removing vtrunk keyword

Comment 19

[Ben Bucksch (:BenB)]

tever, rvelasco,

could the machine on which you tested load pages without proxy help, i.e. did it
have a net connection?