1109211 - imap.dalelektrik.com - STARTTLS; The server may have gone down or there is a network problem

Status: RESOLVED INCOMPLETE

(Thunderbird :: Security, defect)

Description

[Kaya uluer]

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 YaBrowser/14.10.2062.12521 Safari/537.36

Steps to reproduce:

Just update to 31.2.0 to 31.3.0


Actual results:

I get the message "The server may have gone down or there is a network problem."
Problem fined If I change the Connection Security from STARTTLS to NONE or downgrade Thunderbird to 31.2.0

Comment 1

[Kaya uluer]

We faced with that bug at several pc's in our office. Our Server Type is IMAP.

Comment 2

[Magnus Melin [:mkmelin]]

Probably the server uses SSL 3.0 which is now disabled starting with the 31.3.0 release?
https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/

If so dupe of bug 1085138.

Comment 3

[Kaya uluer]

~$ openssl s_client -tls1_2 -showcerts -connect imap.dalelektrik.com:143

CONNECTED(00000003)
139777207379616:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:337:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 7 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : 0000
    Session-ID: 
    Session-ID-ctx: 
    Master-Key: 
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1418205569
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
---------------------------------------------------------------

It may SSL3 and may be dupe of the bug mentioned above.

Comment 4

[Javi Rueda :javirid]

Not a crash or freeze, so no critical.

Comment 5

[Masatoshi Kimura [:emk]]

Please read bug 1107037 comment #5.

Comment 6

[Masatoshi Kimura [:emk]]

Grr, bug 1109797 comment #4.

Comment 7

[Dave Garrett]

imap.dalelektrik.com is not accessible anymore. If there is still an issue here, tracking it on Bugzilla may not be that helpful. If there's some actionable bug in a Mozilla product that can be investigated, please file a new bug or reopen this with more information. If it's just something old that's still using SSL and needs/needed upgrading, there's not much point in tracking it here. Closing.