1130781 - ecdhe_rsa_aes_256_sha to google.com fails without error message

Status: RESOLVED DUPLICATE of bug 1121706

(Core :: Security: PSM, defect)

Description

[Thomas Peters]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:35.0) Gecko/20100101 Firefox/35.0
Build ID: 20150122214805

Steps to reproduce:

1. In about:config disable all cipher suites except for ecdhe_rsa_aes_256_sha
2. Connect to https://www.google.com/



Actual results:

Nothing happens. Blank page. No error message.


Expected results:

Google start page should show up.

In fact, ECDHE-RSA-AES256-SHA is one of the supported ciphers, "openssl s_client -cipher ECDHE-RSA-AES256-SHA -connect www.google.com:443 -servername www.google.com" works as expected, and ssltap shows that Firefox receives a correct ServerHello but then the connection is terminated.

To get it working again you have to enable ecdhe_rsa_aes_128_gcm_sha256.

Comment 1

[Dana Keeler (she/her) [:keeler]]

Thanks for the report. This should be fixed in 36, but see also bug 1121706 comment 29 and bug 1122642.