netbanking.yesbank.co.in is RC4 only

RESOLVED FIXED

Status

Tech Evangelism
Desktop
RESOLVED FIXED
3 years ago
3 years ago

People

(Reporter: Mayank Bansal, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(URL)

Attachments

(2 attachments)

(Reporter)

Description

3 years ago
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0
Build ID: 20150320030211

Steps to reproduce:

1. Go to http://www.yesbank.in/
2. On the right hand side is the login button. Click on it.
3.  A popup window will open.  Press "Continue" button on it.


Actual results:

The page shows "Secure Connection failed" error


Expected results:

The login page should have opened up.
(Reporter)

Updated

3 years ago
Component: General → Security: PSM

Comment 1

3 years ago
The page does not show "Secure Connection failed" error here, but on https://netbanking.yesbank.co.in/netbanking/entry I get "This website does not supply identity information" when clicking on the icon in the address bar.
The login page DOES open here.

Please provide a screenshot and try without add-ons etc.
Flags: needinfo?(mayankleoboy1)
(Reporter)

Comment 2

3 years ago
Created attachment 8581283 [details]
bug.png

This is what i get on https://netbanking.yesbank.co.in/netbanking/entry
Flags: needinfo?(mayankleoboy1)
(Reporter)

Comment 3

3 years ago
Created attachment 8581284 [details]
no bug.png

This is what i get on chrome beta.

Comment 4

3 years ago
This server is RC4 only.

https://www.ssllabs.com/ssltest/analyze.html?d=netbanking.yesbank.co.in :
> Cipher Suites (sorted by strength; the server has no preference)
> TLS_RSA_WITH_RC4_128_MD5 (0x4)
> TLS_RSA_WITH_RC4_128_SHA (0x5)

(In reply to Andre Klapper from comment #1)
> The page does not show "Secure Connection failed" error here, but on
> https://netbanking.yesbank.co.in/netbanking/entry I get "This website does
> not supply identity information" when clicking on the icon in the address
> bar.

RC4 connections get this treatment starting from Firefox 36. Firefox 39 and above fail the connection for sites not on a whitelist, and show a SSL_ERROR_NO_CYPHER_OVERLAP error page.
Blocks: 1138101
Status: UNCONFIRMED → NEW
Component: Security: PSM → Desktop
Ever confirmed: true
OS: Windows 7 → All
Product: Core → Tech Evangelism
Hardware: x86_64 → All
Summary: yesbank.in customer login page shows a "Secure connection failed" error → netbanking.yesbank.co.in is RC4 only
Fixed.
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.