Closed Bug 1279774 Opened 8 years ago Closed 8 years ago

SSL_ERROR_SESSION_KEY_GEN_FAILURE error for self-signed IIS certificates

Categories

(Core :: Security: PSM, defect)

Product:
Core
Component:
Security: PSM
Platform:
x86
Windows 10
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
VERIFIED DUPLICATE of bug 1278434
Tracking Flags:
Tracking Status
firefox50 --- affected

People

(Reporter: piecu, Unassigned)

Details

(Keywords: nightly-community) 

I am using IIS on my laptop and have a website with SSL enabled on self-signed certificate (actually it is IIS Express cert).

It used to work well but now when I go to https://localhost/ I am seeing the following error: SSL_ERROR_SESSION_KEY_GEN_FAILURE which cannot be added to exceptions.

I have done some investigation and this is the last version of nightly that it worked: 2016-06-05-03-02-15-mozilla-central-l10n (I am using pl localization).
On this version it stopped working: 2016-06-06-03-02-19-mozilla-central-l10n
https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=3e8ee3599a67edd971770af4982ad4b0fe77f073&tochange=0a3b6e2df6567d845f31c000c68dd67816c6153d

keeler/cykesiopka, I suspect bug 1277240 - any idea why that would have changed something here?
Component: General → Security: PSM
Flags: needinfo?(dkeeler)
Flags: needinfo?(cykesiopka.bmo)
Product: Firefox → Core
I'm fairly certain this is a consequence of Bug 975832, which enabled cipher suites that triggered buggy NSS behaviour.

This should be fixed in upstream NSS by the patch for Bug 1278434, and the fix will reach Firefox when the in tree copy of NSS is updated in Bug 1277255.
Status: NEW → RESOLVED
Closed: 8 years ago
Flags: needinfo?(dkeeler)
Flags: needinfo?(cykesiopka.bmo)
Resolution: --- → DUPLICATE
This indeed solved my problem.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.