1300398 - Getting 'Secure Connection Failed' on https://www.biltong.co.uk/ , that succeed on all other browsers

Status: RESOLVED INVALID

(Core :: Security: PSM, defect)

Description

[nicholas]

Attachment: 2016-09-04_10-38-42.png

User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0
Build ID: 20160823121617

Steps to reproduce:

Go to https://www.biltong.co.uk/




Actual results:

Connection fails with 'Secure Connection Failed' page.

Note: 
1. Also occurs using the FireFox Developer Edition 50.0a2
2. This same behavior has been experienced with other sites too, where I do not believe it's appropriate and have had to use another browser.


Expected results:

Web page should have rendered.
All other browsers tried succeed.

Have attached screen shot showing IE11, Chrome 52.0, Edge 25.1 all working.

Comment 1

[roxleitan]

User Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:51.0) Gecko/20100101 Firefox/51.0
Build ID:20160906030431

I have tested this issue on Windows 10 x64 with the latest Firefox release (48.0.2), the latest Nightly (51.0a1-20160906030431) and Firefox Developer Edition 50.0a2 and could not reproduce it.

When the page is opened with FF Nightly and FF Developer Edition , the connection is secure and when is opened with FF latest release candidate,the page is properly opened and connection is not secure.
Is this still reproducible on your end? If yes, can you please retest this using the latest Firefox release and the latest Nightly build (https://nightly.mozilla.org/) and report back the results?
When doing this, please use a new clean Firefox profile, maybe even safe mode, to eliminate custom settings as a possible cause (https://goo.gl/PNe90E).

Comment 2

[Honza Bambas (:mayhemer)]

I think this is a PSM issue.

Comment 3

[nicholas]

I am still getting the issue with Firefox Developer Edition 50.0a2 and have attached a screen shots for you.

2016-09-07_14-11-01.png (Normal)
2016-09-17_14-17-34.png (In Private)
2016-09-17_14-18-49.png (In safe mode)

Comment 4

[nicholas]

Attachment: 2016-09-07_14-11-01.png

Developer 50.0a2 in normal mode

Comment 5

[nicholas]

Attachment: Developer 50.0a2 in private mode

Developer 50.0a2 in private mode

Comment 6

[nicholas]

Attachment: Developer 50.0a2 in safe mode

Developer 50.0a2 in safe mode

Comment 7

[:Cykesiopka]

Hi Nicholas,

It would be helpful if you could do the following:
1. Test on a clean profile, as requested in comment 1.
   (and clear the needinfo? flag requested on you when you post the result.)
2. Post what the values of the "security.tls.version.max" and "security.tls.version.min"
prefs are in the profile that don't work.

Thanks.

Comment 8

[nicholas]

Hi,

OK, created a new profile and you're right it works in Nightly and 48.0.2.

On my original profile my tls settings were as follows:

security.tls.version.max;1 (user set...could have been me sometime ago while testing an old site?!!)
security.tls.version.min;1

I changed the security.tls.version.max to 3 and all is good. 

Many thanks for your help. I guess there is no bug here, just user config issue ;-)
Thanks again.

Comment 9

[:Cykesiopka]

(In reply to nicholas from comment #8)
> I changed the security.tls.version.max to 3 and all is good. 
> 
> Many thanks for your help. I guess there is no bug here, just user config
> issue ;-)
> Thanks again.

Thanks for checking.
We already have functionality that offers to reset prefs like these for certain connection errors, but it looks like it doesn't cover the case that https://www.biltong.co.uk/ triggers. I filed Bug 1303286 for this.