141903 - protocol errors accessing HTTPS web page

Status: VERIFIED DUPLICATE of bug 130885

(Core Graveyard :: Security: UI, defect)

Description

[Cameron Simpson]

[ This is the NSS version that shipped with Mozilla 1.0rc1. ]

When visiting the cited URL, following the "Click here to log on to Online
Services" link (top right of page) produces popups complaining of protocol
errors, saying:

Error establishing an encrypted connection to www48.americanexpress.com. Error
Code: -5961.

That almost looks like an uninitialised value to me.

This page works perfectly in Netscape 4.x.

Comment 1

[alge]

hrm. WFM, cvs build of today. btw, are you sure this is NSS and not PSM?

Comment 2

[Wan-Teh Chang]

Changed product to PSM for investigation.

Comment 3

[Kai Engert [:KaiE:]]

-5961 just means, the other site terminated the connection.

Cameron, was this a temporary error, casued by a problem on the server side?
When you try to connect again, what happens?

I just tried to connect to https://www48.americanexpress.com and I did not see
an error.

If you still see the problem, do you have OCSP enabled, by chance?

Comment 4

[Cameron Simpson]

| ------- Additional Comments From [e-mail]  2002-05-08 10:30 -------
| -5961 just means, the other site terminated the connection.

Hmm. The popup definitely needs a better explaination then.

| Cameron, was this a temporary error, casued by a problem on the server side?
| When you try to connect again, what happens?

Exactly the same thing.

| I just tried to connect to https://www48.americanexpress.com and I did not see
| an error.

Not that it makes a difference, but start at:

        http://www.americanexpress.com.au/

and take the online services link.

| If you still see the problem, do you have OCSP enabled, by chance?

I have "Use OCSP to validate only certificates that specify an OCSP
service URL."  I can confirm that backing off to "Do not use OCSP
..." lets me access the service.

Comment 5

[Kai Engert [:KaiE:]]

Cameron, thanks for the additional info. The problem is OCSP, we have a bug, it
is tracked in bug 141903.

I don't understand why you see error code -5961, while I see -8073. Anyway, I
have added that error code to bug 130885, too.


*** This bug has been marked as a duplicate of 130885 ***

Comment 6

[John Unruh]

V