152980 - SSL connectivity problem

Status: VERIFIED WORKSFORME

(Core Graveyard :: Security: UI, defect, P3)

Description

[Ken Johanson]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0rc3)
Gecko/20020523
BuildID:    2002052306

With the given SSL URL, and the server it is served from, page/image loads are
sporadic. However, NS4/IEx do not have this problem.

Reproducible: Always
Steps to Reproduce:
1.Connect to https://www.onnet.cc/sslTest/
2.Notice that on initial and subsequent (shift-)reloads, various files (images
or frameset) do not completely load.


Actual Results:  Random files do not load successfully.

Expected Results:  Load all files successfully.

I tend to think this is a bug specific to Mozilla's SSL implemention, because
this symptom does not occur with NS4 or IEx. I have noticed that the problem
appears less prevalent if the web server has a CA certificate (the given sample
is self-signed), but even then the problem does still occur. The severity of the
problem also seem related to the number of files that REFd from the same page.

I have tried enabling/disabling various combinations of Mozilla's TLS/SSL3 and
keep alive settings under Networking Preferences, and had the identical result.

The particular webserver in this example is available at http://www.sambar.com.
It's SSL implementaion is known to be SSLeay based, and a recent version (0.9.6d).

Comment 1

[benc]

-> psm

Comment 2

[John Unruh]

Works for me using the 6/25 trunk Win2000 build. Reporter, can you try today's
build?

Comment 3

[John Unruh]

Works for me using the 6/25 trunk Win2000 build. Reporter, can you try today's
build?

Comment 4

[Ken Johanson]

Reporter here!.. I'm afraid its working okay (*Caviot ahead!!!) for me also
useing the given test URL, using Moz 1.0 release, from here at work (15hops,
300ms)... I've done some research and determined that this problem definately
seems related to the "distance" from the server, probably a function of
propogation delay &| router hops? The malfunction DOES occur for me from
anywhere within around 8 hops to the server, but rarely (~10%). -More hops seems
to reduce the apparency of the problem. However, within about 4 hops the problem
is almost unbearable.

It appears that to test this problem, short of being "close" to the server, one
would have to download and install the listed web server. I can provide some
test SSL certs if needed (All that is needed is a private & public cert file,
and to set config/config.ini:"Act As HTTPS Server = true").

I'll try the newer build anyway and report my findings. Thanks!!!!

Comment 5

[Ken Johanson]

Using build 2002070310, I get the same results from 8 hops away; about 5-10% of
the files (images or frameset) do not load..

Comment 6

[John Unruh]

Verified works for me. I have an SSL server one hop away, and have not
experienced this problem with recent builds. Reporter, if you can try today's
build, using a new profile, and still see a problem, please reopen.

Comment 7

[Ken Johanson]

It is probably safe to mark this resolved. I havent seen this symptom lately
(last few years). Thx, -ken