Closed Bug 1569463 Opened 6 years ago Closed 5 years ago

dcp.psc.gov doesn't enable cipher suites Firefox supports

Categories

(Web Compatibility :: Site Reports, defect, P5)

Product:
Web Compatibility
Component:
Site Reports
Type:
defect

Tracking

(firefox68 affected, firefox69 affected, firefox70 affected)

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox68 --- affected
firefox69 --- affected
firefox70 --- affected

People

(Reporter: bob.marietta, Unassigned, NeedInfo)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0

Steps to reproduce:

Try to go to https://dcp.psc.gov/ccmis/. Receive "Secure Connection Failed" error.

I tried resetting FireFox as well as uninstalling and reinstalling FireFox.

Actual results:

Receive Secure Connection Failed error. Below that, there are the following notes:
"An error occurred during a connection to dcp.psc.gov. PR_CONNECT_RESET_ERROR

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem."

Expected results:

Should have been able to access this website. This website works fine with Chrome, IE and Edge browser.

Hi Bob,

I'm going to add a component in order to involve the development team in reviewing this issue.

Thank you for reporting!

Status: UNCONFIRMED → NEW
status-firefox68: --- → affected
status-firefox69: --- → affected
status-firefox70: --- → affected
Component: Untriaged → Security
Ever confirmed: true
Version: 68 Branch → Trunk

Looks like the server doesn't have any cipher suites in common with Firefox: https://www.ssllabs.com/ssltest/analyze.html?d=dcp.psc.gov
Bob, if you have a contact with this site, you can try to have them enable some of the cipher suites in this list: https://searchfox.org/mozilla-central/rev/b38e3beb658b80e1ed03e0fdf64d225bd4a40327/security/manager/ssl/nsNSSComponent.cpp#915

Component: Security → Desktop
Product: Firefox → Web Compatibility
Summary: New issue with PR_CONNECT_RESET_ERROR that doesn't occur in other browsers → dcp.psc.gov doesn't enable cipher suites Firefox supports

This used to work great a few months ago. Did something change in FireFox? Why does it work in Chrome, Edge and IE?

The cipher suites enabled in Firefox didn't change (indeed, on the ssllabs link, Firefox 47 fails to connect as well), so presumably the site changed.

Priority: -- → P5

I filed a tech support request with the webserver but they aren't going to change it. The feedback I got from tech support was to use a Microsoft Browser or Chrome. Could this be a government recommendation not to use a cipher supported by Firefox?

The issue no longer occurs, the site loads correctly now.
Desktop: https://prnt.sc/10duuoc
Mobile: https://prnt.sc/10duuba

According to SSL Labs:
https://prnt.sc/10duu0b

Tested with:
Browser / Version: Firefox Nightly 88.0a1 (2021-03-04), Firefox Nightly 210304 (🦎 88.0a1-20210302034602)
Operating System: Windows 10 Pro, Samsung Galaxy S8 (Android 9) - 1440 x 2960 pixels, 18.5:9 ratio (~570 ppi density)

bob.marietta can you still reproduce the issue?

Status: NEW → RESOLVED
Closed: 5 years ago
Flags: needinfo?(bob.marietta)
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.