168800 - Enabling TLS protocol prevents connection to some servers

Status: RESOLVED FIXED

(Core :: Security, defect)

Description

[Serge Gautherie (:sgautherie)]

User-Agent:       Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.2a) Gecko/20020910
Build Identifier: Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.2a) Gecko/20020910

I can't get this page to appear in the brower (no source either).

Reproducible: Always

Steps to Reproduce:
0. Direct acces to the URL is enough;
   but here is the "real case" situation:

1. Load <http://www.afer.asso.fr/web/AferPublic.nsf/NavGaucheAdherent1?ReadForm>
2. Choose "Accès aux adhésions": direct click, or open tab, or open window.
   (Try the three possibilities to "best" see.)
Actual Results:  
The page does not appear.

Expected Results:  
The whole frameset should be replaced by the new page.

*Other browsers:
 *NNv4.79: It works with mine !
 *Mv1.1.0: If I remember well, mine was (not allways !??) able to access this page.

*Here is the log (which looks like normal) of my proxy (Proxomitron v4.3):
[
+++GET 311+++
GET /web/Operation.nsf/adherentPrivateAccess?openPage HTTP/1.1
Host: www.afer.asso.fr
User-Agent: Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.2a) Gecko/20020910
Accept:
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,video/x-mng,image/png,image/jpeg,image/gif;q=0.2,text/css,*/*;q=0.1
Accept-Language: fr-fr, fr;q=0.83, en-gb;q=0.66, en;q=0.50, es-es;q=0.33, es;q=0.16
Accept-Encoding: gzip, deflate, compress;q=0.9
Accept-Charset: ISO-8859-1, utf-8;q=0.66, *;q=0.66
Keep-Alive: 300
Referer: http://www.afer.asso.fr/web/AferPublic.nsf/NavGaucheAdherent1?ReadForm
Connection: keep-alive

+++RESP 311+++
HTTP/1.1 302 Found
Date: Sun, 15 Sep 2002 14:31:39 GMT
Content-Type: text/html
Connection: close
X-Pad: work around browser bug
Server: Lotus-Domino/5.0.8
Via: 1.1 ampere (NetCache NetApp/5.1R2)
Location: https://www.afer.asso.fr/web/Operation.nsf/adherentPrivateAccess?openPage
]

Comment 1

[Serge Gautherie (:sgautherie)]

Attachment: Reporter user profile

*Same bug with changed options (+/- one by one, and all together):
 *HTTP/1.0; without Keep-Alive
 *Disk Cache enabled + DC Size=4096; reload at each visit
 *No proxy.

*Not included:
 *Bookmarks and Cookies: same bug without them
 *XUL.mfl: too large

Comment 2

[Thomas Schoepf]

Wfm Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.2a) Gecko/20020914

Comment 3

[Serge Gautherie (:sgautherie)]

I change the faulty URL
from <http://www.afer.asso.fr/web/Operation.nsf/adherentPrivateAccess?openPage>
to <https://www.afer.asso.fr/web/Operation.nsf/adherentPrivateAccess?openPage>;
as typing the HTTPS URL directly shows the same behaviour.

*****

ThomasS:
*For the bug, you didn't say if you tried with your profile or mine.
 (If yours, could you send it to me so I would test with it ?)
*For my knowledge, what is "Win 9x 4.90" (95/98/ME/.../emulator/...) ?
Thanks.

May be a difference between:
*platforms: see above
*builds: my Gecko/20020910 and your Gecko/20020914 !?

Comment 4

[Ian Neal]

I see this in BuildID 2002090708 and 2002091508 on Win2KSP2.
Confirming and -> Security: General (I think this is the correct component for
the problem)

Comment 5

[Serge Gautherie (:sgautherie)]

"Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.2a) Gecko/20020910"

WFM (at work):
*differences (from home) are (at least):
 *O.S.: W95osr2 -> W2Ksp2; but same Moz build date (#c4 are not).
 *HttpS Proxy (on my end): no -> yes (at least two)

Because it works with my NNv4.79, and of the #c2 and #c4, I think it could be a
Moz build problem, and not a "user profile" problem !?

***** Another clue(!?):

The certificate for this site is not "certified" (it was generated by the site
owner); then, when Moz works, I get a warning dialog. (which is fine)

May be it is this condition which the "faulty" builds do not handle well ?

Comment 6

[Serge Gautherie (:sgautherie)]

"Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.2b) Gecko/20021016"

The behaviour improved somewhat, but the bug is still there for me:

Now I get an "Alert" warning dialog (with OK button only) which says "The
connection to www.afer.asso.fr has terminated unexpectedly. Some data may have
been transferred."

And the HTTPS URL still works without any warning with NNv4.79.

Comment 7

[Serge Gautherie (:sgautherie)]

"Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.2b) Gecko/20021016"

Eventually, I found a workaround: to disable "TLS" !


I think that there is a bug with some servers with TLS; but I can't find it :-(

In HTTP, this server says "Server: Lotus-Domino/5.0.8".

Comment 8

[Serge Gautherie (:sgautherie)]

Addition to my comment #7:

The server fix seems to start at Domino v5.0.9 :-<
See
<http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/9ed907859dc1fd0485256aea00739ace?OpenDocument&Highlight=0,tls>


***

If there is indeed an opened bug for this "known" server-side TLS problem,
I agree to mark this bug as a duplicate of it.
(Otherwise, change the subject of this one to become the "TLS tracking bug".)

Comment 9

[Serge Gautherie (:sgautherie)]

"Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.2) Gecko/20021126"

(Summary changed to be much more explicit/specific.)

Bug seems fixed :-)

I agree to mark this bug as "Resolved Fixed".

Comment 10

[Serge Gautherie (:sgautherie)]

[Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.3a) Gecko/20021212]

Changing from "New" to "Resolved Fixed": see my comment 9...

Comment 11

[Serge Gautherie (:sgautherie)]

Following comment 8:

For the record, I make this bug depend on bug 59321.