1732424 - SSL_ERROR_BAD_MAC_ALERT on several sites, mainly Google

Status: RESOLVED FIXED

(Firefox :: Security, defect)

Description

[[e-mail]]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0

Steps to reproduce:

Trying to open google.com

Actual results:

No page opens and in the console the error SSL_ERROR_BAD_MAC_ALERT shows up. One has to restart the browser to get it to work.
This happens after working with the browser for a while. Everything works as expected until unexpectedly you try to open google and this occurs.
It exists since v88!

Expected results:

The page should open as expected.

Comment 1

[Simona Badau, Desktop QA]

I could not reproduce this issue, tried on the latest Nightly 94.0a1 on Windows 10 x64.

n.karytianos, please see some of the solutions provided here and let us know if this solves your issue or not.

Thanks!

Comment 2

[[e-mail]]

None of these work. I have tried many more, but it keeps happening. Note that among Edge, Chrome and Firefox on my computer, Firefox is the only browser demonstrating this. It happens randomly.
I have attached what I get in Developer/Network.

Comment 3

[[e-mail]]

Attachment: developer-network.jpg

Comment 4

[[e-mail]]

Attachment: Troubleshooting Information.json

Comment 5

[[e-mail]]

Forgot to mention that this also happens even after:

1. Disabling all extensions
2. Creating a new profile

Comment 6

[[e-mail]]

And something else I noticed is that this usually happens only with Google. When trying some other website on another tab, it comes up as expected.

Comment 7

[[e-mail]]

Not sure if it helps any. This happens in firefox only when I move my computer from home to my corporate network.

Comment 8

[[e-mail]]

Any news please? This is a long standing issue that nobody seems able to resolve it there at Mozilla. I am thinking seriously ditching firefox because simply nobody really cares and I cannot work with it any longer.

Comment 9

[Simona Badau, Desktop QA]

Assigning to the Security component so that one of our devs could take a look over it, if this is not the right component, please move it to a more appropriate one. Thanks!

Comment 10

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

What happens if you set security.tls.enable_0rtt_data to false in about:config?

Comment 11

[[e-mail]]

Dear Dana Keeler,
Thank you so much! With your suggestion I have been working all day without the slightest problem! Nowhere on the internet I could find a working suggestion.

Best regards and many thanks,
Nikos

Comment 13

[Dragana Damjanovic [:dragana]]

I will reopen this bug and add SSL_ERROR_BAD_MAC_ALERT error to a list of reason to disable 0RTT.

This will be all based on the work done in bug 1718520.

Comment 14

[Dragana Damjanovic [:dragana]]

Attachment: Add SSL_ERROR_BAD_MAC_ALERT error as a reason to disable 0RTT on a HTTP/2 or HTTP/1.1 connection.

Comment 15

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:johannh, could you have a look please?

For more information, please visit auto_nag documentation.

Comment 16

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/416a96af1211
Add SSL_ERROR_BAD_MAC_ALERT error as a reason to disable 0RTT on a HTTP/2 or HTTP/1.1 connection. r=necko-reviewers,valentin

Comment 17

[Alexandru Michis [:malexandru]]

https://hg.mozilla.org/mozilla-central/rev/416a96af1211