1738522 - HTTP/1.0 and TLS 1.2 website on an industrial equipment stalls out

Status: RESOLVED INVALID

(Core :: Security: PSM, defect)

Description

[Gacel Perfinian]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0

Steps to reproduce:

Go to the IP address of the panel. Since it is an internal equipment, bypass the CA mismatch warnings, and wait page to finish loading

Actual results:

Load times takes about two minutes despite Ethernet cable directly connected under the equipment. This is apparently a regression back from a version between 60 and 68 (I only tested ESR versions).

Expected results:

The webpage loads within seconds, like in latest versions of Chrome and old versions of Firefox (approximately around version 60).

Comment 1

[Gacel Perfinian]

Attachment: 192.168.1.1 FF 60esr.har

HAR file of webpage under FF 60esr

Comment 2

[Gacel Perfinian]

Attachment: 192.168.1.1 FF 93.har

Comment 3

[Gacel Perfinian]

Attachment: 192.168.1.1 Chrome 95.har

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::DOM: Security' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Comment 5

[Dragana Damjanovic [:dragana]]

Moving it to other security component.

Comment 6

[Dana Keeler (she/her) [:keeler]]

Can you attach a packet trace of the TLS handshake?

Comment 7

[Gacel Perfinian]

A quick update - it seems that the bug is outside Firefox (the equipment apparently miscounted the number of connections, was fixed by replacing the equipment)

Comment 8

[Dana Keeler (she/her) [:keeler]]

Great!