176262 - SSL: Incorrect Message Authentication Code

Status: VERIFIED DUPLICATE of bug 171219

(Core Graveyard :: Security: UI, defect)

Description

[Jim Garrison]

After the user accepts the the self-signed certificate, Mozilla pops up a
dialog saying "sulaco.hostforweb.net received a message with incorrect 
Message Authentication Code".  This is Mozilla 1.1 on Windows 2000.

Internet Explorer 6 has no problems with this site.

A google search turned up several hits in relation to the Cpanel product
(which is the app at the other end, running behind Apache), one of which
recommended disabling TLS. I tried this but it had no effect.

NOTE: Mozilla 1.1B (2002072204) ON LINUX DOES NOT EXHIBIT THIS BEHAVIOR
      IT APPEARS TO WORK CORRECTLY

Comment 1

[Matthias Versen [:Matti]]

-> PSM (reporter: Please read the product description before you report a bug)

Comment 2

[John Unruh]

Marking dupe. This looks like another server cert issued from plesk.com - The
common situation with this site, and
https://lists.xcf.berkeley.edu/lists/advanced-java/1998-November/014068.html and
https://lists.sistina.com/ is that when viewed in the cert viewer, they have
identical "Issued to" and "Issued by" CN, OU, and O, (although each site has
different CN, OU and O from the other sites). They all also have serial number 00.

https://sulaco.hostforweb.net:2083/frontend/hfw-x/index.html also has a
mismatched cert name and an untrusted CA.

*** This bug has been marked as a duplicate of 171219 ***

Comment 3

[John Unruh]

verified