184598 - Error establishing an encrypted connection to www.netsol.com. Error code:-8190

Status: VERIFIED WORKSFORME

(Core Graveyard :: Security: UI, defect)

Description

[Dapid Candra]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.2.1) Gecko/20021130
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.2.1) Gecko/20021130

Error establishing an encrypted connection to www.netsol.com. Error code:-8190

Reproducible: Always

Steps to Reproduce:
1. Go to www.netsol.com
2. Click 'Account Manager' tab

Actual Results:  
A box popped up with error message:
Error establishing an encrypted connection to www.netsol.com. Error code:-8190

Expected Results:  
Should enter Account Manager page.

My IE 6.0 can access the page

Comment 1

[Olivier Cahagne]

Reporter, if you migrated from NS4.x, can you check your old profiles to see if
OCSP was turned on? That may
have been the problem. Edit>Prefs>Privacy>Validation. If so, set it to "Do not
use OCSP", which is the default.

Did you enable FIPS in the Privacy&Security>Certificates>Manage Security Devices ?

Comment 2

[Dapid Candra]

No. I did not migrate from NS 4.x, but I do have NS 4.7 installed in different
directory. That's not the case, I think. OCSP was not changed, I've checked, it
is stil the default.

Yes, I do enable FIPS and after disabling it, I can enter the 'Account Manager'
page in netsol.com. But, that shouldn't be a problem, should it?

Thanks for the help and sorry if it's not really a bug.

Comment 3

[Olivier Cahagne]

copying bug 181822 comment #7:

No, SSL should not break when FIPS is enabled. That is a separate bug to disable
SSL2 when FIPS is enabled, which for some reason, Netsol uses exclusively, no
SSL3 or TLSv1.
Should be marked worksforme (instead of duplicate of bug 106604).
Reporter, you might have better error messages with a more recent nightly build
at www.mozilla.org. Install into a clean directory in case there is a problem
with a particular night's builds. All of your profiles will still be available.

Comment 4

[John Unruh]

Worksforme. Enabling FIPS disables SSL2, and there are a few SSL2 only sites out
there, the largest I know of is www.schwab.com. So, reporter, please disable
FIPS unless you have a real need to enable it. That will enable SSL2 and enable
you to visit an SSL2 only site.

Comment 5

[John Unruh]

Verified.