190219 - SSL routines SSL3_GET_RECORD decryption failed or bad record mac

Status: CLOSED WORKSFORME

(Core Graveyard :: Security: UI, defect)

Description

[ptashek]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; pl-PL; rv:1.2.1) Gecko/20021130
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; pl-PL; rv:1.2.1) Gecko/20021130

While loading the URL https://router.scg.gliwice.pl Mozilla claims that the
certificate is outdated. After clicking "OK" the browser returns an error
message saying that it received a message with wrong authentication code.

The site accessed is served by Apache/1.3.26 Ben-SSL/1.48
Server cert & key are 128bit RC4-MD5 encrypted.

In the server logfiles one can see the following error message:
error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

No problems when accessed from Microsoft Internet Explorer 6 SP1+

Reproducible: Always

Steps to Reproduce:
1. https://router.scg.gliwice.pl

Actual Results:  
No connection to SSL site,
Error message about outdated certificate.

Expected Results:  
Connection to SSL site.
No error messages.

Used theme: Orbit for Mozilla 1.2
PC Setup: Windows 2000 SP3 + fixes up-to-date
Mozilla: 1.2.1 Polish (from mozillapl.org)

Comment 1

[John Unruh]

Works for me. Can you try a newer version, such as Mozilla 1.3 Alpha? Your build
is 2 months old. Be sure to install in a clean directory, and use a new profile.
Also, the server admin could have reissued a new server cert with the same
issuer and serial number, which is 00. Try deleting the old server cert first if
there is one. Edit>Prefs>Privacy>Certificates>Manage Certificates>Web Sites tab.

Comment 2

[ptashek]

Works on a clean install of 1.3 Alpha.