1933747 - ESR 128.5.0 not loading pages/websites when using SSL inspection

Status: RESOLVED FIXED

(Core :: Networking: HTTP, defect)

Description

[Yohan Rodriguez]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0

Steps to reproduce:

Updated to ESR 128.5.0 while using SSL Inspection on our firewalls

Actual results:

Some of our internal apps/websites showed a white/blank page

Expected results:

App/website should have loaded and worked

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Fenix::General' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[francois.gagne]

Same problem with a Fortigate, disabling SSL inspection bypass the issue.

This seems like a regression: Firefox 128.4.0esr and Firefox 133 are working fine. Only Firefox 128.5.0esr seems to be affected.

Comment 3

[troy.stellman]

in testing I found that
on 128.4 network.http.http2.allow-push is set to 'true'
on 128.5 network.http.http2.allow-push is set to 'false'.
I changed it back to 'true' and restarted Firefox and tried again and it is working again.

Comment 4

[Yohan Rodriguez]

(In reply to troy.stellman from comment #3)

in testing I found that
on 128.4 network.http.http2.allow-push is set to 'true'
on 128.5 network.http.http2.allow-push is set to 'false'.
I changed it back to 'true' and restarted Firefox and tried again and it is working again.

Works for us too

Comment 5

[Valentin Gosu [:valentin] (he/him)]

(In reply to francois.gagne from comment #2)

Same problem with a Fortigate, disabling SSL inspection bypass the issue.

This seems like a regression: Firefox 128.4.0esr and Firefox 133 are working fine. Only Firefox 128.5.0esr seems to be affected.

I think the issue is that I forgot to request uplift for bug 1919750 to ESR along with the H2 Push disablement.

Comment 6

[Donal Meehan [:dmeehan]]

Thank you for the reports, we are preparing an esr128.5.1 dot release with a fix. We are aiming to rollout tomorrow 2024-11-29.

Comment 7

[Valentin Gosu [:valentin] (he/him)]

I have a build running with the fix here
Would you be able to test if this works even with allow-push=false?

Thanks!

Comment 8

[Yohan Rodriguez]

(In reply to Valentin Gosu [:valentin] (he/him) from comment #7)

I have a build running with the fix here
Would you be able to test if this works even with allow-push=false?

Thanks!

Sure, I'll try it as soon as it's ready to download.

Comment 9

[Yohan Rodriguez]

(In reply to Valentin Gosu [:valentin] (he/him) from comment #7)

I have a build running with the fix here
Would you be able to test if this works even with allow-push=false?

Thanks!

Works perfectly ! Thanks

Comment 10

[Donal Meehan [:dmeehan]]

Resolving as Fixed.
Bug 1919750 was uplifted to ESR128 and will ship in 128.5.1esr aiming to release 2024-11-29.