1960305 - Error SSL_ERROR_RX_RECORD_TOO_LONG when connecting to websites

Status: UNCONFIRMED

(Core :: Security: PSM, defect)

Description

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0

Steps to reproduce:

[NSFW link removed]

Actual results:

SSL_ERROR_RX_RECORD_TOO_LONG

Expected results:

load the web page.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Networking' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[guido]

also it doesn't work: https://www.dolce-gusto.it/

I try to:
Set my connection settings to No proxy
Change my DNS over HTTPS settings
Start Firefox in Troubleshoot Mode
but the problem persists.

Comment 3

[guido]

livecamrips.su - error: SSL_ERROR_RX_RECORD_TOO_LONG. but on microsoft edge it works

Comment 4

[Francesco Lodolo [:flod]]

Please be mindful of the content of URLs you put in bugs, NSFW content is not OK. Flagged the first comment to see if an admin can edit and remove the link.

Also, the bug's summary should be a description of the problem, not a link. Putting the link to the profile here (was the bug's summary), although I don't think it's helpful for a network error: https://share.firefox.dev/4j79966 is

Do you have security software installed? Does it work if you disable it? That's known to happen with antviruses (e.g. webscan features).

Comment 5

[:glob ✱]

Thanks flod, I've removed the url from the first comment; the non-linkified URL is visible in my terminal output below.

FWIW I can reproduce the issue with openssh (no antivirus/etc involved):

~$ openssl s_client livecamrips.su:443
Connecting to 104.26.15.251
CONNECTED(00000006)
404C81F701000000:error:0A0000C6:SSL routines:tls_get_more_records:packet length too long:ssl/record/methods/tls_common.c:663:
404C81F701000000:error:0A000139:SSL routines::record layer failure:ssl/record/rec_layer_s3.c:693:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 332 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Protocol: TLSv1.3
This TLS version forbids renegotiation.
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---

Note 104.26.15.251 is Cloudflare.

Comment 6

[guido]

sorry, i'm new on bugzilla. thanks.

Comment 7

[Francesco Lodolo [:flod]]

This is still unanswered

Do you have security software installed? Does it work if you disable it? That's known to happen with antviruses (e.g. webscan features).

Comment 8

[Kershaw Chang [:kershaw]]

I can't reproduce this locally, so this is probably fixed by the server side.

Hi Reporter,

Could you test again and see if it works for you?
If not, does it work if you switch to another network (e.g., use VPN)?

Thanks.

Comment 9

[guido]

(In reply to Francesco Lodolo [:flod] from comment #4)

Please be mindful of the content of URLs you put in bugs, NSFW content is not OK. Flagged the first comment to see if an admin can edit and remove the link.

Also, the bug's summary should be a description of the problem, not a link. Putting the link to the profile here (was the bug's summary), although I don't think it's helpful for a network error: https://share.firefox.dev/4j79966 is

Do you have security software installed? Does it work if you disable it? That's known to happen with antviruses (e.g. webscan features).

eset nod 32 antivirus 18.1.10.0.
It doesn't work with both antivirus enabled and disabled.

Comment 10

[guido]

(In reply to Kershaw Chang [:kershaw] from comment #8)

I can't reproduce this locally, so this is probably fixed by the server side.

Hi Reporter,

Could you test again and see if it works for you?
If not, does it work if you switch to another network (e.g., use VPN)?

Thanks.

Secure connection failed

An error occurred while connecting to livecamrips.su. PR_END_OF_FILE_ERROR

Error code: PR_END_OF_FILE_ERROR

The page you are trying to view cannot be displayed because the authenticity of the data received cannot be verified.
Please contact the website manager to inform them of the problem.

Comment 11

[Sunil Mayya]

Hello Reporter,

Secure connection failed
An error occurred while connecting to livecamrips.su. PR_END_OF_FILE_ERROR
Error code: PR_END_OF_FILE_ERROR
Looks like we have a new error. Was this with VPN? Please confirm
It looks like some certificate issue and we might need more logs to unearth the root cause.

Could you please capture logs as described here.
Kindly log into a file and please select the following modules:
timestamp,sync,nsHttp:5,certverifier:5

Thanks

Comment 12

[guido]

Attachment: log.txt-main.6132.moz_log

timestamp,sync,nsHttp:5,certverifier:5

Comment 13

[Valentin Gosu [:valentin] (he/him)]

I think the correct log to use is
timestamp,sync,nsHttp:5,pipnss:5
Could you capture the logs again please?