208362 - https connections via proxy (squid) fail with "Error establishing an encrypted connection to <hostname>. Error code: -5933."

Status: VERIFIED DUPLICATE of bug 111384

(Core Graveyard :: Security: UI, defect)

Description

[Tarragon Allen]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3.1) Gecko/20030527 Debian/1.3.1-2
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3.1) Gecko/20030527 Debian/1.3.1-2

Attempts to connect to various https sites via a proxy server fail with "Error
establishing an encrypted connection to <hostname>. Error code: -5933.". Sites
that are known to fail are :

https://olb.westpac.com.au/
https://www.redhat.com/
https://www.paypal.com/

Working sites:

https://secure.kwikshop.com.au/
https://www.groupservices.com.au/

These last two are hosted by my company, and are running on Linux/Apache and
Windows 2000/IIS respectively.

My machine is behind a firewall and has a private IP address in the 192.168.x.x
range. As I'm a sys-admin here I arranged for NAT access for my machine so I
could test the bug. If I connect directly (via NAT) all https sites work fine.
If I put the proxy directive back in, some https sites fail as above.

Reproducible: Always

Steps to Reproduce:
1. Set https proxy.
2. Attempt to connect to https site (such as https://olb.westpac.com.au/).


Actual Results:  
Pause of about 30 seconds, then fail with pop-up dialogue box "Error
establishing an encrypted connection to <hostname>. Error code: -5933."

Expected Results:  
Loaded the site.

I am willing and able to modify various aspects of the squid proxy and our
firewall to test various parameters and settings if required, please feel free
to contact me with anything you'd like me to try. I can also make tcpdumps of
successful and non-successful attempts, if required.

Comment 1

[Matthias Versen [:Matti]]

Please disable OSCP in the prefs. (Privacy&Security\Validation)


*** This bug has been marked as a duplicate of 111384 ***

Comment 2

[benc]

-> PSM

Comment 3

[John Unruh]

V