220275 - can't connect to secure web pages, error code -8075

Status: RESOLVED WORKSFORME

(Core Graveyard :: Security: UI, defect)

Description

[Eric Estabrooks]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030908 Debian/1.4-4
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030908 Debian/1.4-4

Mozilla crashed when I was trying to send a signed encrypted mail.  Now I can't
go to any secure web pages.  I always get the error - couldn't establish a
secure connection to "" error code -8075.  I also can't send signed mail either.

Reproducible: Always

Steps to Reproduce:
1. crash mozilla while sending signed/encrypted mail
2. go to a secure web page
3. watch online retailers cry as you can't purchase goods from them anymore :)

Actual Results:  
error establishing an encrypted connection to "".  Error Code -8075

Expected Results:  
make a secure connection to the site

debian unstable, openssl-0.9.7b-2, mozilla 1.4-4

Comment 1

[Boris Zbarsky [:bzbarsky]]

.

Comment 2

[Jean-Marc Desperrier]

Create a new profile, this should recreate valid .db files for PSM, and you
should be OK again.

If this solves your problem, consult some FAQ to know how to transfer your
profil data to this new profile and close this bug. There are too many way a
profile can get corrupted to solve them all.

Comment 3

[Stephane Saux]

remove these files from your existing profiles. Note: you will loose any
certificate that you've imported in that db. If you can export them first, do so.

cert7.db  cert8.db  key3.db  secmod.db

Comment 4

[Eric Estabrooks]

Appears to be corruption in the user profile.  I can run mozilla as other users
without problems and removing my cert*.db and sec*.db files from my profile
fixed the problem.  So I guess close it if you want to and chalk it up to crash
corrupting user profile.

Comment 5

[Nelson Bolyard (seldom reads bugmail)]

See http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html#1038501
for explanation of -8075.

This error code suggests that you configured your profile to do OCSP checking 
but the URL for the OCSP server was invalid.  Does that explain it?

Comment 6

[David Stutzman]

(In reply to comment #5)
> See http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html#1038501
> for explanation of -8075.
> 
> This error code suggests that you configured your profile to do OCSP checking 
> but the URL for the OCSP server was invalid.  Does that explain it?

I started receiving that error after enabling OCSP Verification.  It does
pertain to the cert validation section of your preferences.  It's not a bug,
just a really **** error message that gives the code rather than a textual
explanation of the problem.

More info here:
http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html

SEC_ERROR_CERT_BAD_ACCESS_LOCATION    
-8075 	
"The location for the certificate status server has invalid format."

Comment 7

[Josh Birnbaum]

*** Bug 222545 has been marked as a duplicate of this bug. ***