Unable to logon to netbank (Skandiabanken) after upgrading Mozilla from 1.5 -> 1.6

RESOLVED WORKSFORME

Status

Core Graveyard
Java: OJI
--
major
RESOLVED WORKSFORME
14 years ago
7 years ago

People

(Reporter: Kenneth Reinhardt, Assigned: Kyle Yuan)

Tracking

Trunk
x86
Windows XP

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

14 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113

After upgrading Mozilla (default setup) from v.1.5 to 1.6 I can no longer logon
to my netbank (Skandiabanken). After entering the numbers and password I no
longer get the message about accepting the "security" (dont remember the excact
message) about the applet reading the key file on disk.

Since this is a logon problem with my private key and password I'm of course
unable to submit it to this bug.

(For the record I'm still able to logon with IE so I've not been kicked of by my
netbank - yet :).

Reproducible: Always

Steps to Reproduce:
1. Entering the page
2. Entering the accountnumber (and click ok)
3. Entering the password (and click ok)

Actual Results:  
After the last ok click, the browser returns to the page front page entering the
logon.

Expected Results:  
I should have been logon to my netbank (Skandiabanken).

Comment 1

14 years ago
do you get any error/warning in JS console and Java console ?
(Reporter)

Comment 2

14 years ago
Yes, here is the output from the try to login (SessionID's is changed for
security reasons):



Java(TM) Plug-in: Version 1.4.1_01
Using JRE version 1.4.1_01 Java HotSpot(TM) Client VM
User home directory = C:\Documents and Settings\Mr K
----------------------------------------------------
c:   clear console window
f:   finalize objects on finalization queue
g:   garbage collect
h:   display this help message
l:   dump classloader list
m:   print memory usage
o:   trigger logging
p:   reload proxy configuration
q:   hide console
r:   reload policy configuration
s:   dump system properties
t:   dump thread list
v:   dump thread stack
x:   clear classloader cache
0-5: set trace level to <n>
----------------------------------------------------
Trace level set to 5: basic, net, security, ext, liveconnect ... completed.

Connecting https://web47.prod.bec.dk/signon/servlet/Signon with no proxy

Server https://web47.prod.bec.dk/signon/servlet/Signon requesting to set-cookie
with "BECSessionToken=yBVHLmyrC*FMsAIzg3*RnL8ENI6j4DKt7FKXBc__;Path=/"

Server https://web47.prod.bec.dk/signon/servlet/Signon requesting to set-cookie
with "JSESSIONID=00001EUPSWFWIOOTXOHJW1OD0OY:ucikbqo4;Path=/"

JSObject::call: name=BECUpdateMenu, url=https://web47.prod.bec.dk, permission=true

Stopping applet ...

Unregistered modality listener

Joining applet thread ...

Destroying applet ...

Disposing applet ...

Joined applet thread ...

Quiting applet ...

Registered modality listener

Finding information ...

Releasing classloader: sun.plugin.ClassLoaderInfo@164cbde, refcount=0

Caching classloader: sun.plugin.ClassLoaderInfo@164cbde

Current classloader cache size: 1

Done ...

Referencing classloader: sun.plugin.ClassLoaderInfo@164cbde, refcount=1

Loading applet ...

Initializing applet ...

Starting applet ...

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JSObject::call: name=BECReadCSS, url=https://web47.prod.bec.dk, permission=true

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: caller and callee have same origin

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

JavaScript: calling Java system code

JavaScript: default security policy = https://web47.prod.bec.dk

Comment 3

14 years ago
does https://web47.prod.bec.dk/signon/servlet/Signon work with a fresh profile
"mozilla -profilemanager" ?
(Reporter)

Comment 4

14 years ago
Sorry - don't know.

Comment 5

14 years ago
Kenneth, do you see security related errors on the JS console (Tools/Web
Development/JavaScript Console) ?
(Reporter)

Comment 6

14 years ago
There is no messages in the JS console even though I've asked/selected for "all".

Comment 7

14 years ago
type about:config in the location bar and verify the following pref settings:

browser.dom.window.dump.enabled  (set to true)
javascript.options.showInConsole (set to true)
(Reporter)

Comment 8

14 years ago
I do NOT have the (a) but DO have the (b) and it is set to true

(a) browser.dom.window.dump.enabled (doesn't exist)
(b) javascript.options.showInConsole (set to true)

The DOM Inspector Sidebar i currently not installed.
(Reporter)

Comment 9

14 years ago
I installed DOM - but there was no change in output or anything.
(Reporter)

Comment 10

14 years ago
The Bank (Skandia Banken) has changed there logon applet so now I'm unable to
replicate/reproduce the bug.

Comment 11

14 years ago
(In reply to comment #10)
> The Bank (Skandia Banken) has changed there logon applet so now I'm unable to
> replicate/reproduce the bug.

Well, in that case we better resolve this bug as WFM
Status: UNCONFIRMED → RESOLVED
Last Resolved: 14 years ago
Resolution: --- → WORKSFORME

Updated

7 years ago
Component: Java: OJI → Java: OJI
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.