256804 - Error establishing an encrypted connection. Error code: -5990

Status: RESOLVED DUPLICATE of bug 111384

(Core Graveyard :: Security: UI, defect)

Description

[Onkar Shinde]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.2) Gecko/20040803
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.2) Gecko/20040803

The error mentioned in subject is received on sites that use JSP pages over
secure connection.

Another example is
http://www.baazee.com/customjsp/myBaazee/myBaazee_main.jsp.

The 'Secure Login' button on this page redirects to following page
https://www.baazee.com/jsp/UserLogin.jsp

The site is viewed through a proxy based network and there is no problem in
proxy settings.

Reproducible: Always
Steps to Reproduce:
1. Go to http://www.baazee.com/customjsp/myBaazee/myBaazee_main.jsp
2. Put any information as username and password
3. Click "Secure Login"

Actual Results:  
The error received is 
"Error establishing an encrypted connection. Error code: -5990"
followed by an "operation timeout" error.


Expected Results:  
The page should redirect to appropriate profile page of user or an error page
indicating false user information.

Comment 1

[Hermann Schwab]

wfm Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8a3) Gecko/20040817

Login with test/test, https://www.baazee.com/jsp/UserLogin.jsp is showing:  
Wrong Password or your Baazee ID/Email ID doesn't exist. Please try again

Comment 2

[Onkar Shinde]

(In reply to comment #1)
> wfm Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8a3) Gecko/20040817
> 
> Login with test/test, https://www.baazee.com/jsp/UserLogin.jsp is showing:  
> Wrong Password or your Baazee ID/Email ID doesn't exist. Please try again

Please try this link
https://services.vsnl.net/new/buy_online.jsp

If that also works properly then can you please tell me what is error code -5990. 


Onkar Shinde

Comment 3

[Hermann Schwab]

(In reply to comment #2)
> (In reply to comment #1)
> > wfm Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8a3) Gecko/20040817

> 
> Please try this link
> https://services.vsnl.net/new/buy_online.jsp

It is also working, after faking a mailadress and a 7-digit phone number another
page was loaded.

> If that also works properly then can you please tell me what is error code -5990. 
 
I don´t know. But I´m testing with 1.8a3, not 1.7.2, maybe, that makes the
difference. 

Comment 4

[Onkar Shinde]

The problem pertained in 1.8a3 also.

It seems that enabling an option in Preferences->Privacy & Security->Validation
that says "Use OCSP to validate only certificates that specify an OCSP service
URL" has caused this problem.

I enabled "Do not use OCSP for certificate validation" and everything is working
fine.

Comment 5

[Josh Birnbaum]

You can't currently use OCSP if you use a proxy.

*** This bug has been marked as a duplicate of 111384 ***