288832 - Loading that page generates an error message that is not useful for the situation: "... has received an incorrect or unexpected message. error code: -12227"

Status: RESOLVED DUPLICATE of bug 143744

(Core :: Security: PSM, defect)

Description

[nf-bugzilla]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050317 Firefox/1.0.2
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050317 Firefox/1.0.2

In the page listed above an error message is generated, when one shouldnt
recieve one. The problem appears to lie in that the webpage is attempting to
check if the client has a client security certificate installed for the website. 

At the very minimum the error message should contain something along the lines
of that a required certificate is missing.

Second of all, the page should have continued loading, and displayed the page,
due to the fact that the page checks if there  is a certificate and if not loads
a default standard page.

Reproducible: Always

Steps to Reproduce:
1. if applicable, remove any client certificates for this site
2. load webpage http://secure.cacert.org
3.

Actual Results:  
Resulting error occors
secure.cacert.org has received an incorrect or unexpected message. error code:
-12227

Expected Results:  
Have given a better error message or the page should load. 
Internet explorer seems to proccess the site correctly. If there isnt a
certificate installed for the site it loads the sites default page.

Comment 1

[Steve England [:stevee]]

Attachment: What I see

with Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050402
Firefox/1.0+

Comment 2

[nf-bugzilla]

Accept that certificate, that is the server certificate.. sorry i forgot to say
that because i have the certificate already imported

it would be after that that the error is generated

Comment 3

[Steve England [:stevee]]

Attachment: What I see after accepting cert

OK, after accepted the certificate, I get this

Comment 4

[nf-bugzilla]

As i said, i dont get the server related certificates error as i have that
imported.. accept that and the error shoudl appear, 

im having issues removing my certificate so i can generate the error as well

Comment 5

[Steve England [:stevee]]

OK I see. After accepting the certificate and OKing the domain name mismatch
(both twice, I might add), I get the message

"secure.cacert.org has received an incorrect or unexpected message. error code:
-12227"

too.

Comment 6

[nf-bugzilla]

Thats the one, yeah if you have the cacert root certificate imported you dont
recieve those messages for obvious reasons

dont know why you get it twice tho.. maybe another bug? :D

Comment 7

[Karim Lakhani]

*** Bug 303496 has been marked as a duplicate of this bug. ***

Comment 8

[Serge Gautherie (:sgautherie)]

Confirmed, per comment 5 and bug 303496.

Comment 9

[Serge Gautherie (:sgautherie)]

FWIW, I can't reproduce the error, with current MAS/SM.

(I don't know about FF v1.0.2;
steps are not very detailed and followup comments can even be confusing.)

***

[Microsoft Internet Explorer, version 6.0.2800.1106 (128b, SP1)] (release++) (W2Ksp4)

(In reply to comment #0)
> Internet explorer seems to proccess the site correctly. If there isnt a
> certificate installed for the site it loads the sites default page.

1. Enter the URL.
1r. Get a 'Client Authentication' dialog, with an emtpy certificate list.
2. (OK or) Cancel.
2r. 'Impossible to find site or DNS error' error page.

***

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.13) Gecko/20060414] (release) (W2Ksp4)

(In reply to comment #1)
> Created an attachment (id=179457) [details]
> What I see

I get this correct dialog too.

(In reply to comment #3)
> Created an attachment (id=179458) [details]
> What I see after accepting cert

I can't reproduce this:
I get an "Alert" dialog saying "The document contains no data.".

(In reply to comment #5)
> "secure.cacert.org has received an incorrect or unexpected message. error code:
> -12227"

I don't know where this is supposed to show up: a dialog, the Error Console, ... ?

***

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9pre) Gecko/2008032900 SeaMonkey/2.0a1pre] (nightly) (W2Ksp4)

Works as expected:

Before accepting the certificate/exception:
{{
Secure Connection Failed

secure.cacert.org uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is not trusted.
(Error code: sec_error_untrusted_issuer)
}}

After creating the exception:
either
{{
Secure Connection Failed

An error occurred during a connection to secure.cacert.org.
SSL peer was unable to negotiate an acceptable set of security parameters.
(Error code: ssl_error_handshake_failure_alert)
}}
or
{{
Data Transfer Interrupted

The connection to secure.cacert.org has terminated unexpectedly. Some data may have been transferred.
}}

***

R.WorksForMe.
(It would seem this bug is outdated now, on both client and server sides...)

Comment 10

[Serge Gautherie (:sgautherie)]

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9b5pre) Gecko/2008032605 Minefield/3.0b5pre] (nightly) (W2Ksp4)

And FF v3 behaves much like SM v2.

Comment 11

[Serge Gautherie (:sgautherie)]

Ah ... this seems to be a duplicate of bug 143744,
which has both an image of the error, and some explanations...