63174 - Java applets don't appear to use SSL properly

Status: VERIFIED WORKSFORME

(Core Graveyard :: Java: OJI, defect)

Description

[James Cooley]

I sent the following to hushmail but haven't had a reply.

Thanks,

James


From - Fri Dec 08 12:02:14 2000
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Message-ID: <[e-mail]> Date: Fri, 08 Dec 2000 12:02:08 +0000
From: James Cooley <[e-mail]> User-Agent: Mozilla/5.0 (X11; U; Linux
2.2.12-20 i686; en-US; 0.6) Gecko/20001205
X-Accept-Language: en
MIME-Version: 1.0
To: [e-mail]
Subject: Mozilla 0.6 and hush applets


Hi,

I'm using the latest Mozilla (i.e. 0.6) but it looks as if my channel isn't
being encrypted. I have installed the PSM so
SSL does work but I'm not sure what happens with applets. When I check the PSM I
the message below. I also
checked using netstat when connecting to hushmail and to the SSL-check site at
fortiry.net. This would seem to
confirm my worries.

Thanks

James

jcooley> netstat | grep -i hushmail
tcp        0      0 jcooley:1703            user3.hushmail.com:www  ESTABLISHED
tcp        0      0 jcooley:1702            user3.hushmail.com:www  TIME_WAIT
[/mnt/dose/tgz/kde/i386]
jcooley> netstat | grep -i forti
tcp        0      0 jcooley:1724            www.fortify.net:https   ESTABLISHED
tcp        0      0 jcooley:1722            www.fortify.net:https   ESTABLISHED
tcp        0      0 jcooley:1720            www.fortify.net:https   ESTABLISHED
tcp        0      0 jcooley:1718            www.fortify.net:https   ESTABLISHED
tcp        0      0 jcooley:1716            www.fortify.net:https   ESTABLISHED
tcp        0      0 jcooley:1709            www.fortify.net:www     ESTABLISHED
tcp        0      0 jcooley:1708            www.fortify.net:www     ESTABLISHED
tcp        0      0 jcooley:1707            www.fortify.net:www     ESTABLISHED
tcp        0      0 jcooley:1706            www.fortify.net:www     TIME_WAIT
tcp        0      0 jcooley:1705            www.fortify.net:www     ESTABLISHED
[/mnt/dose/tgz/kde/i386]

------------------------------------------------------------------
The following is a dump of what's returned when you click on the security button.


Web Site Identity Not Verified

The web site www.hushmail.com does not support authentication [Glossary Entry]
for the page you are viewing.

Without authentication, the origin of information sent over the Internet cannot
be verified.
Connection Not Encrypted

The web site www.hushmail.com does not support encryption [Glossary Entry] for
the page you are viewing.

Information sent over the Internet without encryption can be seen by other
people while it is in transit.

Comment 1

[Fabian Guisset]

Reporter, are you using a proxy? Could you please test this with a recent
version of Mozilla (http://ftp.mozilla.org/pub/mozilla/nightly) or wait for the
upcoming 0.7?
Thanks,
Fabian.
Over to OJI for further triage.

Comment 2

[Keyser Sose]

Marking WORKSFORME due to lack of response. Reopen if this is still a problem in
the latest nightlies.

Comment 3

[John Unruh]

Verified worksforme.