64888 - comhome.comdirect.de is not TLS aware

Status: VERIFIED FIXED

(Core Graveyard :: Security: UI, defect, P1)

Description

[siebert]

Hello,
the site http://comhome.comdirect.de is the major online broker
here in Germany. So many users might want to access this site,but
using mozilla 0.7 you can't.
You get the following errors:

sh: invalid character 17 in exportstr for AVA_PLUGIN_STATE130_01
./start-psm: invalid character 17 in exportstr for AVA_PLUGIN_STATE130_01
Error loading URL http://comhome.comdirect.de/: 80004005

Bye

Comment 1

[Stephan Niemz]

Unfortunately comdirect doesn't work with TLS enabled. Please go to the PSM,
then "Advanced ... Options", disable TLS and try again. Does it work now?
Then it may be a dup of bug 33772, although that one is marked windows only.

But unfortunately even after doing that you still can't log in. That would be
bug 48453.

Comment 2

[John Unruh]

Marking invalid. Comdirect is using a TLS intolerant server. Until they fix 
their server, the workaround for the client is descibed above.

Comment 3

[Stephan Niemz]

I also filed this bug before, and you marked it as invalid, too. But I'm not
quite satisfied with this practise. I have seen that other bugs of this kind
have been kept open and assigned to the component "Evangelism". Does that not
apply to PSM?

I'm sure this won't be the last time this bug will be reported. Wouldn't it be
better if it would stay open (at component Evangelism) so that others can find
it instead of filing it again?

And why do you mark it invalid? It is very easy to confirm. It may be a dup of
some other bug, but invalid?

And another question: you resolved bug 57640 which I submitted about this *and*
verified that yourself. Is this common practise? I thought the point with
verifying something would be that someone *else* does this.

CCing Evangelism owners, I hope they can help here. Reopening and changing
summary.

Comment 4

[John Unruh]

Let's give it a try - over to evangelism.
I marked this bug invalid because there is nothing wrong with PSM in this 
regard, and there is an easy solution - turn off TLS. As an employee at 
Netscape, I can mark bugs verified where I also resolved them. If I didn't, 99% 
of the bugs assigned to me as QA Contact would not get verified.

Comment 5

[John Unruh]

Reassigning to [e-mail]

Comment 6

[Blake Ross]

Verifying bugs that you resolved is fine if you're the QA contact.  But the 
justification for that is that you're the QA contact, not that you're an 
employee of Netscape.

Comment 7

[rzeineh]

I did disable TLS it does not solve the problem.

I get the same error for these two pages:

Error loading URL http://comhome.comdirect.de/: 80004005
Error loading URL https://webbanking.tdaccess.com/: 80004005

Comment 8

[Blake Ross]

Reassigning evangelism bugs to [e-mail].

Comment 9

[Matthias Versen [:Matti]]

*** Bug 79360 has been marked as a duplicate of this bug. ***

Comment 10

[Javier Delgadillo]

->psm, p1

Comment 11

[Javier Delgadillo]

taking bug

Comment 12

[Javier Delgadillo]

Attachment: patch to use SSL v3.0 when SSL v3.1 (TLS) fails.

Comment 13

[Javier Delgadillo]

wtc:
Please review my patch.

Comment 14

[Javier Delgadillo]

Attachment: Updated patch

Comment 15

[Javier Delgadillo]

r=wtc, via e-mail.
Sending to blizzard for sr=

Comment 16

[Javier Delgadillo]

Attachment: Latest patch w/ updates suggested by wtc.

Comment 17

[Javier Delgadillo]

Ignore the section of the patch for nsSecureBrowserUIImpl.cpp.

I forgot to remove that from the patch when I patched the entire directory.

Comment 18

[Wan-Teh Chang]

I reviewed Javi's change and his latest patch incorporated
my suggested changes.  r=wtc.

Comment 19

[Christopher Blizzard (:blizzard)]

sr=blizzard

Comment 20

[Asa Dotzler [:asa]]

a= [e-mail] for checkin to the trunk.
(on behalf of drivers)

Comment 21

[Javier Delgadillo]

Fix checked into the trunk.

Comment 22

[Wan-Teh Chang]

*** Bug 83630 has been marked as a duplicate of this bug. ***

Comment 23

[John Unruh]

Verified with the 6/11 trunk build.