FF10 now fails to load https://www.cjsm.net

RESOLVED WORKSFORME

Status

()

RESOLVED WORKSFORME
7 years ago
5 years ago

People

(Reporter: jpr, Unassigned)

Tracking

10 Branch
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

7 years ago
Referenced from https://support.mozilla.org/en-US/questions/917062

FF10 now fails to load https://www.cjsm.net.  Works in FF9 and IE9.  Fails on Chrome 18 as well.  Hangs forever.
In case we changed something related to SSL renegotiation, openssl tells me this about the server:
   Secure Renegotiation IS NOT supported

Manually sending the same headers as those that Firefox sends does work for me.

Updated

7 years ago
Keywords: regressionwindow-wanted

Comment 2

7 years ago
is this caused by bug 702111 ?
(Reporter)

Comment 3

7 years ago
Could be, https://support.mozilla.org/en-US/questions/917019 could also be the same thing.
Depends on: 702111
Keywords: regressionwindow-wanted
OS: Linux → All
Hardware: x86 → All
IE9, Google Chrome, Chrome Canary, and FF10 all have the same behavior.

It is caused by the 1/(n-1) record splitting that we are all doing now. I verified this by running Firefox with NSS_SSL_CBC_RANDOM_IV=0 set in the environment so that the site would load, and then running Firefox again without NSS_SSL_CBC_RANDOM_IV=0 in the environment to see it fail.
Component: Networking → Security: PSM
QA Contact: networking → psm
> IE9, Google Chrome, Chrome Canary, and FF10 all have the same behavior.

For IE9, that doesn't match comment 0.....

Comment 6

7 years ago
IE users would have to apply security update MS12-006 in order to see the same effect.

Comment 7

5 years ago
The site seems to load fine for me on Beta 25 and IE11 Release Preview... Resolve as WORKSFORME?
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.