723898 - FF10 now fails to load https://www.cjsm.net

Status: RESOLVED WORKSFORME

(Core :: Security: PSM, defect)

Description

[JP Rosevear [:jpr]]

Referenced from https://support.mozilla.org/en-US/questions/917062

FF10 now fails to load https://www.cjsm.net.  Works in FF9 and IE9.  Fails on Chrome 18 as well.  Hangs forever.

Comment 1

[Mike Hommey [:glandium]]

In case we changed something related to SSL renegotiation, openssl tells me this about the server:
   Secure Renegotiation IS NOT supported

Manually sending the same headers as those that Firefox sends does work for me.

Comment 2

[Jo Hermans]

is this caused by bug 702111 ?

Comment 3

[JP Rosevear [:jpr]]

Could be, https://support.mozilla.org/en-US/questions/917019 could also be the same thing.

Comment 4

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

IE9, Google Chrome, Chrome Canary, and FF10 all have the same behavior.

It is caused by the 1/(n-1) record splitting that we are all doing now. I verified this by running Firefox with NSS_SSL_CBC_RANDOM_IV=0 set in the environment so that the site would load, and then running Firefox again without NSS_SSL_CBC_RANDOM_IV=0 in the environment to see it fail.

Comment 5

[Boris Zbarsky [:bzbarsky]]

> IE9, Google Chrome, Chrome Canary, and FF10 all have the same behavior.

For IE9, that doesn't match comment 0.....

Comment 6

[Adam Langley]

IE users would have to apply security update MS12-006 in order to see the same effect.

Comment 7

[:Cykesiopka]

The site seems to load fine for me on Beta 25 and IE11 Release Preview... Resolve as WORKSFORME?