83630 - Mozilla displays nothing

Status: VERIFIED DUPLICATE of bug 64888

(Core Graveyard :: Security: UI, defect)

Description

[Thomas Betz]

Go to the URL http://www.askocs.ch with IE/Netscape old. No problems, the site
will redirect you to a https site. But with Mozilla nothing happens. 
I'm sure I could provide you with more information about the server etc. if
needed (I'm not the webmaster, but this is a server of our company.)

Comment 1

[Boris Zbarsky [:bzbarsky]]

The site is timing out for me when I try to access it.  Could you attach the 
HTML it returns (together with the HTTP headers if possible) using 
http://bugzilla.mozilla.org/createattachment.cgi?id=83630 ?

Comment 2

[Thomas Betz]

I'm not able to connect to the site with IE/Netscape old anymore. It seems to me
that they have taken the site down now, but I'm sure not for long (I guess the
site will be back next week.)
I will attach the HTML files at tuesday (when I'm back at work).

Comment 3

[Thomas Betz]

I'm sorry, but you can't test the site because it's (at the moment) only visible
within our network(Mozilla displays nothting nevertheless). But the site will be
online in two or three weeks. I can then attach the HTML files but I'm almost
100% sure that wrong HTML isn't the problem, the site is visible locally at my
computer....
So, close this bug and open new one when you can test the site? Or should this
bug stay open?

Comment 4

[Boris Zbarsky [:bzbarsky]]

Let's keep this open and comment/attach as more info becomes available.

Comment 5

[Thomas Betz]

I've deactivated TLS in the preference menu because of a post from asa at
slashdot -> this fixed the problem, Mozilla now connects to the site!! Asa said
that this problem is because of a wrong server configuration, can somebody give
me more information on that topic because then we could fix this at our servers.
thanks!

Comment 6

[Boris Zbarsky [:bzbarsky]]

Bob, what's our TLS shpiel?  Could you let Thomas know what he should 
do?

Comment 7

[Bob Clary [:bc] (inactive)]

Thomas, the basic spiel is that several servers implement the fallback from TLS
(or SSL 3.1) to earlier protocols incorrectly. Mozilla follows the
specification, but since these servers do not we have problems connecting to
them. I don't believe it is a server configuration problem but is due to bugs in
the SSL implementation of the servers themselves. The work around is to turn off
TLS so we do not try to connect to the 'bad' servers using TLS. Currently TLS is
turned on by default, but a patch is going in (has gone in?) that will change
the default to have TLS turned off so we can work with these broken servers.

The tracking bug on this is http://bugzilla.mozilla.org/show_bug.cgi?id=59321

Thomas, please report the type of server your site is using so it can be
reported in the tracking bug so the server vendors can be notified to correct
their SSL implementations.

This should prolly be confirmed, Product->NSS, Component->Libraries,
Platform->All, OS->All

Comment 8

[Asa Dotzler [:asa]]

updating bug.

Comment 9

[Wan-Teh Chang]

This is a duplicate of PSM bug #64888.  I am changing
the Product to PSM and markingg the bug as a duplicate.

Comment 10

[Wan-Teh Chang]

*** This bug has been marked as a duplicate of 64888 ***

Comment 11

[John Unruh]

Verified dupe.

Comment 12

[Thomas Betz]

The site is running on a Domino Server, Version 5.0.6A. Webserver runs on NT4 SP6A.
Hope this helps!
(again, the site is not accessible now)