969891 - AMO sometimes requires MD5 enabled in the browser

Status: RESOLVED DUPLICATE of bug 937555

(Cloud Services :: Operations: Marketplace, task)

Description

[msharov]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0 (Beta/Release)
Build ID: 20131118194756

Steps to reproduce:

RC4 and MD5 are currently believed to be insecure, so in about:config I have set security.ssl3.rsa_rc4_128_md5 and _sha to false.


Actual results:

The browser randomly displays MAC error ssl_error_bad_mac_read while accessing the site directly or just fails when using the addons dialog. This only happens sometimes (I'd guess about 1 in 4), perhaps indicating that only some of your servers are affected. Enabling rc4-md5 AND rc4-sha eliminates the problem. Strangely, having either one disabled produces the error.


Expected results:

Since at least some of your servers support work fine without RC4 (reloading the page eventually gets through), all servers should do so. Or, at least figure out why it's a MAC error instead of cipher negotiation failure.