Bug 20834

Summary:	SSL errors with iceape (NS_ERROR_NET_INADEQUATE_SECURITY)
Product:	Mageia	Reporter:	Stephan Mueller <steffo76>
Component:	RPM Packages	Assignee:	Christiaan Welvaart <cjw>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	marja11, smelror
Version:	5
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	iceape-2.46-1.mga5.src.rpm	CVE:
Status comment:

Description Stephan Mueller 2017-05-12 18:24:55 CEST

Description of problem:
Various https-connections do not work anymore, especially with google-based services like youtube. The following error message appears:

Your connection is not secure

The website tried to negotiate an inadequate level of security.

www.youtube.com uses security technology that is outdated and vulnerable to attack. An attacker could easily reveal information which you thought to be safe. The website administrator will need to fix the server first before you can visit the site.

Error code: NS_ERROR_NET_INADEQUATE_SECURITY

Version-Release number of selected component (if applicable):
2.46

How reproducible:
100%

Steps to Reproduce:
1. Try to open https://www.youtube.com/
2.
3.

Comment 1 Stig-Ørjan Smelror 2017-05-12 21:21:42 CEST

I get the same type of errors on Firefox 55.a1 Nightly and Firefox Developer Edition. I thought there was something wrong with my internet connection, rebooting my router several times...

I see Firefox trying a TLS handshake before timing out.

CC: (none) => smelror

Comment 2 Marja Van Waes 2017-05-13 10:45:49 CEST

Assigning to the Iceape maintainer.



(In reply to Stig-Ørjan Smelror from comment #1)
> I get the same type of errors on Firefox 55.a1 Nightly and Firefox Developer
> Edition. I thought there was something wrong with my internet connection,
> rebooting my router several times...
> 
> I see Firefox trying a TLS handshake before timing out.

Unless the Iceape maintainer tells differently, I consider that to be a different issue

This may help you https://support.mozilla.org/en-US/questions/1136120
(a better, more recent, thread might exist)

Assignee: bugsquad => cjw
CC: (none) => marja11
Summary: SSL errors => SSL errors with iceape (NS_ERROR_NET_INADEQUATE_SECURITY)

Comment 3 Christiaan Welvaart 2017-05-13 19:22:24 CEST

Likely the same bug as https://bugs.mageia.org/show_bug.cgi?id=20588 - please try the workaround from there:

  in about:config, set network.http.spdy.enforce-tls-profile to false

Comment 4 Stephan Mueller 2017-05-13 23:14:57 CEST

Setting network.http.spdy.enforce-tls-profile to false helped, thanks !

Comment 5 Christiaan Welvaart 2017-09-01 23:24:26 CEST

Should be fixed with seamonkey 2.48.

Resolution: (none) => FIXED
Status: NEW => RESOLVED