Bug 20834 - SSL errors with iceape (NS_ERROR_NET_INADEQUATE_SECURITY)
Summary: SSL errors with iceape (NS_ERROR_NET_INADEQUATE_SECURITY)
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 5
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Christiaan Welvaart
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-05-12 18:24 CEST by Stephan Mueller
Modified: 2017-09-01 23:24 CEST (History)
2 users (show)

See Also:
Source RPM: iceape-2.46-1.mga5.src.rpm
CVE:
Status comment:


Attachments

Description Stephan Mueller 2017-05-12 18:24:55 CEST
Description of problem:
Various https-connections do not work anymore, especially with google-based services like youtube. The following error message appears:

Your connection is not secure

The website tried to negotiate an inadequate level of security.

www.youtube.com uses security technology that is outdated and vulnerable to attack. An attacker could easily reveal information which you thought to be safe. The website administrator will need to fix the server first before you can visit the site.

Error code: NS_ERROR_NET_INADEQUATE_SECURITY

Version-Release number of selected component (if applicable):
2.46

How reproducible:
100%

Steps to Reproduce:
1. Try to open https://www.youtube.com/
2.
3.
Comment 1 Stig-Ørjan Smelror 2017-05-12 21:21:42 CEST
I get the same type of errors on Firefox 55.a1 Nightly and Firefox Developer Edition. I thought there was something wrong with my internet connection, rebooting my router several times...

I see Firefox trying a TLS handshake before timing out.

CC: (none) => smelror

Comment 2 Marja Van Waes 2017-05-13 10:45:49 CEST
Assigning to the Iceape maintainer.



(In reply to Stig-Ørjan Smelror from comment #1)
> I get the same type of errors on Firefox 55.a1 Nightly and Firefox Developer
> Edition. I thought there was something wrong with my internet connection,
> rebooting my router several times...
> 
> I see Firefox trying a TLS handshake before timing out.

Unless the Iceape maintainer tells differently, I consider that to be a different issue

This may help you https://support.mozilla.org/en-US/questions/1136120
(a better, more recent, thread might exist)

Assignee: bugsquad => cjw
CC: (none) => marja11
Summary: SSL errors => SSL errors with iceape (NS_ERROR_NET_INADEQUATE_SECURITY)

Comment 3 Christiaan Welvaart 2017-05-13 19:22:24 CEST
Likely the same bug as https://bugs.mageia.org/show_bug.cgi?id=20588 - please try the workaround from there:

  in about:config, set network.http.spdy.enforce-tls-profile to false
Comment 4 Stephan Mueller 2017-05-13 23:14:57 CEST
Setting network.http.spdy.enforce-tls-profile to false helped, thanks !
Comment 5 Christiaan Welvaart 2017-09-01 23:24:26 CEST
Should be fixed with seamonkey 2.48.

Resolution: (none) => FIXED
Status: NEW => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.