Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2011-01-30 Thread Nelson B Bolyard
On 2011-01-30 11:48 PDT, Wan-Teh Chang wrote: > On Sun, Jan 30, 2011 at 1:32 AM, Nelson B Bolyard wrote: >> Firefox doesn't send TLS client hellos to servers that fail to >> complete ANY handshake with ANY version of SSL or TLS some number of >> times in a row when it has tried sending TLS client

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2011-01-30 Thread Wan-Teh Chang
On Sun, Jan 30, 2011 at 1:32 AM, Nelson B Bolyard wrote: > > Firefox doesn't send TLS client hellos to servers that fail to complete > ANY handshake with ANY version of SSL or TLS some number of times in a row > when it has tried sending TLS client hellos.  Once it decides the server > is incompat

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2011-01-30 Thread Nelson B Bolyard
On 2011-01-27 09:00 PDT, volkerk wrote: > I am having the same problem with Firefox 3.0.15, which is suddenly > unable to contact our Peoplesoft server and gets the no cypher error. > After capturing the packet exchange with Wireshark, I found out the > same as Suresh here - Firefox 3.0.15 (Windows

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2011-01-28 Thread volkerk
I am having the same problem with Firefox 3.0.15, which is suddenly unable to contact our Peoplesoft server and gets the no cypher error. After capturing the packet exchange with Wireshark, I found out the same as Suresh here - Firefox 3.0.15 (Windows) uses SSLv2 message format in the Client Hel

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-03 Thread Suresh Kumar J
I checked with Tomcat developers about this issue and they mentioned that this is an issue with the Harmony JRE. Now am trying to contact the Harmony JRE developers for further analysis. Michael Ströder wrote: Suresh Kumar J wrote: You are correct that Apache Tomcat web-server(v6.

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-03 Thread Michael Ströder
Suresh Kumar J wrote: > > You are correct that Apache Tomcat web-server(v6.0.13) choked with the > full set of cipher suites implemented in the Windows FF3.0.1. When I > disable the following cipher suites via the "about:config" option, the > web communication started working and the server didn't

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Suresh Kumar J
Ok. But I feel that the server should ignore the ciphers which it doesn't understand instead of rejecting the connections. Because, you can't expect the server to understand all the ciphers that the browser has. Moreover, the SSL communication will succeed only when both the parties agree upon

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Robert Relyea
Nelson B Bolyard wrote: Suresh Kumar J wrote, On 2008-09-02 10:55: Hi Nelson, You are correct that Apache Tomcat web-server(v6.0.13) choked with the full set of cipher suites implemented in the Windows FF3.0.1. When I disable the following cipher suites via the "about:config" option, the web

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Nelson B Bolyard
Suresh Kumar J wrote, On 2008-09-02 10:55: > Hi Nelson, > > You are correct that Apache Tomcat web-server(v6.0.13) choked with the > full set of cipher suites implemented in the Windows FF3.0.1. When I > disable the following cipher suites via the "about:config" option, the > web communication sta

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Suresh Kumar J
Yes, I have ensured that the parameter "security.enable_ssl2" is indeed set to "false" in "about:config". Wan-Teh Chang wrote: > Hi Suresh, > > Please type "about:config" in the location bar. > > In the Filter field, type "security.enable_ssl2". What is the value? > It should be "false". > > I b

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Kai Engert
Nelson B Bolyard wrote: Wan-Teh Chang wrote, On 2008-09-02 10:36: I believe this is the relevant source code in Firefox: http://mxr.mozilla.org/mozilla-central/source/security/manager/ssl/src/nsNSSComponent.cpp#1596 The above code sets the default for a new socket. I believe this

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Suresh Kumar J
Hi Nelson, You are correct that Apache Tomcat web-server(v6.0.13) choked with the full set of cipher suites implemented in the Windows FF3.0.1. When I disable the following cipher suites via the "about:config" option, the web communication started working and the server didn't complain anythin

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Nelson B Bolyard
Wan-Teh Chang wrote, On 2008-09-02 10:36: > I believe this is the relevant source code in Firefox: > > http://mxr.mozilla.org/mozilla-central/source/security/manager/ssl/src/nsNSSComponent.cpp#1596 I believe this is the relevant source code in Firefox: http://bonsai.mozilla.org/cvsblame.cgi?fil

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Wan-Teh Chang
Hi Suresh, Please type "about:config" in the location bar. In the Filter field, type "security.enable_ssl2". What is the value? It should be "false". I believe this is the relevant source code in Firefox: http://mxr.mozilla.org/mozilla-central/source/security/manager/ssl/src/nsNSSComponent.cpp

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-08-31 Thread Suresh Kumar J
Please see inline for my repli @ [Suresh]. Thanks for your inputs. Enclosed the packet capture of the failing SSL handshake with FF3.0.1 on Windows. Nelson B Bolyard wrote: Suresh Kumar J wrote, On 2008-08-30 22:40: Am having the FireFox 3.0.1 on Windows XP with the default setti

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-08-31 Thread Nelson B Bolyard
Suresh Kumar J wrote, On 2008-08-30 22:40: > Am having the FireFox 3.0.1 on Windows XP with the default settings. > When I try to connect(https on 443) to the internal website which is > running on Apache Tomcat (v6.0.14), I get the following error: > (Error code: ssl_error_no_cypher_overlap) >