Bug#565987: iceweasel: secure connection failed message, from https page - works with firefox same version

[Giorgos Pallas]

Package: iceweasel
Version: 3.5.6-1
Severity: important


I have tried running iceweasel in safe mode, on a new user (rm -rf
..mozilla), and still, I can reproduce the following behaviour:

I go to https://myserver.mydomain.com -> it works ok. When I go to
https://myserver.mydomain.com/userspace
(where I should be authenticated with my personal certificate) I get the
message:

Secure Connection Failed
An error occurred during a connection to myserver.mydomain.com.
* The page you are trying to view can not be shown because the
* authenticity of the received data could not be verified.

* Please contact the web site owners to inform them of this problem.
* Alternatively, use the command found in the help menu to report this
* broken site.

I downloaded from mozilla.com the firefox 3.5.6 binary and run it -> it
works OK. First, the difference in behaviour betweeen firefox 3.5.6 and
iceweasel 3.5.6 is a bit strange.

I keep my debian testing system regularly updated, and this must have
happened about a month ago - maybe sooner.

-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.30-2-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iceweasel depends on:
ii debianutils 3.2.2 Miscellaneous utilities specific t
ii fontconfig 2.8.0-2 generic font configuration library
ii libc6 2.10.2-2 GNU C Library: Shared libraries
ii libgcc1 1:4.4.2-9 GCC support library
ii libglib2.0-0 2.22.3-1 The GLib library of C routines
ii libgtk2.0-0 2.18.3-1 The GTK+ graphical user interface
ii libnspr4-0d 4.8.2-1 NetScape Portable Runtime Library
ii libstdc++6 4.4.2-9 The GNU Standard C++ Library v3
ii procps 1:3.2.8-2 /proc file system utilities
ii psmisc 22.10-1 utilities that use the proc file s
ii xulrunner-1.9.1 1.9.1.6-1 XUL + XPCOM application runner

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
pn latex-xft-fonts <none> (no description available)
ii libkrb53 1.6.dfsg.4~beta1-13 Transitional library package/krb4
pn mozplugger <none> (no description available)
pn ttf-mathematica4.1 <none> (no description available)
ii xfonts-mathml 4 Type1 Symbol font for MathML
pn xprint <none> (no description available)
pn xulrunner-1.9.1-gnom <none> (no description available)

-- no debconf information

[Mike Hommey]

Post by Giorgos Pallas
Package: iceweasel
Version: 3.5.6-1
Severity: important
I have tried running iceweasel in safe mode, on a new user (rm -rf
I go to https://myserver.mydomain.com -> it works ok. When I go to
https://myserver.mydomain.com/userspace
(where I should be authenticated with my personal certificate) I get the
Secure Connection Failed
An error occurred during a connection to myserver.mydomain.com.
* The page you are trying to view can not be shown because the
* authenticity of the received data could not be verified.
* Please contact the web site owners to inform them of this problem.
* Alternatively, use the command found in the help menu to report this
* broken site.
I downloaded from mozilla.com the firefox 3.5.6 binary and run it -> it
works OK. First, the difference in behaviour betweeen firefox 3.5.6 and
iceweasel 3.5.6 is a bit strange.
I keep my debian testing system regularly updated, and this must have
happened about a month ago - maybe sooner.

See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=561918#74
or http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=561918#79

Mike

[Γιώργος Πάλλας]

Post by Mike Hommey

Post by Giorgos Pallas
Package: iceweasel
Version: 3.5.6-1
Severity: important
I have tried running iceweasel in safe mode, on a new user (rm -rf
I go to https://myserver.mydomain.com -> it works ok. When I go to
https://myserver.mydomain.com/userspace
(where I should be authenticated with my personal certificate) I get the
Secure Connection Failed
An error occurred during a connection to myserver.mydomain.com.
* The page you are trying to view can not be shown because the
* authenticity of the received data could not be verified.
* Please contact the web site owners to inform them of this problem.
* Alternatively, use the command found in the help menu to report this
* broken site.
I downloaded from mozilla.com the firefox 3.5.6 binary and run it -> it
works OK. First, the difference in behaviour betweeen firefox 3.5.6 and
iceweasel 3.5.6 is a bit strange.
I keep my debian testing system regularly updated, and this must have
happened about a month ago - maybe sooner.

See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=561918#74
or http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=561918#79
Mike

Thank you very much!
NSS_SSL_ENABLE_RENEGOTIATION=1 iceweasel
worked as a temporary solution. I searched for bugs containing
'certificate' in the subject before I submitted the bug with reportbug,
but I did not find #561918.

Thanks again!

Giorgos