Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2011-01-30 Thread Nelson B Bolyard
On 2011-01-27 09:00 PDT, volkerk wrote: I am having the same problem with Firefox 3.0.15, which is suddenly unable to contact our Peoplesoft server and gets the no cypher error. After capturing the packet exchange with Wireshark, I found out the same as Suresh here - Firefox 3.0.15 (Windows)

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2011-01-30 Thread Wan-Teh Chang
On Sun, Jan 30, 2011 at 1:32 AM, Nelson B Bolyard nel...@bolyard.me wrote: Firefox doesn't send TLS client hellos to servers that fail to complete ANY handshake with ANY version of SSL or TLS some number of times in a row when it has tried sending TLS client hellos.  Once it decides the server

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2011-01-30 Thread Nelson B Bolyard
On 2011-01-30 11:48 PDT, Wan-Teh Chang wrote: On Sun, Jan 30, 2011 at 1:32 AM, Nelson B Bolyard nel...@bolyard.me wrote: Firefox doesn't send TLS client hellos to servers that fail to complete ANY handshake with ANY version of SSL or TLS some number of times in a row when it has tried sending

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-03 Thread Michael Ströder
Suresh Kumar J wrote: You are correct that Apache Tomcat web-server(v6.0.13) choked with the full set of cipher suites implemented in the Windows FF3.0.1. When I disable the following cipher suites via the about:config option, the web communication started working and the server didn't

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Wan-Teh Chang
Hi Suresh, Please type about:config in the location bar. In the Filter field, type security.enable_ssl2. What is the value? It should be false. I believe this is the relevant source code in Firefox: http://mxr.mozilla.org/mozilla-central/source/security/manager/ssl/src/nsNSSComponent.cpp#1596

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Kai Engert
Nelson B Bolyard wrote: Wan-Teh Chang wrote, On 2008-09-02 10:36: I believe this is the relevant source code in Firefox: http://mxr.mozilla.org/mozilla-central/source/security/manager/ssl/src/nsNSSComponent.cpp#1596 The above code sets the default for a new socket. I believe this

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Suresh Kumar J
Yes, I have ensured that the parameter security.enable_ssl2 is indeed set to false in about:config. Wan-Teh Chang wrote: Hi Suresh, Please type about:config in the location bar. In the Filter field, type security.enable_ssl2. What is the value? It should be false. I believe this is the

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Robert Relyea
Nelson B Bolyard wrote: Suresh Kumar J wrote, On 2008-09-02 10:55: Hi Nelson, You are correct that Apache Tomcat web-server(v6.0.13) choked with the full set of cipher suites implemented in the Windows FF3.0.1. When I disable the following cipher suites via the about:config option, the web

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-02 Thread Suresh Kumar J
Ok. But I feel that the server should ignore the ciphers which it doesn't understand instead of rejecting the connections. Because, you can't expect the server to understand all the ciphers that the browser has. Moreover, the SSL communication will succeed only when both the parties agree upon

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-08-31 Thread Nelson B Bolyard
Suresh Kumar J wrote, On 2008-08-30 22:40: Am having the FireFox 3.0.1 on Windows XP with the default settings. When I try to connect(https on 443) to the internal website which is running on Apache Tomcat (v6.0.14), I get the following error: (Error code: ssl_error_no_cypher_overlap) I

FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-08-30 Thread Suresh Kumar J
Hi! Am having the FireFox 3.0.1 on Windows XP with the default settings. When I try to connect(https on 443) to the internal website which is running on Apache Tomcat (v6.0.14), I get the following error: Secure Connection Failed An error occurred during a connection to 10.xx.xx.xx Cannot