Re: [Mozilla Enterprise] Security Warning for LogMeIn.com
The incomplete chain could definitely explain this. In the absence of AIA chasing (downloading missing CA certificates from a URL listed in the leaf cert, which some other browsers do but Firefox doesn't) or intermediate preloading (coming soon to Firefox), whether the site works or shows an error depends on whether the browser has cached a copy of the certificate (typically from visiting a properly-configured site using the same CA). Cheers, Julien On Fri, Mar 13, 2020 at 5:20 PM Andrew C Aitchison wrote: > On Fri, 13 Mar 2020, Eddie Rowe wrote: > > > I am receiving a failure of https on one system, but not on another > > running ESR 68.6 x64. I don't think it could be a DNS issue since > > Chrome and Edge show the https session on the same PC. Thoughts? > > > > URL: https://help.logmein.com/pkb_Home?l=en_US==3 > > I see from > https://www.ssllabs.com/ssltest/analyze.html?d=help.logmein.com > that they only support TLSv1.2 and have an incomplete certificate chain. > Could either of those match a changed setting on that instance of firefox ? > > Failing that, does 68.6 support DNS-over-HTTPS ? If so that could be > another difference, especially as there is a rolling switch-on in the US: > > https://blog.mozilla.org/futurereleases/2019/09/06/whats-next-in-making-dns-over-https-the-default/ > > -- > Andrew C. Aitchison Kendal, UK > and...@aitchison.me.uk > ___ > Enterprise mailing list > Enterprise@mozilla.org > https://mail.mozilla.org/listinfo/enterprise > > To unsubscribe from this list, please visit > https://mail.mozilla.org/listinfo/enterprise or send an email to > enterprise-requ...@mozilla.org with a subject of "unsubscribe" > ___ Enterprise mailing list Enterprise@mozilla.org https://mail.mozilla.org/listinfo/enterprise To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-requ...@mozilla.org with a subject of "unsubscribe"
Re: [Mozilla Enterprise] Security Warning for LogMeIn.com
On Fri, 13 Mar 2020, Eddie Rowe wrote: I am receiving a failure of https on one system, but not on another running ESR 68.6 x64. I don't think it could be a DNS issue since Chrome and Edge show the https session on the same PC. Thoughts? URL: https://help.logmein.com/pkb_Home?l=en_US==3 I see from https://www.ssllabs.com/ssltest/analyze.html?d=help.logmein.com that they only support TLSv1.2 and have an incomplete certificate chain. Could either of those match a changed setting on that instance of firefox ? Failing that, does 68.6 support DNS-over-HTTPS ? If so that could be another difference, especially as there is a rolling switch-on in the US: https://blog.mozilla.org/futurereleases/2019/09/06/whats-next-in-making-dns-over-https-the-default/ -- Andrew C. Aitchison Kendal, UK and...@aitchison.me.uk ___ Enterprise mailing list Enterprise@mozilla.org https://mail.mozilla.org/listinfo/enterprise To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-requ...@mozilla.org with a subject of "unsubscribe"
Re: [Mozilla Enterprise] Google Meet, Firefox, Proxy...
Mandi! Dimas Streich (Informàtica Trueta) In chel di` si favelave... > Maybe related to https://bugzilla.mozilla.org/show_bug.cgi?id=1468870 and > https://bugzilla.mozilla.org/show_bug.cgi?id=1554218 > Try setting network.http.spdy.enabled to false No, still does not work. Same result. ;( -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA) ___ Enterprise mailing list Enterprise@mozilla.org https://mail.mozilla.org/listinfo/enterprise To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-requ...@mozilla.org with a subject of "unsubscribe"
Re: [Mozilla Enterprise] Google Meet, Firefox, Proxy...
Maybe related to https://bugzilla.mozilla.org/show_bug.cgi?id=1468870 and https://bugzilla.mozilla.org/show_bug.cgi?id=1554218 Try setting network.http.spdy.enabled to false El 13/3/2020 a les 14:26, Marco Gaiarin ha escrit: This situation on COVID-19 put a booster on video conferencing and meeting, of course. In our organization i've hitted a strange thing. The same computer, Win7 64bit, that connect to the internet via the same HTTP proxy (squid). Firefox (latest ESR) connect to google meet, i can see the avatar on the screen, some seconds passed and then hangout, as the ''RTP'' traffic (in quotes, of course) does not start. Using chrome, all works as expected. Firefox on my linux box (that can bypass proxy) works. Someone can give me at least some hint on how to ''debug'' this? Thanks. -- Dimas Streich i Colomeda Unitat de Tecnologies de la Informació i Comunicació Hospital Universitari de Girona Doctor Josep Trueta Institut Català de la Salut Girona Departament de Salut | Generalitat de Catalunya Av.França s/n | 17007 Girona dstreich.girona@gencat.cat | http://www.hospitaltrueta.cat Aquest missatge s'adreça exclusivament a la persona destinatària i pot contenir informació privilegiada o confidencial. Si no sou el destinatari indicat, us recordem que la utilització, divulgació i/o còpia sense autorització està prohibida en virtut de la legislació vigent. Si heu rebut aquest missatge per error, feu-nos-ho saber immediatament per aquesta via i destruïu-lo. Abans d'imprimir aquest correu, assegureu-vos que és realment necessari. ___ Enterprise mailing list Enterprise@mozilla.org https://mail.mozilla.org/listinfo/enterprise To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-requ...@mozilla.org with a subject of "unsubscribe"
[Mozilla Enterprise] Google Meet, Firefox, Proxy...
This situation on COVID-19 put a booster on video conferencing and meeting, of course. In our organization i've hitted a strange thing. The same computer, Win7 64bit, that connect to the internet via the same HTTP proxy (squid). Firefox (latest ESR) connect to google meet, i can see the avatar on the screen, some seconds passed and then hangout, as the ''RTP'' traffic (in quotes, of course) does not start. Using chrome, all works as expected. Firefox on my linux box (that can bypass proxy) works. Someone can give me at least some hint on how to ''debug'' this? Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA) ___ Enterprise mailing list Enterprise@mozilla.org https://mail.mozilla.org/listinfo/enterprise To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-requ...@mozilla.org with a subject of "unsubscribe"
