Bug#730867: iceweasel: ssl_error_no_cypher_overlap error when using ipv6-enabled server with sslv3 disabled

2013-12-04 Thread Pierre Emeriaud
2013/12/3 Daniel Kahn Gillmor d...@fifthhorseman.net: Have you tried with a fresh profile, in -safe-mode (all extensions disabled)? Without even using safe-mode, I'm not seeing the issue anymore. I rebooted and changed the switch I was using on the computer, but I can hardly see how could a

Bug#730867: iceweasel: ssl_error_no_cypher_overlap error when using ipv6-enabled server with sslv3 disabled

2013-12-02 Thread Pierre Emeriaud
I was using iceweasel 25.0-1 and libnss3 2:3.15.3-1 during this capture, with an untouched profile. I'm using the same versions. Can you provide a similar packet capture, or some other way to replicate the problem? Sure. The two packet captures attached to this mail were done by the same

Bug#730867: iceweasel: ssl_error_no_cypher_overlap error when using ipv6-enabled server with sslv3 disabled

2013-12-01 Thread Pierre Emeriaud
Hello Daniel, What configuration settings for iceweasel's TLS stack are made in about:config for the profile experiencing this behavior? The config is pretty vanilla. no tweaks whatsoever. In particular, i'm curious about the values for security.tls.version.max security.tls.version.min

Bug#730867: iceweasel: ssl_error_no_cypher_overlap error when using ipv6-enabled server with sslv3 disabled

2013-11-30 Thread Pierre Emeriaud
Package: iceweasel Version: 25.0-1 Severity: important Tags: ipv6 When using ipv6, iceaweasel SSL hello is SSLv3, whereas it offers TLSv1 when using ipv4. This leeds to the ssl_error_no_cypher_overlap error messages if the server has SSLv3 disabled. This behavior is not seen with other