[Bug 226006] New: seamonkey: "Error establishing an encrypted connection to 102.112.2o7.net. Error Code: -5990."
https://bugzilla.novell.com/show_bug.cgi?id=226006 Summary: seamonkey: "Error establishing an encrypted connection to 102.112.2o7.net. Error Code: -5990." Product: SUSE Linux 10.1 Version: Final Platform: i686 URL: https://signin.ebay.de/ OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: X11 Applications AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: Ulrich.Windl@rz.uni-regensburg.de QAContact: sndirsch@novell.com Seamonkey suddenly starts to be unable to establish HTTPS connections (like to Novell's bugzilla, or to signin.ebay.de). The error message reads: "Error establishing an encrypted connection to 102.112.2o7.net. Error Code: -5990." The system however seems to be able to establish a TLS connection. I tried: openssl s_client -CApath /etc/ssl/certs -connect signin.ebay.de:443 with success: [...] New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA Server public key is 1024 bit Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher : DES-CBC3-SHA Session-ID: D4BE3A780B61F3D98BFA5FB32D0C95F77294A696D19E581DC2403C0311C762F3 Session-ID-ctx: Master-Key: 78ACB93375F3076E96FBA72B66EAE98E9E63AAD69293B4050B0C73579C55DA74A672374C16A1E0BA97AAB3127279F1D8 Key-Arg : None Start Time: 1165313692 Timeout : 300 (sec) Verify return code: 0 (ok) So it must be a problem in seamonkey. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=226006 ------- Comment #1 from Ulrich.Windl@rz.uni-regensburg.de 2006-12-05 03:36 MST ------- Created an attachment (id=108289) --> (https://bugzilla.novell.com/attachment.cgi?id=108289&action=view) Screen Shot -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=226006 chrubis@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team- |bnc-team-gnome@forge.provo.novell.com |screening@forge.provo.novell| |.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=226006 jpr@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team- |maw@novell.com |gnome@forge.provo.novell.com| Component|X11 Applications |Firefox -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=226006 ------- Comment #2 from Ulrich.Windl@rz.uni-regensburg.de 2006-12-05 09:50 MST ------- The problem is not present with current Firefox (MozillaFirefox-1.5.0.8-0.2). Restarting the browser (seamonkey-1.0.6-0.1) did not help. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=226006 ------- Comment #3 from Ulrich.Windl@rz.uni-regensburg.de 2006-12-08 04:56 MST ------- Found out that the problem vanished when Preference "Privacy & Security --> Validation --> Use OSCP to validate only certificates that specify an OCSP service URL" is changed to "Do not use OCSP for certificate validation". It might be related to the fact that the "RSA Security Secure Server OCSP Responder" and some other CA certificate did expired (my profile data is a few years old). Reported to Mozilla.org: https://bugzilla.mozilla.org/show_bug.cgi?id=363152 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=226006 maw@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |Ulrich.Windl@rz.uni-regensburg.de ------- Comment #4 from maw@novell.com 2006-12-21 16:03 MST ------- Ulrich: When I start seamonkey on my 10.1 box, OSCP is already disabled, and about:config (search for the string oscp) indicates that it is disabled as the default. So, before I close this as WORKSFORME, do you know if this is something you had changed previously? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=226006 Ulrich.Windl@rz.uni-regensburg.de changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|Ulrich.Windl@rz.uni- | |regensburg.de | ------- Comment #5 from Ulrich.Windl@rz.uni-regensburg.de 2007-01-08 02:39 MST ------- I agree that I did enable OSCP, but that's completely expected for any security-aware person. The problem (AFAIK) was: The Verisign verification server had been unavailable for an extended period of time, and as this problem was kind of unexpected, the error message was hard to understand. The odd name of verisign's server added to the confusion. While this problem is gone now, and there's a work-around, a better error message from mainstream would be very much appreciated. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=226006#c6
JP Rosevear
participants (1)
-
bugzilla_noreply＠novell.com