Secure Connection Failed

[novice]

I try going to https://www.labor.ny.gov/home/ and can't access it with secure connection failed. I try Firefox for IOS mobile and it loads fine.
Any ideas?
I tried all the troubleshooting, FF 60

[therube]

Something wrong.
Not sure what.
I'd wait till they sort it on their end.

[Brummelchen]

go about:support, open profile folder, exit firefox, rename cert9.db to cert9.old, restart firefox.
does this help? if not disable SSL scanning in your used antivirus (except windows defender)

[therube]

Hmm. Guess I should have said I see the "same*" in SeaMonkey 2.49.3.
"*same" - "the connect to has terminated unexpectedly. some data may have been transferred."
Though FF 52.x does load without issue.
Odd.
WinXP.
And a new SeaMonkey Profile works as expected.
Wonder what's up.
No A/V or anything like that on my end.
Copying non-working Profile cert8.db into working Profile does not break it.
Copying prefs.js over does break it.


More complete message:

Code: Select all

Secure Connection Failed

The connection to www.labor.ny.gov has terminated unexpectedly. Some data may have been transferred.

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

[TheVisitor]

Site loads here on latest Nightly.

[therube]

On my end, looks to be one or some combination of:

Code: Select all

user_pref("network.dns.disablePrefetch", true);
user_pref("network.http.speculative-parallel-limit", 0);
user_pref("network.prefetch-next", false);
user_pref("network.proxy.share_proxy_settings", true);

No idea how or why those particular settings came about.
(They are not something I would have gone about messing with.
Possible they just carried over from ancient times, or... ?)
But resetting them (to defaults) allows NY to load.

[Brummelchen]

same here, no issues.

[therube]

One other Pref of interest:

Code: Select all

user_pref("security.ssl3.rsa_des_ede3_sha", false);

Now that one, I may have set at some point (possibly during a zero-day ?) & maybe I should have reset it (at some point)?

In any case, resetting the above network.* Prefs OR resetting the ssl3 Pref (alone - with the network.* left in place) is enough to get NY working.

[therube]

I tried all the troubleshooting, FF 60

Did you try a new, clean Profile?
If you still have an issue there, then I'd look into what @B said about A/V.

[Brummelchen]

security.ssl3.rsa_des_ede3_sha -> true (default)

changed
security.ssl3.dhe_rsa_aes_128_sha;false
security.ssl3.dhe_rsa_aes_256_sha;false

PS i dont have any intermittent a/v in usage.

[therube]

Bug 1227524 Establish deprecation date for 3DES points to TLS Canary : Fx56.0a1 nightly - 3DES cipher disable : 2017-08-01-17-07-49 where you can find 3 *.ny*.gov (including labor.ny.gov) [the List view is easier to deal with, IMO].

So some time in the past, I must have taken the safer route, disabling that ssl3 Pref, with the expectation that it could break some sites. (A very small number, back then. And since, some sites have updated their ends, so even less today. Except for NY .)

[Frank Lion]

> And since, some sites have updated their ends

URLs?

[therube]

I set the SSL3 pref (to false), then simply picked a sampling of sites from that (Canary) list & tried to see if they would load or not.

[novice]

Thanks, I'll just wait a bit and try later on. I have no issues with other sites.

[novice]

I'm using free bitdefender antivirus. I added that web site as an exception and now it loads ok.