I'm splitting http://kb.mozillazine.org/SSL_is_disabled into separate articles for each specific error message a user can get. I've tested as much as I can with my system, and there are a few cases that I can't test. I need to know what error messages users will receive when the following happen:
- The user has a manual proxy that's not set up correctly
- The user has blocked the loopback connection
- The user needs to clear their cache
- The browser was not compiled with SSL support
- The user is being affected by https://bugzilla.mozilla.org/show_bug.cgi?id=372478 (Win 9x)
- The user doesn't have a particular cipher enabled
Any help is appreciated.
Need help testing SSL problems
-
old np
- Posts: 0
- Joined: December 31st, 1969, 5:00 pm
Need help testing SSL problems
Last edited by old np on June 27th, 2007, 7:16 pm, edited 1 time in total.
-
dickvl
- Posts: 54161
- Joined: July 18th, 2005, 3:25 am
Does splitting up mean that you create a separate article for each issue and only put links to those articles in http://kb.mozillazine.org/SSL_is_disabled ?
For us problem solvers it's easier to link to one article instead of many different ones if it is not clear what to use.
I've never experienced any of the SSL issues, so I can't give you info about that.
Maybe edit the line about the bug and add that it happens on Win 9x installs. ("Latest security updates break SSL on W9x systems") the we do not need to check that link to find that out.
"The browser was not compiled with SSL support": is that a Linux cq third party browser problem?
About: Cannot connect securely because the site uses an older insecure version of the SSL protocol
You also need to enable the SSL2 protocol that the site uses as all SSL2 prefs are false by default.
There are also SLL3 prefs with weak encryption that are false by default like:
security.ssl3.rsa_rc2_40_md5
For us problem solvers it's easier to link to one article instead of many different ones if it is not clear what to use.
I've never experienced any of the SSL issues, so I can't give you info about that.
Maybe edit the line about the bug and add that it happens on Win 9x installs. ("Latest security updates break SSL on W9x systems") the we do not need to check that link to find that out.
"The browser was not compiled with SSL support": is that a Linux cq third party browser problem?
About: Cannot connect securely because the site uses an older insecure version of the SSL protocol
You also need to enable the SSL2 protocol that the site uses as all SSL2 prefs are false by default.
There are also SLL3 prefs with weak encryption that are false by default like:
security.ssl3.rsa_rc2_40_md5
-
old np
- Posts: 0
- Joined: December 31st, 1969, 5:00 pm
dickvl wrote:Does splitting up mean that you create a separate article for each issue and only put links to those articles in http://kb.mozillazine.org/SSL_is_disabled ?
Almost. I'm setting up the articles per error message they receive. If they receive a "SSL is disabled" error message, http://kb.mozillazine.org/SSL_is_disabled is the article to point to. For "Could not initialize the browser security component", point to http://kb.mozillazine.org/Could_not_ini ... _component , etc.
dickvl wrote:For us problem solvers it's easier to link to one article instead of many different ones if it is not clear what to use.
Are there users who won't give the text of the error message? If so, I could just toss together a "SSL problems" page and make them pick one there.
dickvl wrote:Maybe edit the line about the bug and add that it happens on Win 9x installs.
This one?
dickvl wrote:"The browser was not compiled with SSL support": is that a Linux cq third party browser problem?
I imagine it could happen on any OS, but yeah, Linux people are most likely to experience it.
dickvl wrote:About: Cannot connect securely because the site uses an older insecure version of the SSL protocol
You also need to enable the SSL2 protocol that the site uses as all SSL2 prefs are false by default.
Isn't that what the article says to do?
dickvl wrote:There are also SLL3 prefs with weak encryption that are false by default like:
security.ssl3.rsa_rc2_40_md5
What kind of error message would you get if you needed to turn that on?
-
dickvl
- Posts: 54161
- Joined: July 18th, 2005, 3:25 am
Maybe make the main SSL article similar to http://kb.mozillazine.org/Firefox_issues_on_Vista ?
"Maybe edit the line about the bug and add that it happens on Win 9x installs."
I meant in your first post of this tread (I should have added that to my post):
- The user is being affected by https://bugzilla.mozilla.org/show_bug.cgi?id=372478 (windows 9x)
The security.ssl2.* prefs are not mentioned in that article and, unless the correct one is enabled, setting security.enable_ssl2 to true won't help.
http://forums.mozillazine.org/viewtopic.php?t=478336
A thread about SSL3: http://forums.mozillazine.org/viewtopic.php?t=492791
"Maybe edit the line about the bug and add that it happens on Win 9x installs."
I meant in your first post of this tread (I should have added that to my post):
- The user is being affected by https://bugzilla.mozilla.org/show_bug.cgi?id=372478 (windows 9x)
The security.ssl2.* prefs are not mentioned in that article and, unless the correct one is enabled, setting security.enable_ssl2 to true won't help.
http://forums.mozillazine.org/viewtopic.php?t=478336
A thread about SSL3: http://forums.mozillazine.org/viewtopic.php?t=492791
-
old np
- Posts: 0
- Joined: December 31st, 1969, 5:00 pm
http://kb.mozillazine.org/Error_loading_secure_sites
Unfortunately the SSL3 thread you pointed to doesn't say what the text of the error message is, and the site seems to have been fixed. I tried disabling a bunch of ciphers but I haven't been able to make it happen yet.
Unfortunately the SSL3 thread you pointed to doesn't say what the text of the error message is, and the site seems to have been fixed. I tried disabling a bunch of ciphers but I haven't been able to make it happen yet.