X
Tap here to go to the mobile version of the site.
Top Contributor Feature will be unavailable for a short amount of time today until further notice.

Support Forum

Firefox renders raw HTTP response as text for self-signed secure connection

Posted

I'm trying to connect to a miniature secure web server which has a self-signed certificate, but for some reason in https mode Firefox displays the entire raw HTTP result as the website content.

If I turn off the secure layer (so it's sending the HTTP response in cleartext) then it works and the webpage gets rendered as expected.

It seems like only Firefox is affected. I have tested two other browsers and there the HTTP protocol gets parsed, and the page displays as intended.

I'm trying to connect to a miniature secure web server which has a self-signed certificate, but for some reason in https mode Firefox displays the entire raw HTTP result as the website content. If I turn off the secure layer (so it's sending the HTTP response in cleartext) then it works and the webpage gets rendered as expected. It seems like only Firefox is affected. I have tested two other browsers and there the HTTP protocol gets parsed, and the page displays as intended.
Attached screenshots

Modified by SonoSooS

Quote

Additional System Details

Application

  • Firefox 55.0b2
  • User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0
  • Support URL: https://support.mozilla.org/1/firefox/55.0/WINNT/hu/

Extensions

  • Drumpfinator 1.0 (drumpfinator@xulforge.com)
  • Duplicate in Tab Context Menu 3.1.0 (DuplicateInTabContext@schuzak.jp)
  • GlassMyFox 1.4.1 (GlassMyFox@ArisT2_Noia4dev)
  • Privacy Badger 2018.10.3.1 (jid1-MnnxcxisBPnSXQ-eff@jetpack)
  • ShareX 1.0.0 (firefox@getsharex.com)
  • Show Anchors 2 1.12.1-signed.1-signed (show-anchors-2@stefanheule.com)
  • uBlock Origin 1.17.0 (uBlock0@raymondhill.net)
  • User Agent Switcher 0.7.3.1-signed.1-signed ({e968fc70-8f95-4ab9-9e79-304de2a71ee1})
  • YouTube Video and Audio Downloader (Dev Edt.) 0.7.6 ({f73df109-8fb4-453e-8373-f59e61ca4da3})
  • EPUBReader 2.0.5 ({5384767E-00D9-40E9-B72F-9CC39D655D6F}) (Inactive)
  • NoScript 5.1.8.4 ({73a6fe31-595d-460b-a920-fcc0f8843232}) (Inactive)
  • REST Easy 0.3.1.1-signed (rest-easy@quickmediasolutions.com) (Inactive)
  • Stylish - Custom themes for any website 3.1.8 ({46551EC9-40F0-4e47-8E18-8E5CF550CFB8}) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: Intel(R) UHD Graphics 630
  • adapterDescription2: NVIDIA GeForce GTX 1060
  • adapterDeviceID: 0x3e9b
  • adapterDeviceID2: 0x1c20
  • adapterDrivers: igdumdim64 igd10iumd64 igd10iumd64 igd12umd64 igdumdim32 igd10iumd32 igd10iumd32 igd12umd32
  • adapterDrivers2: C:\Windows\System32\DriverStore\FileRepository\nvac.inf_amd64_ebe3a37693042ef6\nvldumdx.dll,C:\Windows\System32\DriverStore\FileRepository\nvac.inf_amd64_ebe3a37693042ef6\nvldumdx.dll,C:\Windows\System32\DriverStore\FileRepository\nvac.inf_amd64_ebe3a37693042ef6\nvldumdx.dll,C:\Windows\System32\DriverStore\FileRepository\nvac.inf_amd64_ebe3a37693042ef6\nvldumdx.dll C:\Windows\System32\DriverStore\FileRepository\nvac.inf_amd64_ebe3a37693042ef6\nvldumd.dll,C:\Windows\System32\DriverStore\FileRepository\nvac.inf_amd64_ebe3a37693042ef6\nvldumd.dll,C:\Windows\System32\DriverStore\FileRepository\nvac.inf_amd64_ebe3a37693042ef6\nvldumd.dll,C:\Windows\System32\DriverStore\FileRepository\nvac.inf_amd64_ebe3a37693042ef6\nvldumd.dll
  • adapterRAM: Unknown
  • adapterRAM2: 6144
  • adapterSubsysID: 12661025
  • adapterSubsysID2: 12671025
  • adapterVendorID: 0x8086
  • adapterVendorID2: 0x10de
  • crashGuards: []
  • currentAudioBackend: wasapi
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 10.0.16299.522
  • driverDate: 6-20-2018
  • driverDate2: 12-18-2017
  • driverVersion: 24.20.100.6194
  • driverVersion2: 23.21.13.8873
  • featureLog: {u'fallbacks': [], u'features': [{u'status': u'available', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'HW_COMPOSITING', u'description': u'Compositing'}, {u'status': u'available', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'D3D11_COMPOSITING', u'description': u'Direct3D11 Compositing'}, {u'status': u'available', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'DIRECT2D', u'description': u'Direct2D'}, {u'status': u'available', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'D3D11_HW_ANGLE', u'description': u'Direct3D11 hardware ANGLE'}, {u'status': u'available', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'GPU_PROCESS', u'description': u'GPU Process'}, {u'status': u'unavailable', u'log': [{u'status': u'opt-in', u'message': u'WebRender is an opt-in feature', u'type': u'default'}, {u'status': u'unavailable', u'message': u"Build doesn't include WebRender", u'type': u'runtime'}], u'name': u'WEBRENDER', u'description': u'WebRender'}]}
  • info: {u'AzureContentBackend (UI Process)': u'skia', u'AzureCanvasBackend (UI Process)': u'skia', u'ApzWheelInput': 1, u'ApzDragInput': 1, u'AzureFallbackCanvasBackend (UI Process)': u'cairo', u'AzureCanvasAccelerated': 0, u'AzureCanvasBackend': u'Direct2D 1.1', u'AzureContentBackend': u'Direct2D 1.1'}
  • isGPU2Active: False
  • numAcceleratedWindows: 1
  • numTotalWindows: 1
  • webgl1DriverExtensions: GL_ANGLE_depth_texture GL_ANGLE_framebuffer_blit GL_ANGLE_framebuffer_multisample GL_ANGLE_instanced_arrays GL_ANGLE_lossy_etc_decode GL_ANGLE_pack_reverse_row_order GL_ANGLE_request_extension GL_ANGLE_robust_client_memory GL_ANGLE_texture_compression_dxt3 GL_ANGLE_texture_compression_dxt5 GL_ANGLE_texture_usage GL_ANGLE_translated_shader_source GL_CHROMIUM_bind_generates_resource GL_CHROMIUM_bind_uniform_location GL_CHROMIUM_copy_compressed_texture GL_CHROMIUM_copy_texture GL_CHROMIUM_sync_query GL_EXT_blend_minmax GL_EXT_color_buffer_half_float GL_EXT_debug_marker GL_EXT_discard_framebuffer GL_EXT_disjoint_timer_query GL_EXT_draw_buffers GL_EXT_frag_depth GL_EXT_map_buffer_range GL_EXT_occlusion_query_boolean GL_EXT_read_format_bgra GL_EXT_robustness GL_EXT_sRGB GL_EXT_shader_texture_lod GL_EXT_texture_compression_dxt1 GL_EXT_texture_filter_anisotropic GL_EXT_texture_format_BGRA8888 GL_EXT_texture_rg GL_EXT_texture_storage GL_EXT_unpack_subimage GL_KHR_debug GL_NV_EGL_stream_consumer_external GL_NV_fence GL_NV_pack_subimage GL_NV_pixel_buffer_object GL_OES_EGL_image GL_OES_EGL_image_external GL_OES_compressed_ETC1_RGB8_texture GL_OES_depth32 GL_OES_element_index_uint GL_OES_get_program_binary GL_OES_mapbuffer GL_OES_packed_depth_stencil GL_OES_rgb8_rgba8 GL_OES_standard_derivatives GL_OES_texture_float GL_OES_texture_float_linear GL_OES_texture_half_float GL_OES_texture_half_float_linear GL_OES_texture_npot GL_OES_vertex_array_object
  • webgl1Extensions: ANGLE_instanced_arrays EXT_blend_minmax EXT_color_buffer_half_float EXT_frag_depth EXT_shader_texture_lod EXT_texture_filter_anisotropic EXT_disjoint_timer_query MOZ_debug OES_element_index_uint OES_standard_derivatives OES_texture_float OES_texture_float_linear OES_texture_half_float OES_texture_half_float_linear OES_vertex_array_object WEBGL_color_buffer_float WEBGL_compressed_texture_s3tc WEBGL_debug_renderer_info WEBGL_debug_shaders WEBGL_depth_texture WEBGL_draw_buffers WEBGL_lose_context MOZ_WEBGL_lose_context MOZ_WEBGL_compressed_texture_s3tc MOZ_WEBGL_depth_texture
  • webgl1Renderer: Google Inc. -- ANGLE (Intel(R) UHD Graphics 630 Direct3D11 vs_5_0 ps_5_0)
  • webgl1Version: OpenGL ES 2.0 (ANGLE 2.1.0.dec065540d5f)
  • webgl1WSIInfo: EGL_VENDOR: Google Inc. (adapter LUID: 0000000000009bf9) EGL_VERSION: 1.4 (ANGLE 2.1.0.dec065540d5f) EGL_EXTENSIONS: EGL_EXT_create_context_robustness EGL_ANGLE_d3d_share_handle_client_buffer EGL_ANGLE_d3d_texture_client_buffer EGL_ANGLE_surface_d3d_texture_2d_share_handle EGL_ANGLE_query_surface_pointer EGL_ANGLE_window_fixed_size EGL_ANGLE_keyed_mutex EGL_ANGLE_surface_orientation EGL_ANGLE_direct_composition EGL_NV_post_sub_buffer EGL_KHR_create_context EGL_EXT_device_query EGL_KHR_image EGL_KHR_image_base EGL_KHR_gl_texture_2D_image EGL_KHR_gl_texture_cubemap_image EGL_KHR_gl_renderbuffer_image EGL_KHR_get_all_proc_addresses EGL_KHR_stream EGL_KHR_stream_consumer_gltexture EGL_NV_stream_consumer_gltexture_yuv EGL_ANGLE_flexible_surface_compatibility EGL_ANGLE_stream_producer_d3d_texture_nv12 EGL_ANGLE_create_context_webgl_compatibility EGL_CHROMIUM_create_context_bind_generates_resource EGL_EXTENSIONS(nullptr): EGL_EXT_client_extensions EGL_EXT_platform_base EGL_EXT_platform_device EGL_ANGLE_platform_angle EGL_ANGLE_platform_angle_d3d EGL_ANGLE_device_creation EGL_ANGLE_device_creation_d3d11 EGL_ANGLE_experimental_present_path EGL_KHR_client_get_all_proc_addresses
  • webgl2DriverExtensions: GL_ANGLE_depth_texture GL_ANGLE_framebuffer_blit GL_ANGLE_framebuffer_multisample GL_ANGLE_instanced_arrays GL_ANGLE_lossy_etc_decode GL_ANGLE_pack_reverse_row_order GL_ANGLE_request_extension GL_ANGLE_robust_client_memory GL_ANGLE_texture_compression_dxt3 GL_ANGLE_texture_compression_dxt5 GL_ANGLE_texture_usage GL_ANGLE_translated_shader_source GL_CHROMIUM_bind_generates_resource GL_CHROMIUM_bind_uniform_location GL_CHROMIUM_copy_compressed_texture GL_CHROMIUM_copy_texture GL_CHROMIUM_sync_query GL_EXT_blend_minmax GL_EXT_color_buffer_float GL_EXT_color_buffer_half_float GL_EXT_debug_marker GL_EXT_discard_framebuffer GL_EXT_disjoint_timer_query GL_EXT_draw_buffers GL_EXT_frag_depth GL_EXT_map_buffer_range GL_EXT_occlusion_query_boolean GL_EXT_read_format_bgra GL_EXT_robustness GL_EXT_sRGB GL_EXT_shader_texture_lod GL_EXT_texture_compression_dxt1 GL_EXT_texture_filter_anisotropic GL_EXT_texture_format_BGRA8888 GL_EXT_texture_norm16 GL_EXT_texture_rg GL_EXT_texture_storage GL_EXT_unpack_subimage GL_KHR_debug GL_NV_EGL_stream_consumer_external GL_NV_fence GL_NV_pack_subimage GL_NV_pixel_buffer_object GL_OES_EGL_image GL_OES_EGL_image_external GL_OES_EGL_image_external_essl3 GL_OES_compressed_ETC1_RGB8_texture GL_OES_depth32 GL_OES_element_index_uint GL_OES_get_program_binary GL_OES_mapbuffer GL_OES_packed_depth_stencil GL_OES_rgb8_rgba8 GL_OES_standard_derivatives GL_OES_texture_float GL_OES_texture_float_linear GL_OES_texture_half_float GL_OES_texture_half_float_linear GL_OES_texture_npot GL_OES_vertex_array_object
  • webgl2Extensions: EXT_color_buffer_float EXT_texture_filter_anisotropic EXT_disjoint_timer_query MOZ_debug OES_texture_float_linear WEBGL_compressed_texture_s3tc WEBGL_debug_renderer_info WEBGL_debug_shaders WEBGL_lose_context MOZ_WEBGL_lose_context MOZ_WEBGL_compressed_texture_s3tc
  • webgl2Renderer: Google Inc. -- ANGLE (Intel(R) UHD Graphics 630 Direct3D11 vs_5_0 ps_5_0)
  • webgl2Version: OpenGL ES 3.0 (ANGLE 2.1.0.dec065540d5f)
  • webgl2WSIInfo: EGL_VENDOR: Google Inc. (adapter LUID: 0000000000009bf9) EGL_VERSION: 1.4 (ANGLE 2.1.0.dec065540d5f) EGL_EXTENSIONS: EGL_EXT_create_context_robustness EGL_ANGLE_d3d_share_handle_client_buffer EGL_ANGLE_d3d_texture_client_buffer EGL_ANGLE_surface_d3d_texture_2d_share_handle EGL_ANGLE_query_surface_pointer EGL_ANGLE_window_fixed_size EGL_ANGLE_keyed_mutex EGL_ANGLE_surface_orientation EGL_ANGLE_direct_composition EGL_NV_post_sub_buffer EGL_KHR_create_context EGL_EXT_device_query EGL_KHR_image EGL_KHR_image_base EGL_KHR_gl_texture_2D_image EGL_KHR_gl_texture_cubemap_image EGL_KHR_gl_renderbuffer_image EGL_KHR_get_all_proc_addresses EGL_KHR_stream EGL_KHR_stream_consumer_gltexture EGL_NV_stream_consumer_gltexture_yuv EGL_ANGLE_flexible_surface_compatibility EGL_ANGLE_stream_producer_d3d_texture_nv12 EGL_ANGLE_create_context_webgl_compatibility EGL_CHROMIUM_create_context_bind_generates_resource EGL_EXTENSIONS(nullptr): EGL_EXT_client_extensions EGL_EXT_platform_base EGL_EXT_platform_device EGL_ANGLE_platform_angle EGL_ANGLE_platform_angle_d3d EGL_ANGLE_device_creation EGL_ANGLE_device_creation_d3d11 EGL_ANGLE_experimental_present_path EGL_KHR_client_get_all_proc_addresses
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Modified Preferences

Misc

  • User JS: No
  • Accessibility: No
WestEnd
  • Top 10 Contributor
57 solutions 3100 answers

Are other able to see the link to see what your talking about?

Are other able to see the link to see what your talking about?
Was this helpful to you?
Quote
cor-el
  • Top 10 Contributor
  • Moderator
16606 solutions 149946 answers

This sounds more like an issue with how this website is send to Firefox, text/plain that would show the HMTL code instead of text/html that would make Firefox render the page. It is also possible that your security software doesn't trust the server and modifies the HTTP response headers to present Firefox content type text/plain.

You can check the content type via "Tools -> Page Info -> General" and via the Network Monitor.

This sounds more like an issue with how this website is send to Firefox, text/plain that would show the HMTL code instead of text/html that would make Firefox render the page. It is also possible that your security software doesn't trust the server and modifies the HTTP response headers to present Firefox content type text/plain. You can check the content type via "Tools -> Page Info -> General" and via the Network Monitor. *https://support.mozilla.org/en-US/kb/page-info-window-view-technical-details-about-page *https://developer.mozilla.org/en/Tools/Network_Monitor
Was this helpful to you?
Quote

Question owner

WestEnd said

Are other able to see the link to see what your talking about?

I attached two screenshots to the first post, I hope it's visible *now* because it wasn't visible yesterday. I'll re-attach it to this post just in case it's still not yet visible.

As for the link, it's https://localhost/ or http://localhost:443 (after switching the server to use cleartext HTTP on port 443).

Edit: I misread your question twice; yes, other browsers display the content as expected.

cor-el said

This sounds more like an issue with how this website is send to Firefox, text/plain that would show the HMTL code instead of text/html that would make Firefox render the page. It is also possible that your security software doesn't trust the server and modifies the HTTP response headers to present Firefox content type text/plain. You can check the content type via "Tools -> Page Info -> General" and via the Network Monitor.

I attached two screenshots on the first post a few hours ago, but it was not visible when I attached them, so I'll attach the screenshots of the network monitor to this post again.

If the server is running in plaintext HTTP mode it works as expected. If I switch it to HTTPS then (after adding a certificate exception for localhost) it just displays the underlying HTTP response as plaintext, and network monitor shows the response as a gray circle with no response code instead of the expected green circle and 200 next to it as the status code. Opening the General tab shows that there are no response headers (which makes sense because the whole HTTP response is echoed as monospace text).

Changing the content type from text/plain to text/html works if the server is running in plaintext mode, but it just displays the raw HTTP response still when it's running in https mode and accessing the server via https.

I don't have any security software installed which would interfere with the results. I also tried starting Firefox with the extensions disabled (I think it's called "safe mode" in the English translation), but same effect.

Oh also, all the server does is wrap the raw socket in a secure socket layer and just do its usual HTTP server thingies using the wrapped socket. This works in other browsers after clicking the -sometimes very obscure- continue button (except IE because that straight up refuses to load the page AT ALL without being able continue to the site), and they renders the page as expected.

''WestEnd [[#answer-1163988|said]]'' <blockquote> Are other able to see the link to see what your talking about? </blockquote> I attached two screenshots to the first post, I hope it's visible *now* because it wasn't visible yesterday. I'll re-attach it to this post just in case it's still not yet visible. As for the link, it's https://localhost/ or http://localhost:443 (after switching the server to use cleartext HTTP on port 443). Edit: I misread your question twice; yes, other browsers display the content as expected. ''cor-el [[#answer-1163998|said]]'' <blockquote> This sounds more like an issue with how this website is send to Firefox, text/plain that would show the HMTL code instead of text/html that would make Firefox render the page. It is also possible that your security software doesn't trust the server and modifies the HTTP response headers to present Firefox content type text/plain. You can check the content type via "Tools -> Page Info -> General" and via the Network Monitor. *https://support.mozilla.org/en-US/kb/page-info-window-view-technical-details-about-page *https://developer.mozilla.org/en/Tools/Network_Monitor </blockquote> I attached two screenshots on the first post a few hours ago, but it was not visible when I attached them, so I'll attach the screenshots of the network monitor to this post again. If the server is running in plaintext HTTP mode it works as expected. If I switch it to HTTPS then (after adding a certificate exception for localhost) it just displays the underlying HTTP response as plaintext, and network monitor shows the response as a gray circle with no response code instead of the expected green circle and 200 next to it as the status code. Opening the General tab shows that there are no response headers (which makes sense because the whole HTTP response is echoed as monospace text). Changing the content type from text/plain to text/html works if the server is running in plaintext mode, but it just displays the raw HTTP response still when it's running in https mode and accessing the server via https. I don't have any security software installed which would interfere with the results. I also tried starting Firefox with the extensions disabled (I think it's called "safe mode" in the English translation), but same effect. Oh also, all the server does is wrap the raw socket in a secure socket layer and just do its usual HTTP server thingies using the wrapped socket. This works in other browsers after clicking the -sometimes very obscure- continue button (except IE because that straight up refuses to load the page AT ALL without being able continue to the site), and they renders the page as expected.

Modified by SonoSooS

Was this helpful to you?
Quote
Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.