X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

https connection fails behind enterprise proxy

Posted

Hi,

since I upgraded FF 4 to beta 12, I can not connect to https sites no mre (behind enterprise proxy).

Chosen solution

Build is out:

http://ftp.mozilla.org/pub/mozilla.or.../firefox-4.0b13pre.en-US.win32.installer.exe

Install that somewhere (not in your current install directory), quit all open Firefox instances and try it. Let me know if it works.

Read this answer in context 3

Additional System Details

Sites Affected

https://mail.google.com

Application

  • User Agent:

More Information

Paramètres de base de l'application
Nom
Firefox
Version
4.0b12
Agent utilisateur
Mozilla/5.0 (Windows NT 5.2; rv:2.0b12) Gecko/20100101 Firefox/4.0b12
Répertoire de profil
Ouvrir le dossier correspondant
Plugins activés
about:plugins
Configuration de compilation
about:buildconfig
Extensions
Nom
Version
Activée
ID
Adblock Plus
1.3.3
true
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
Element Hiding Helper pour Adblock Plus
1.1
true
elemhidehelper@adblockplus.org
Better Gmail 2
1.2
false
bettergmail2@ginatrapani.org
IE Tab 2 (FF 3.6+)
2.12.21.1
true
{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
Quick Locale Switcher
1.7.3.1
true
{25A1388B-6B18-46c3-BEBA-A81915D0DE8F}
LightShot (screenshot tool)
1.2.0
true
{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B}
pwgen
0.4.5
true
pwgen@alouche.net
Corrector para Português Europeu
11.1.23.0
true
pt-PT@dictionaries.addons.mozilla.org
Hide Caption Titlebar Plus
2.1.6
true
hidecaptionplus-dp@dummy.addons.mozilla.org
Yoono
7.6.2
true
{d9284e50-81fc-11da-a72b-0800200c9a66}
Java Quick Starter
1.0
true
jqs@sun.com
Feedback
1.0.6
true
testpilot@labs.mozilla.com
Préférences modifiées
Nom
Valeur
accessibility.typeaheadfind.flashBar
0
browser.places.importBookmarksHTML
false
browser.places.smartBookmarksVersion
2
browser.startup.homepage
https://prwacautk-siege.axa-fr.intraxa/AuthKerberos/redirect.asp
browser.startup.homepage_override.buildID
20110222210221
browser.startup.homepage_override.mstone
rv:2.0b12
dom.ipc.plugins.enabled.npietab2.dll
true
extensions.lastAppVersion
4.0b12
network.cookie.prefsMigrated
true
places.database.lastMaintenance
1298887386
places.history.expiration.transient_current_max_pages
386206
print.print_printer
PDFCreator
print.printer_PDFCreator.print_bgcolor
false
print.printer_PDFCreator.print_bgimages
false
print.printer_PDFCreator.print_command
print.printer_PDFCreator.print_downloadfonts
false
print.printer_PDFCreator.print_edge_bottom
0
print.printer_PDFCreator.print_edge_left
0
print.printer_PDFCreator.print_edge_right
0
print.printer_PDFCreator.print_edge_top
0
print.printer_PDFCreator.print_evenpages
true
print.printer_PDFCreator.print_footercenter
print.printer_PDFCreator.print_footerleft
&PT
print.printer_PDFCreator.print_footerright
&D
print.printer_PDFCreator.print_headercenter
print.printer_PDFCreator.print_headerleft
&T
print.printer_PDFCreator.print_headerright
&U
print.printer_PDFCreator.print_in_color
true
print.printer_PDFCreator.print_margin_bottom
0.5
print.printer_PDFCreator.print_margin_left
0.5
print.printer_PDFCreator.print_margin_right
0.5
print.printer_PDFCreator.print_margin_top
0.5
print.printer_PDFCreator.print_oddpages
true
print.printer_PDFCreator.print_orientation
0
print.printer_PDFCreator.print_page_delay
50
print.printer_PDFCreator.print_paper_data
9
print.printer_PDFCreator.print_paper_height
11,00
print.printer_PDFCreator.print_paper_size_type
0
print.printer_PDFCreator.print_paper_size_unit
1
print.printer_PDFCreator.print_paper_width
8,50
print.printer_PDFCreator.print_reversed
false
print.printer_PDFCreator.print_scaling
1,00
print.printer_PDFCreator.print_shrink_to_fit
true
print.printer_PDFCreator.print_to_file
false
print.printer_PDFCreator.print_unwriteable_margin_bottom
0
print.printer_PDFCreator.print_unwriteable_margin_left
0
print.printer_PDFCreator.print_unwriteable_margin_right
0
print.printer_PDFCreator.print_unwriteable_margin_top
0
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_bgcolor
false
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_bgimages
false
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_command
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_downloadfonts
false
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_edge_bottom
0
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_edge_left
0
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_edge_right
0
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_edge_top
0
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_evenpages
true
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_footercenter
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_footerleft
&PT
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_footerright
&D
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_headercenter
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_headerleft
&T
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_headerright
&U
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_in_color
true
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_margin_bottom
0.5
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_margin_left
0.5
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_margin_right
0.5
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_margin_top
0.5
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_oddpages
true
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_orientation
0
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_page_delay
50
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_paper_data
9
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_paper_height
11,00
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_paper_size_type
0
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_paper_size_unit
1
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_paper_width
8,50
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_reversed
false
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_scaling
1,00
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_shrink_to_fit
true
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_to_file
false
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_unwriteable_margin_bottom
0
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_unwriteable_margin_left
0
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_unwriteable_margin_right
0
print.printer_\\primpterr1\Copieur_Ricoh_T2_3S_NB.print_unwriteable_margin_top
0
privacy.cpd.siteSettings
true
privacy.donottrackheader.enabled
true
privacy.sanitize.migrateFx3Prefs
true
privacy.sanitize.timeSpan
0
security.enable_ssl2
true
security.warn_viewing_mixed
false
Accélération graphique
Description de la carte
ID du vendeur
0000
ID du périphérique
0000
RAM de la carte
Unknown
Pilotes de la carte
vdtw30
Version du pilote
Date du pilote
Direct2D activé
Bloqué par votre carte graphique suite à des problèmes de pilote non résolus.
DirectWrite activé
false (0.0.0.0, font cache n/a)
Rendu WebGL
(WebGL unavailable)
Fenêtres avec accélération graphique
0/1

Question owner

Firefox Sync does not work no more neither.

bmarx 0 solutions 11 answers

Helpful Reply

I had the same problems and rolled back to beta11 which runs fine with https behind a corporate proxy.

We already had the same problem withe Beta5. I wonder what kind of testing they are doing to avoid repeating such bugs!

I think sync doesn't work because it needs a https conection as well - which doesn't work anymore.....

RickAtreides 0 solutions 1 answers

Proxy server : squid/2.6.STABLE19 OS: WinXP SP3 Server requires authorization : NTLM When I've try to access to secure web site (https), I've get "The proxy server is refusing connections". There is only "TCP_DENIED/407 1724 CONNECT www.google.com:443 - NONE/- text/html" in proxy log file.

Same time, from IE, https open sites via same proxy without any problems.

Question owner

Works fine with previous beta and ff 3.6 too

John Kirk 1 solutions 6 answers

Helpful Reply

Hello all ...

... our Proxy Server (Squid) requires NTLM authentication and allows fallback to basic authentication ... with Firefox 4 Beta 12, HTTP works using NTLM authentication as usual but HTTPS fails: it falls back to basic authentication (you get an authentication popup).

- This Problem did not exist in Firefox 4 Beta 11. - Firefox 4 Beta 5 had a similar problem.

Looks like nobody tests Firefox in Enterprise/Proxy/Single Sign On Environments. Aside from that, there are in my opinion some other limitations which make Firefox in Enterprise Environments a pain. (no MSI installer, Updater is a pain, no Group Policy Support, does not use Sandbox features in Vista an higher as do Chrome and IE, Plugin Container made Firefox crash less - but buggy Plugins still crash Firefox, ...)

As i said, just my opinion. But i hope/think this Proxy/NTLM/HTTPS Authentication Problem will be fixed soon.

Modified by John Kirk

Cheng Wang
  • Administrator
  • Moderator
36 solutions 435 answers

The Firefox developers who are looking at this need a little more information to find the best fix.

In particular, we need the following:

  • What https sites don't work? Does https://addons.mozilla.com work? Does sync work? How about paypal?
  • More information about the proxy server you're using. There are unfortunately dozens of different server configs/certs out there and while we DO have testing for some cases, it's not all of them.
  • We also need people to test try builds (that is builds where we attempted to fix the problem) to see if it fixes it for you.

If you're willing to have one of our developers contact you via email just say so here. Since I'm an admin for this site, I can look up your email address and pass it to the devs. Please don't post your email address publicly.

John Kirk 1 solutions 6 answers

Hello Cww,

i´m absolutely willing to test and help getting this issue fixed.

Please tell my E-Mail Address to the developers. I´m looking forward to hearing from them.

...

Proxy Server: Squid 2.7.STABLE7-1ubuntu12 running on Ubuntu 10.04.02 LTS 64-bit

Our Squid is configured to first ask for ntlm authentication, if that fails it falls back to basic authentication.

For me it looks like every https site does not work -> i get an authentication popup, which is the basic authentication i mentioned. When i enter the correct credentials, then the https site works, so it´s clearly an issue regarding https and ntlm authentication. http sites work correclty using ntlm authentication -> no authentication popups.

p.s.: i´m just heading out of the office, so my reply may take until tomorrow ...

kind regards / John Kirk

galapogos01 0 solutions 5 answers

This "question" is duplicated here: http://support.mozilla.com/sr-LATN/questions/787429

bmarx 0 solutions 11 answers

Hi,

I try to answer your questions:

What https sites don't work? Does https://addons.mozilla.com work? Does sync work? How about paypal?

Not a single https site is working

More information about the proxy server you're using. There are unfortunately dozens of different server configs/certs out there and while we DO have testing for some cases, it's not all of them.

Our proxy is from astaro. If you can tell me a tool for getting more information I could send you the results.

We also need people to test try builds (that is builds where we attempted to fix the problem) to see if it fixes it for you.

No problem send me a link and I can tell you the results.

As far as I know you use subversion for version control. The proxy problem was fixed after beta5 and came back with beta11. It shouldn't be such a big problem to see what fixed the problem and what broke it again?

bmarx 0 solutions 11 answers

Problem is solved in nightly build (4.0b13pre 2011-03-02) from today!

Cheng Wang
  • Administrator
  • Moderator
36 solutions 435 answers

FTR, there are about 600+ fixes that go into every beta so it's not super easy to bisect out the change that caused it.

As far as I can tell, they seem to think that there are 2-3 different problems with the same/very similar symptoms, all involving proxies. They think they've fixed them all for RC1.

I've passed along the email addresses but right now, it looks like we just want people to test an early build. I'll have a link for you as soon as it's built.

Cheng Wang
  • Administrator
  • Moderator
36 solutions 435 answers

Chosen Solution

Build is out:

http://ftp.mozilla.org/pub/mozilla.or.../firefox-4.0b13pre.en-US.win32.installer.exe

Install that somewhere (not in your current install directory), quit all open Firefox instances and try it. Let me know if it works.

Modified by Cheng Wang

Question owner

Solved with this nightly

John Kirk 1 solutions 6 answers

I can also confirm that this problem is solved with this nightly build.

thanks & kind regards, John Kirk

rjuliatto 0 solutions 1 answers

I confirm that this problem seems to be fixed. Thanks.

bmarx 0 solutions 11 answers

Problem seems to be still solved in the nightly build 4.0b13pre 2011-03-03 :-)

Modified by bmarx

capetumrra 0 solutions 1 answers

This problem is back with FireFox 7.0.1.