Tìm kiếm hỗ trợ

Tránh các lừa đảo về hỗ trợ. Chúng tôi sẽ không bao giờ yêu cầu bạn gọi hoặc nhắn tin đến số điện thoại hoặc chia sẻ thông tin cá nhân. Vui lòng báo cáo hoạt động đáng ngờ bằng cách sử dụng tùy chọn "Báo cáo lạm dụng".

Learn More

is there a workaround for connecting with https. the ssl/tls security fix is preventing us from connecting to a known trusted site

  • 3 trả lời
  • 2 gặp vấn đề này
  • 1618 lượt xem
  • Trả lời mới nhất được viết bởi cor-el

more options

i made the mistake of updating Firefox yesterday and with the ssl security fix find that i can longer connect to a web site at a remote data center that is protected by a fortigate appliance.

i know the correct answer is to get the appliance upgraded or replaced but in the meantime i am in desperate need of a workaround. it would be nice if there was an archive of old Firefox versions.

i have changed the config settings to allow renegotiation but i think the problem is more fundamental than that in that it doesn't appear that older versions of ssl are provided anymore.

Giải pháp được chọn

The "The connection was reset" error message can be caused by a bug fix for the BEAST (Browser Exploit Against SSL/TLS) attack that the server doesn't handle.

See comment 60 in this bug report for workaround, but be aware that this makes you vulnerable to that BEAST attack.

  • bug 702111 - Servers intolerant to 1/n-1 record splitting. "The connection was reset"
Đọc câu trả lời này trong ngữ cảnh 👍 0

Tất cả các câu trả lời (3)

more options

Giải pháp được chọn

The "The connection was reset" error message can be caused by a bug fix for the BEAST (Browser Exploit Against SSL/TLS) attack that the server doesn't handle.

See comment 60 in this bug report for workaround, but be aware that this makes you vulnerable to that BEAST attack.

  • bug 702111 - Servers intolerant to 1/n-1 record splitting. "The connection was reset"
more options

thank you very much. adding NSS_SSL_CBC_RANDOM_IV=0 to my windows 7 environment did the trick. now i just need to remember that i made that change...

more options

You're welcome

It is better to use a .cmd or .bat file to set that environment variable and subsequently start Firefox and not set that variable in the system settings as it will there also affect other Gecko (XUL Runner) based software.
Then you can use a shortcut with that cmd file in case you really need it to access that site and run Firefox normally in other cases to be protected.


set NSS_SSL_CBC_RANDOM_IV=0
start "" "C:\Program Files\Mozilla Firefox\firefox.exe"

Được chỉnh sửa bởi cor-el vào