View Issue Details

IDProjectCategoryView StatusLast Update
0001068Blogwebsite contentpublic2013-07-13 19:49
ReporterINOPIAE Assigned Tolaw  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionno change required 
Summary0001068: Registration to blog with Firefox does not work
Descriptionon page https://blog.cacert.org/wp-login.php?action=register
it says always
Fehler: Gesicherte Verbindung fehlgeschlagen
Ein Fehler ist während einer Verbindung mit blog.cacert.org aufgetreten.

Neuverhandlung ist auf diesem SSL-Socket nicht erlaubt.

(Fehlercode: ssl_error_renegotiation_not_allowed)

Die Website kann nicht angezeigt werden, da die Authentizität der erhaltenen Daten nicht verifiziert werden konnte.
Kontaktieren Sie bitte den Inhaber der Website, um ihn über dieses Problem zu informieren. Alternativ können Sie auch die Funktion im Hilfe-Menü verwenden, um diese Website als fehlerhaft zu melden.

With IE 9.0, 8.0 and 6.0 it works
TagsNo tags attached.

Activities

Uli60

2012-06-04 11:22

updater   ~0003051

Last edited: 2012-06-05 21:24

please check https://wiki.cacert.org/FAQ/BrowserClients => FAQ
as a workaround

FAQ

  (Q) My new browser client FF12 returns an error "ssl_error_renegotiation_not_allowed" visiting the page https://community.cacert.org/board/motions.php?motion=

  (A) There is a workaround configuring FF12 settings to allow ssl renegotiation
  enter about:config into the url line

  Variant A:
  search for "security.ssl.allow_unrestricted_renego_everywhere_ _temporarily_available_pref" and set it to True
  (source: http://my.opera.com/duyda/blog/2011/03/30/ssl-error-renegotiation-not-allowed)
  Variant B:
  search for "security.ssl.renego_unrestricted_hosts", add "community.cacert.org,blog.cacert.org" to the string field

The other way is a far more complex upgrade that needs to be done by the system admins:
upgrade debian from edge to lenny to squeeze

INOPIAE

2012-11-06 21:43

updater   ~0003317

The error still remains on FF 16

law

2013-07-13 19:49

administrator   ~0004126

Registration to blog is not possible (anymore). Only login with client certificate is allowed - new users are created automatically with data from certificate.

The SSL renegotiation issue should be solved by the recent OS update.

Issue History

Date Modified Username Field Change
2012-06-02 19:43 INOPIAE New Issue
2012-06-04 11:22 Uli60 Note Added: 0003051
2012-06-04 11:22 Uli60 Assigned To => Uli60
2012-06-04 11:22 Uli60 Status new => needs feedback
2012-06-05 21:21 Uli60 Note Edited: 0003051
2012-06-05 21:24 Uli60 Note Edited: 0003051
2012-11-06 21:43 INOPIAE Note Added: 0003317
2012-11-06 21:43 INOPIAE Status needs feedback => needs work
2013-07-13 19:49 law Note Added: 0004126
2013-07-13 19:49 law Status needs work => closed
2013-07-13 19:49 law Assigned To Uli60 => law
2013-07-13 19:49 law Resolution open => no change required