Thursday, May 28, 2015

Firefox Encountering "Secure Connection Failed" Error

I restarted Firefox (version 38.01) to visit a few secure sites, at present including live.com, and encountered an error  as follows,

Secure Connection Failed

The connection to the server was reset while the page was loading.
  • The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
  • Please contact the website owners to inform them of this problem.

A screen shot is captured as follows,

This is actually a known problem, although it  took me a while to find out why it occurred and what a solution might be.

Apparently, the sites were still using older version TLS (i.e., TLS 1.0) that Firefox 37.0 or newer do not consider them as secure any more. See these two discussions.

To create a workaround for those web sites,  we will use Firefox's about:config page.
  1.  In Firefox address bar, enter about:config and hit the Enter key to open the about:config page.
  2. Search insecure_fallback_hosts and locate the setting for the attribute security.tls.insecure_fallback_hosts
  3. Double-click on the attribute to update its value. The value should be the host names of the sites you encountered the "Secure Connection Failed" error. The value can contain multiple host names, separated by a comma (","). For instance, if you encounter the error for sites secure.foo1.com and www.foo2.net, the value would be secure.foo1.com,www.foo2.net.

This workaround works for me for a few sites. Be aware that Firefox has a discussion on addressing a similar problem; however, the solutions therein (e.g., rename or remove cert8.db) do not work for this particular error, i.e., the sites use older version of TLS (TLS 1.0).

No comments:

Post a Comment