Top «Prev(2010-02-08) Latest Next(2010-03-30)» Edit

pterjan's diary


2010-02-15

  Accessing French taxes account

Today I tried accessing my account which had worked fine for years, and at the point where it requests the certificate, Firefox was failing with "The page you are trying to view can not be shown because the authenticity of the received data could not be verified." and Chrome with "Erreur 107 (net::ERR_SSL_PROTOCOL_ERROR) : Unknown Error".

The workaround that allowed me to access it was export NSS_SSL_ENABLE_RENEGOTIATION=1 (found in a Debian bug report).

Today's TSUKKOMI(Total: 3) [Add a TSUKKOMI]
  Alex (2010-02-15 22:35)

I think SSL renegotiation was disabled to prevent exploitation of a vulnerability in the SSL protocol. I would say that the server is doing the wrong thing.

  Pascal (2010-02-15 22:39)

Not in this case, it's asking for client certificate to authenticate the user. Unfortunately there is currently no way to enable it for this usage and not in a general way.

  Bruno (2010-02-16 07:57)

Quelques explications en français chez Stéphane Bortzmeyer : http://www.bortzmeyer.org/5746.html


2004|06|07|08|09|11|
2005|01|02|05|06|07|08|09|10|11|12|
2006|01|02|03|06|08|10|11|12|
2007|01|02|03|04|05|06|07|08|09|10|11|12|
2008|01|03|04|05|06|07|08|09|10|11|12|
2009|01|02|03|04|05|06|07|08|09|10|11|12|
2010|01|02|03|04|05|06|07|08|09|10|12|
2011|02|04|06|
2012|01|05|11|
2013|01|02|04|06|
2014|02|
2015|06|
2017|05|07|12|