no advertised update for Firefox 3.6 last Thursday

[clipsesg]

Hello,

With Firefox 3.6 on XP, I declined 4.0 update a few months ago.

Now :
- I do not receive advertised update since last Thursday
- Manual update check return : "no update found"

I plan to install 7.0 over the 3.6 to solve the problem, but I can do
some checks befor if you want.

[clipsesg]

I get this Message in the error console :

aus3.mozilla.org : server does not support RFC 5746, see CVE-2009-3555

[Henrik Skupin]

On Thu, Oct 20, 2011 at 12:01 PM, clipsesg <lbc...@aliceadsl.fr> wrote:

> I get this Message in the error console :
>
> aus3.mozilla.org : server does not support RFC 5746, see CVE-2009-3555
>
>

Not sure what that means. So posting back to the list to get feedback from
Releng.

--
Henrik Skupin
QA Engineer
Mozilla Corporation

[Daniel Holbert]

That message doesn't affect functionality at all. It's just a warning
that a given web server is vulnerable to a theoretical man-in-the-middle
attack against SSL. (Sadly, this is true of tons of HTTPS sites out
there, I think)

This issue is already tracked here for AUS:
https://bugzilla.mozilla.org/show_bug.cgi?id=656408
and explained here and here:
https://wiki.mozilla.org/Security:Renegotiation

http://getsatisfaction.com/mozilla_messaging/topics/what_does_error_message_mean

I don't know a lot about the means of attack, but based on
https://bugzilla.mozilla.org/show_bug.cgi?id=656408#c3 , it doesn't sound
like this is firedrill-scary. But it's definitely worth fixing.

On 10/20/2011 04:10 AM, Henrik Skupin wrote:
> On Thu, Oct 20, 2011 at 12:01 PM, clipsesg<lbc...@aliceadsl.fr> wrote:
>

>> I get this Message in the error console :
>>
>> aus3.mozilla.org : server does not support RFC 5746, see CVE-2009-3555
>>
>>

[clipsesg]

On 20 oct, 12:10, Henrik Skupin <hsku...@gmail.com> wrote:

> On Thu, Oct 20, 2011 at 12:01 PM, clipsesg <lbc-...@aliceadsl.fr> wrote:
> > I get this Message in the error console :
>
> > aus3.mozilla.org : server does not support RFC 5746, see CVE-2009-3555
>
> Not sure what that means. So posting back to the list to get feedback from
> Releng.
>
> --
> Henrik Skupin
> QA Engineer
> Mozilla Corporation

PC with this issues will be cleaned in two weeks.

Same issues can be tested with portable version of Firefox.