SSL error message upon browsing secured sites.

[Sharath]

Hi All,

I am getting the following error message when trying to browse to any https
site
Error establishing an encrypted connection to www.google.com Error
code -12194
I have checked under tools>options>Advanced>Verification and "Do not use
OCSP for certificate verification is unchecked". Also reinstalled firefox
with no sucess. The error message prompts up every time i browse to https
site. Till last weekend firefox was working fine and i have not installed
any other programs.
Any help will be apperciated

Thanks and regards
Sharath

[squaredancer]

On 12/03/2007 10:16, CET - what odd quirk of fate caused Sharath to
generate the following:? :

if "Do not use OCSP for certificate verification" is truely unchecked
(do you actually mean that??) then CHECK the tick-box, because you *DO
NOT* want FF to use that option!

reg

[Sharath]

I am sorry for having misguided.
"Do not use OCSP for certificate verification" is CHECKED.. My mistake..
I also checkd on a different comp: and got the same error message
Can someone try it on their end as well.
I am using Firefox 2.0 and not installed any updates as i m running a
testting utility which works only with 2.0.(selenium)

"squaredancer" <square...@t-online.de> wrote in message
news:juGdnW6dHdd0o2jY...@mozilla.org...

[squaredancer]

On 12/03/2007 12:57, CET - what odd quirk of fate caused Sharath to

hmmm - sorry, but I can't tell you anything - I googled the error 12194
but got 120.000 hits.

Do you have any extensions installed (also called addons) - if you do,
try starting FF in "safe mode" to see if Google is still blocked - but I
doubt if that is the case, as you tried on two different computers! (or
are they both set up the same?)

reg

[Thomas Aeschbacher]

Sharath schrieb:

> I am sorry for having misguided.
> "Do not use OCSP for certificate verification" is CHECKED.. My mistake..
> I also checkd on a different comp: and got the same error message
> Can someone try it on their end as well.
> I am using Firefox 2.0 and not installed any updates as i m running a
> testting utility which works only with 2.0.(selenium)
>

This may not be your actual problem but:
<http://www.openqa.org/selenium/>
On this website it says "Supported Platforms: Firefox 0.8 to 1.5". So I
don't get it why you use FF2...

--
***Gewalt ist das Mittel des geistig Schwachen***
http://www.board.swizz-elite.ch

[squaredancer]

On 12/03/2007 13:49, CET - what odd quirk of fate caused Thomas
Aeschbacher to generate the following:? :

> Sharath schrieb:
>
>> I am sorry for having misguided.
>> "Do not use OCSP for certificate verification" is CHECKED.. My mistake..
>> I also checkd on a different comp: and got the same error message
>> Can someone try it on their end as well.
>> I am using Firefox 2.0 and not installed any updates as i m running a
>> testting utility which works only with 2.0.(selenium)
>>
>>
>
> This may not be your actual problem but:
> <http://www.openqa.org/selenium/>
> On this website it says "Supported Platforms: Firefox 0.8 to 1.5". So I
> don't get it why you use FF2...
>
>

good find, Thomas....

Sharath may get better solutions in one of the selenium forums at:
http://forums.openqa.org/index.jspa

there is a "guest" setting, but that usually means that you can't post...

reg

[Nir]

just check one thing :
goto Tools>Options>Advanced>Encryption.
(under certificate) select 'Ask me every time

[Sharath]

I am using Selenium RC 0.9.0 and supported platforms are
Firefox 1.5.0.8 and 2.0
http://openqa.org/selenium-rc/
Hope that answers it

"Thomas Aeschbacher" <taesch...@aol.de> wrote in message
news:3OSdnZeN69_90WjY...@mozilla.org...

[Sharath]

Hi Nir
tried the following

goto Tools>Options>Advanced>Encryption.
> (under certificate) select 'Ask me every time

Did not work.
Tried starting firefox in safe mode
Same problem
Uninstalled all toolbar and extensions..addons
Same problem

Sharath

"Nir" <nir...@hotmail.com> wrote in message
news:UrqdncnQgoOr_mjY...@mozilla.org...

[Nir]

Sharath wrote:
> Hi Nir tried the following goto Tools>Options>Advanced>Encryption.
>> (under certificate) select 'Ask me every time
> Did not work. Tried starting firefox in safe mode Same problem
> Uninstalled all toolbar and extensions..addons Same problem

close FF.
create a test profile : start > run , type "firefox.exe" -P
start with the new profile . same problem?

[Sharath]

I tried a new windows profile and started firefox using the below command,
Stil facing the same problem with all https sites.

"Nir" <nir...@hotmail.com> wrote in message

news:_92dnRNbh9z3JmvY...@mozilla.org...

[Sharath]

Any suggestions regarding the same..

Sharath

"Sharath" <cs.sh...@gmail.com> wrote in message
news:z4udnTIVGLfzaWXY...@mozilla.org...

[Daniel Hunt]

After some more investigation, I am finding that FF is waiting for me to refresh the browser again before it gives me the security certificate warning.  IE if I goto a site that has a security cert that FF does not have the trusted root for, it will appear to hang - I get a continuous busy cursor for as long as my patience holds out. 

 

However, if i click the right pointing error to the right of the address bar (tooltip for this button says "goto address in location bar") then I will get the security certificate warning.  This did not happen up until the last week or two so up until the last update to Firefox.  Before, when I went to the same Web site, FF would give me the security warning dialog without me needing to click the 'goto' button a second time.

 

Any thoughts?

 

dan

[Nelson B]

Sharath wrote:
> I am getting the following error message when trying to browse to any https
> site
> Error establishing an encrypted connection to www.google.com Error
> code -12194

According to
http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html#1043716

error code -12194 indicates that the server to which you connected send you
an SSL "Access Denied" error alert. Normally that message is only sent by
SSL servers that request your client to authenticate itself with a
certificate, and then reject that certificate. That error alert means
"Peer received a valid certificate, but access was denied."

But you report that you're seeing it on all https servers, and the vast
majority of SSL servers never request client authentication.

So, I think the most likely explanation is that you've got some proxy
server or proxy software that is intentionally interfering with all
your https connections. There are so-called firewall products out there,
and so called anonymous browsing products, and so-called advertising
blockers that intentionally block all https traffic because they can't
snoop on it and so they think they're protecting your security by
disallowing all connections on which they cannot snoop. In my opinion,
all such software should be completely expunged from your system..

So, check and see if your browser has become configured to use a proxy,
and if so, try disabling that. Second, if you're using some third party
firewall product, or some so-called anonymous browsing software, try
disabling that and see if the problem goes away. (I predict it will.)
If it does, you know what software is REALLY at fault.

> I have checked under tools>options>Advanced>Verification and "Do not use
> OCSP for certificate verification is unchecked".

OCSP is not relevant to this error.

> Also reinstalled firefox with no sucess.

So, it's time to start looking at other software than FireFox.

> The error message prompts up every time i browse to https site.
> Till last weekend firefox was working fine and i have not installed
> any other programs.

At least not knowingly. :)

> Any help will be apperciated

--
Nelson B

[Sharath]

Anyone got any more suggestions regarding the same.....

Sharath

"Sharath" <cs.sh...@gmail.com> wrote in message
news:z4udnTIVGLfzaWXY...@mozilla.org...