[f-nsp] Firefox 10.x and SI-SSL

[Alex Sharaz]

Hi
Think we had something similar but it occurred when Microsoft rolled out a TLS 1.0 patch. WE were running 10.2.1q and although every other browser on the planet still worked, IE didn't. Our issues started because we insert a Client-IP HTTP header in the ssl stream on our ssl-terminated services. Removing the Client-IP insert fixed the problem short term but everything was really fixed by moving to the latest 10.2.1 code which is 10.2.1y. 
Rgds
Alex


-----Original Message-----
From: foundry-nsp-bounces at puck.nether.net [mailto:foundry-nsp-bounces at puck.nether.net] On Behalf Of Lutz Knabenreich
Sent: Monday, February 06, 2012 9:03 AM
To: foundry-nsp at puck.nether.net
Subject: [f-nsp] Firefox 10.x and SI-SSL

Hello colleagues,

since Mozilla started to release Firefox 10 on January 31st we are seeing some issues with SSL terminated websites on SI Platform running version 11g.

As far as we could determine the SSL connection between the firefox 10.x clients and the SI is reset by the SI when starting to transfer application data. By now we did not see any successful connection between the SI and the realservers in question, so it looks like no data gets requested by the SI from the realservers.

Is there anybody on the list who is able to confirm this behavior?

We do not know if the lower SI software release versions (e.g version
10.x) behave the same way. But we know that this issue is not seen when using firefox 9.x versions.

As we have access to ADX platforms as well, Version 12.3.01d is not affected.

Best regards
Mit freundlichen Gruessen
Lutz Knabenreich

-- 
HKN GmbH                     Tel: +49 211 875505-0
Lutz Knabenreich             Fax: +49 211 87550555
Am Rheintor 7                    http://www.hkn.de
47829 Krefeld            mailto:knabenreich at hkn.de

Technik Standort:
In der Steele 29
40599 Duesseldorf

Eingetragen am Amtsgericht Krefeld       HRB 12335
Geschaeftsfuehrer                 Lutz Knabenreich
_______________________________________________
foundry-nsp mailing list
foundry-nsp at puck.nether.net
http://puck.nether.net/mailman/listinfo/foundry-nsp
***********************************************************
To view the terms under which this email is distributed,
please go to http://www2.hull.ac.uk/legal/disclaimer.aspx
***********************************************************