I upgraded to Firefox 4 yesterday and today I found out I can't connect to our SA boxes. I'm getting the following error after I submit my credentials:
Secure Connection Failed
An error occurred during a connection to ****.
Renegotiation is not allowed on this SSL socket.
(Error code: ssl_error_renegotiation_not_allowed)
It only occurs when using 2-factor authentication with the second factor being a user certificate, but we use it a lot. I tried it with IVE versions 6.5r2 and 7.0R4 and the result is the same.
Hmm, it seem it was intentional on Firefox side. And according to http://en.wikipedia.org/wiki/Transport_Layer_Security it can break the client certificate authentication.
So one option would be to enable the renegotiation temporarily (http://dotomaz.tumblr.com/post/786443743/firefox-4-0b1-and-ssl-renegotiation), until a better solution is found.
hey the mentioned setting is true for ALL connections! Think about to set just:
and enter your exception like:
Trackback: https://support.mozilla.com/de/questions/744718 (comment by ssd28)
Update: look at: http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB20762