Cannot Browse webpage on Orbitel Website

Users and developers helping users with generic and technical Pale Moon issues on all operating systems.

Moderator: trava90

Forum rules
This board is for technical/general usage questions and troubleshooting for the Pale Moon browser only.
Technical issues and questions not related to the Pale Moon browser should be posted in other boards!
Please keep off-topic and general discussion out of this board, thank you!
ascii_elite

Re: Cannot Browse webpage on Orbitel Website

Unread post by ascii_elite » 2011-11-16, 06:27

I tried Pale Moon 8.0 today on a different computer and at a different site with a different Internet connection (but still AT&T as the ISP) than than ones I primarily before in this thread.

The computer I used today ran and runs Windows XP Professional with Service Pack 2 (similar configuration as the other computer I primarily used in this thread).

The error page at the Orbitel website login page once again manifested.


I later tested Pale Moon 8.0 on yet another computer, but this time with Comcast Cable as the Internet Service Provider and with Windows XP Professional with Service Pack 3.

The error page at the Orbitel website login page manifested.

The problem does not appear to be corrected in Pale Moon 8.0.

EDIT: I now tested the Orbitel login page on the computer I originally used when I started this thread. The problem also manifested.
Last edited by ascii_elite on 2011-11-16, 06:32, edited 1 time in total.

ascii_elite

Re: Cannot Browse webpage on Orbitel Website

Unread post by ascii_elite » 2011-11-16, 06:28

Moonchild wrote:The secure login page over SSL gave the error for me as well in my test setups for v6 and v701, not v702 or v8 when I tried them.
so there's something odd going on, for sure.
What operating system(s) are used on the Pale Moon 7.0.2 and Pale Moon 8.0 est systems? What operating systems are used on the Pale Moon v6 and Pale Moon 7.0.1 test setups?

@megaman:

What operating system did you use when you tested the Orbitel login page?

megaman

Re: Cannot Browse webpage on Orbitel Website

Unread post by megaman » 2011-11-16, 06:39

ascii_elite wrote:What operating system(s) are used on the Pale Moon 7.0.2 and Pale Moon 8.0 est systems? What operating systems are used on the Pale Moon v6 and Pale Moon 7.0.1 test setups?

@megaman:

What operating system did you use when you tested the Orbitel login page?
Ha! I just got it as well.(Currently using PM 8.0.)

System using for both versions is Windows 7 Ultimate X64-bit. (I use 32-bit versions of Pale Moon because of the plugins.)

I didn't come across it on Internet Explorer 9, Firefox Nightly 11.0a1 , and The Maple Studio's ChromePlus! 1.6.4.12Beta (Based on Chromium 14).

Edit: It also affects the main site https://www.orbitel.com when it has https: instead of http.

User avatar
satrow
Forum staff
Forum staff
Posts: 1884
Joined: 2011-09-08, 11:27

Re: Cannot Browse webpage on Orbitel Website

Unread post by satrow » 2011-11-16, 12:16

Interesting, happens to me on 2x computers here (XP and W7), in 5 different Mozilla-based browsers from K-Meleon through to Nightly (x86 and x64).

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35474
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: Cannot Browse webpage on Orbitel Website

Unread post by Moonchild » 2011-11-16, 15:55

When I tested 6.0.2, 7.0.1, 7.0.2 and 8.0 it was all on the same computer, on the same o.s. (Win XP SP2) using different copies of the portable with (mostly) the same profile data - I'm still not sure what the issue is or why this one website refuses to work in half the cases and is fine other times.
I use a LOT of secure sites in my daily browsing and it's not an issue anywhere else, with any version of the browser, so it's very specific to this site and this certificate.

Also, the notification on the page you get: "Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site." is there for a reason ;) You might want to let them know that something is amiss with their SSL.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

ascii_elite

Re: Cannot Browse webpage on Orbitel Website

Unread post by ascii_elite » 2011-11-16, 20:50

cymroly wrote:Interesting, happens to me on 2x computers here (XP and W7), in 5 different Mozilla-based browsers from K-Meleon through to Nightly (x86 and x64).
I think something might be incorrect with regards to the logic and grammar of your statement.

Are you reporting that the problem manifests for you in other Mozilla-based browsers?

ascii_elite

Re: Cannot Browse webpage on Orbitel Website

Unread post by ascii_elite » 2011-11-16, 20:52

megaman wrote:It also affects the main site https://www.orbitel.com when it has https: instead of http.
This is not unexpected, but it is a good point to note.

ascii_elite

Re: Cannot Browse webpage on Orbitel Website

Unread post by ascii_elite » 2011-11-16, 20:53

Moonchild wrote:I'm still not sure what the issue is or why this one website refuses to work in half the cases and is fine other times.
I use a LOT of secure sites in my daily browsing and it's not an issue anywhere else, with any version of the browser
It should be noted that, according to your reports, you could initially browse the login page of the Orbitel website. It would be reasonable to assume that if the problem that is manifesting when browsing the secure Orbitel website is not manifesting, the problem may also not manifest on other websites. The converse is also true.

For me, the problem with the Pale Moon and the Orbitel secure site manifest 100% of the time; I have not been able to browse the website with Pale Moon unless I use the workaround you provided earlier in tis thread. I, myself, have not noticed the problem yet to occur on other websites (though after noticing the problem with Pale Moon and the Orbitel website, I significantly decreased my use of Pale Moon)
Moonchild wrote:Also, the notification on the page you get: "Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site." is there for a reason ;) You might want to let them know that something is amiss with their SSL.
The problem seems to be that Pale Moon specifically does not function correctly to handle the secure Orbitel website correctly or (inclusively) that the Orbitel website does not function correctly (including a defect in a security certificate) to properly be verified by pale Moon.

Orbitel uses its secure site for purchases and user management of its services. It, wherefore, has an interest (financial and other) that users are able to visit its secure website. If the problem were reported to Orbitel, the problem may no longer manifest; Orbitel may either fix or workaround the issue so that traffic to its secure site occurs.

My concern is that if the problem were reported to Orbitel and Pale Moon is at fault, the underlying problem would remain and have the potential to manifest in the future.

Orbitel has options of identifying a browser. The potential options I can think of are: 1. Examining the reported useragent string 2. Performing a test of behavior (often scripted). From what I understand about the advertised differences between Pale Moon and Mozilla Firefox, Pale Moon with a Firefox useragent string should not be determinable different than Firefox at the server side.

I have tried forcing my Pale Moon useragent string to match that of Mozilla Firefox. The problem still persisted and the Orbitel secure web page did not load on Pale Moon.

Because I believe that Orbitel may not be able to differentiate between Pale Moon and Mozilla Firefox traffic and the problem described in this thread manifests on Pale Moon, but not on Firefox, I believe that the problem might be the Pale Moon browser itself.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35474
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: Cannot Browse webpage on Orbitel Website

Unread post by Moonchild » 2011-11-16, 21:08

  1. The problem seems to be that you are convinced that pale moon is at fault - if that is the case, then Orbitel can't provide a workaround.
    Not reporting this to Orbitel would be the wrong thing to do. Without info from the server-side, it's going to be very hard to figure out what is going on.
  2. Take into account that this problem ONLY manifests itself on the orbitel website. if there was something fundamentally flawed in Pale Moon, it would occur on more sites, which it hasn't.
  3. Take into account that this occurs on varying browser installations, depending on system (as you have seen) it either consistently fails or succeeds with the same browser version on that particular system. That browser version may display a different result on a different computer. That makes this a very strange problem that obviously is not related to the browser version. I can still browse to the secure login page on 7.0.2 and 8.0 on my system but not with 7.0.1 or 6.x - but megaman has said that he could not with 8.0, for example.
  4. Also consider that the SSL/TLS code is not something I will ever touch. I leave that in the capable hands of the TLS/encryption gurus. As such this is (like most of the browser) 100%, character for character, the exact same code as Firefox.
All this combined points clearly to an oddity at the Orbitel server, and not at a fundamental problem or bug in Pale Moon. There are many thinkable causes for this, but none of them are obvious, and none of them can be verified without server-side information.

EDIT: Shot Orbitel a message with the kind request to look into this and to let me know as much info as possible on this problem from their end.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

User avatar
satrow
Forum staff
Forum staff
Posts: 1884
Joined: 2011-09-08, 11:27

Re: Cannot Browse webpage on Orbitel Website

Unread post by satrow » 2011-11-16, 22:59

ascii_elite wrote:
cymroly wrote:Interesting, happens to me on 2x computers here (XP and W7), in 5 different Mozilla-based browsers from K-Meleon through to Nightly (x86 and x64).
I think something might be incorrect with regards to the logic and grammar of your statement.

Are you reporting that the problem manifests for you in other Mozilla-based browsers?
I'm under-educated.

Yes, I have the same issue with K-Meleon (like FX 3.5), FX 8, 10 and 11, as well as PM8. I also tried some of the later browsers in 32bit and also 64bit modes.

On the http site (FX8x86):
"The page isn't redirecting properly
Firefox has detected that the server is redirecting the request for this address in a way that will never complete.
This problem can sometimes be caused by disabling or refusing to accept
cookies."

On the https site (same browser):
"Secure Connection Failed
An error occurred during a connection to http://www.orbitel.com.
Peer's certificate has an invalid signature.
(Error code: sec_error_bad_signature)
The page you are trying to view can not be shown because the authenticity of the received data could not be verified.
Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site."

There is a cookie from Orbitel in the browser, that narrows down the http "cookie handling" problem somewhat.

I ran a quick check with an online website testing tool: https://browsermob.com/free-website-per ... 932ca1e3c0 which gets the same error on http.

My guess is that it's a server-side problem.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35474
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: Cannot Browse webpage on Orbitel Website

Unread post by Moonchild » 2011-11-16, 23:06

Some more research on my own has provided a solution.

As explained on this page there is a specific issue with certain older certificates (less common intermediate CA cert).

Normally, a web server would present a cert -with- the authenticity chain of certificates up to the root. Orbitel obviously does not (their error). In that case it depends on whether you have previously visited a different secure site with the same CA or not, hence the irregularity. If you would have visited such a site, Pale Moon (or any other browser) would have grabbed the CA cert and stored it for future reference.

As a workaround/fix, you will need the Intermediate CA for Secure Site Pro or Premium SSL used with certificates enrolled before October 10, 2010 from Verisign for the server certificates to work.

For your convenience, I have exported this particular certificate here which you need to import in your browser under Options -> Advanced -> tab Encryption -> [View Certificates] -> tab Servers -> [Import]

I have verified that starting with a blank profile in Pale Moon 8.0, you cannot browse to the site. Importing the CA certificate linked to above fixes the problem.

Have a nice day ;-)
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

ascii_elite

Re: Cannot Browse webpage on Orbitel Website

Unread post by ascii_elite » 2011-11-16, 23:26

Moonchild wrote:
  1. The problem seems to be that you are convinced that pale moon is at fault - if that is the case, then Orbitel can't provide a workaround.
It is not that I was convinced, rather I thought it more likely given the information I had. I did not have access to your code base nor what exactly was different from the original Mozilla code, but that there were differences.
Moonchild wrote:EDIT: Shot Orbitel a message with the kind request to look into this and to let me know as much info as possible on this problem from their end.
HOpefulyy, Orbitel shall fix their site.

ascii_elite

Re: Cannot Browse webpage on Orbitel Website

Unread post by ascii_elite » 2011-11-16, 23:28

Moonchild wrote:Some more research on my own has provided a solution.

As explained on this page there is a specific issue with certain older certificates (less common intermediate CA cert).

Normally, a web server would present a cert -with- the authenticity chain of certificates up to the root. Orbitel obviously does not (their error). In that case it depends on whether you have previously visited a different secure site with the same CA or not, hence the irregularity. If you would have visited such a site, Pale Moon (or any other browser) would have grabbed the CA cert and stored it for future reference.

As a workaround/fix, you will need the Intermediate CA for Secure Site Pro or Premium SSL used with certificates enrolled before October 10, 2010 from Verisign for the server certificates to work.

For your convenience, I have exported this particular certificate here which you need to import in your browser under Options -> Advanced -> tab Encryption -> [View Certificates] -> tab Servers -> [Import]

I have verified that starting with a blank profile in Pale Moon 8.0, you cannot browse to the site. Importing the CA certificate linked to above fixes the problem.
Very nice work. Thanks.

Locked