bug reported at 'PM 27.9.4 for Snow Leopard'

The place to report Pale Moon specific bugs on Linux and other operating systems.

Moderator: satrow

retroburrower
Hobby Astronomer
Hobby Astronomer
Posts: 15
Joined: Mon, 11 Sep 2017, 01:48

bug reported at 'PM 27.9.4 for Snow Leopard'

Unread postby retroburrower » Fri, 12 Oct 2018, 20:47

...as reported by me on said thread:
viewtopic.php?f=41&t=19694&sid=5eb03f687d3f85de7c04151f1245d72d#p154104
New Moon reports successive attempts of a TLS handshake, but then winds up in an endless loop. While it never gets to the Welcome Page, it does log me in, which PM 27.3.0 fails to do.

While this is being corrected, please add a 3rd option to Certificate Validation under Advanced Preferences:
"When an OCSP server fails, treat the certificate as valid."
Such workarounds are necessary due to servers victimising our use of a "misfit" broswer as if it poses a security threat to the victimisers.
Last edited by retroburrower on Fri, 12 Oct 2018, 20:54, edited 1 time in total.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 22269
Joined: Sun, 28 Aug 2011, 17:27
Location: 58.5°N 15.5°E
Contact:

Re: bug reported at 'PM 27.9.4 for Snow Leopard'

Unread postby Moonchild » Sun, 14 Oct 2018, 07:26

First, kindly keep threads in the correct board and don't create duplictes in other boards.

Not sure what you hope to achieve posting about an unofficial old Mac version in he Linux board.

When an OCSP server fails, blatantly treating a certificate as valid is not good practice and I won't build that into the browser, sorry. If an OCSP server fails, the browser has to still verify the certificate and its revocation status through other means if possible. OCSP not responding in time is unfortunately relatively common and in that case you would just bypass any further checking... That is very dangerous!
Improving Mozilla code: You know you're on the right track with code changes when you spend the majority of your time deleting code.

"If you want to build a better world for yourself, you have to be willing to build one for everybody." -- Coyote Osborne

retroburrower
Hobby Astronomer
Hobby Astronomer
Posts: 15
Joined: Mon, 11 Sep 2017, 01:48

Re: bug reported at 'PM 27.9.4 for Snow Leopard'

Unread postby retroburrower » Wed, 17 Oct 2018, 01:46

First, this isn't a duplicate, as only the original was focused on the outdated 27.0.3, where there was total failure, while here it's about 27.9.4 having a bug what appears to be a TLS bug that wasn't mentioned in the original.

2nd, the parent page says "Linux & other." Being based on Unix, so facing similar networking issues, MacOS should qualify as "other."

Last & not least, I didn't realise that timeouts typically were at fault here, rather than a general bias against non-Windows browsers.

yami_
Fanatic
Fanatic
Posts: 201
Joined: Thu, 26 Apr 2018, 11:05

Re: bug reported at 'PM 27.9.4 for Snow Leopard'

Unread postby yami_ » Wed, 17 Oct 2018, 09:22

The correct board is viewforum.php?f=41. This board is for bug reports.
Off-topic:
Also:

Code: Select all

$ ./drill -D wifiauth.hdpl.org @192.168.6.1
;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 44333
;; flags: qr rd ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; wifiauth.hdpl.org.   IN      A

;; ANSWER SECTION:

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 4 msec
;; EDNS: version 0; flags: do ; udp: 4096
;; SERVER: 192.168.6.1
;; WHEN: Wed Oct 17 11:18:28 2018
;; MSG SIZE  rcvd: 46
cat came back from Berkeley waving flags
- rob pike


Return to “Bug reports (Linux & other)”

Who is online

Users browsing this forum: No registered users and 1 guest