Bug#766007: iceweasel: SSL error - cannot connect to certain servers

[Norbert Preining]

Package: iceweasel
Version: 31.2.0esr-2
Severity: important

Hi all,

I get the following error when connecting to the universities
internal web server:

------
Secure Connection Failed

An error occurred during a connection to MY.SERVER:PORT. SSL peer rejected a handshake message for unacceptable content. (Error code: ssl_error_illegal_parameter_alert)

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
        Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
---------

I tried the following:
* start with -safe-mode : no changes
* start from a clean state (removed ~/.mozilla/firefox) with -safe-mode:
	no changes
* tried upstream original firefox: worked out of the box
* tried chromium (Debian): worked out of the box

That means that something in the SSL handling in Debian's Iceweasel
is broken.

Thanks

Norbert

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.17-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iceweasel depends on:
ii  debianutils               4.4
ii  fontconfig                2.11.0-6.1
ii  libasound2                1.0.28-1
ii  libatk1.0-0               2.14.0-1
ii  libc6                     2.19-11
ii  libcairo2                 1.12.16-5
ii  libdbus-1-3               1.8.8-2
ii  libdbus-glib-1-2          0.102-1
ii  libevent-2.0-5            2.0.21-stable-1.1
ii  libffi6                   3.1-2
ii  libfontconfig1            2.11.0-6.1
ii  libfreetype6              2.5.2-2
ii  libgcc1                   1:4.9.1-18
ii  libgdk-pixbuf2.0-0        2.31.1-2+b1
ii  libglib2.0-0              2.42.0-2
ii  libgtk2.0-0               2.24.25-1
ii  libhunspell-1.3-0         1.3.3-3
ii  libnspr4                  2:4.10.7-1
ii  libnss3                   2:3.17.2-1
ii  libpango-1.0-0            1.36.8-2
ii  libsqlite3-0              3.8.7-1
ii  libstartup-notification0  0.12-4
ii  libstdc++6                4.9.1-18
ii  libvpx1                   1.3.0-2.1
ii  libx11-6                  2:1.6.2-3
ii  libxext6                  2:1.3.3-1
ii  libxrender1               1:0.9.8-1
ii  libxt6                    1:1.1.4-1
ii  procps                    2:3.3.9-8
ii  zlib1g                    1:1.2.8.dfsg-2

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
ii  fonts-mathjax          2.4-2
ii  fonts-oflb-asana-math  000.907-6
ii  fonts-stix [otf-stix]  1.1.1-1
ii  libcanberra0           0.30-2.1
ii  libgnomeui-0           2.24.5-3
ii  libgssapi-krb5-2       1.12.1+dfsg-10
pn  mozplugger             <none>

-- no debconf information