Bug#766007: iceweasel: SSL error - cannot connect to certain servers

[Norbert Preining]

Hi Daniel,

> It looks like this is a really old server, which can only support SSL
> v3.0.

That could well be ... unfortunately 

> what if you add the flag "-V ssl3:ssl3" to the tstclnt implementation?

Looks better, finishes with 
...
tstclnt: using asynchronous certificate validation
tstclnt: Read from server -1 bytes
tstclnt: handshake was paused by auth certificate hook
tstclnt: authentication of server cert failed: SEC_ERROR_UNTRUSTED_ISSUER: Peer's certificate issuer has been marked as not trusted by the user.
tstclnt: exiting with return code 254

Does that mean it is actually an ssl3 problem, only?

> were you able to try a libnss3 downgrade?  if so, what were its results?

That didn't change anything (separate email I sent). 


Norbert

------------------------------------------------------------------------
PREINING, Norbert                               http://www.preining.info
JAIST, Japan                                 TeX Live & Debian Developer
GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0  ACF0 6CAC A448 860C DC13
------------------------------------------------------------------------