[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #10084 [Applications/Tor Browser]: Tech Evangelism - ssl_error_bad_mac_alert -> website is broken (was: Secure Connection Failure)

#10084: Tech Evangelism - ssl_error_bad_mac_alert -> website is broken
--------------------------------------+----------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:  worksforme
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+----------------------------
Changes (by bugzilla):

 * status:  new => closed
 * keywords:  tbb-torbutton =>
 * resolution:   => worksforme
 * severity:   => Normal


Comment:

 >essentially disabled RC4, meaning that instead of
 TLS_RSA_WITH_RC4_128_SHA, the server picks TLS_RSA_WITH_3DES_EDE_CBC_SHA.
 There appears to be a bug in the server's implementation or use of that
 cipher suite, because I can reproduce the bad MAC error using curl
 compiled with openssl
 https://bugzilla.mozilla.org/show_bug.cgi?id=1144065

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10084#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs