Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Avatar for Username

Prohledat stránky podpory

Vyhněte se podvodům. Za účelem poskytnutí podpory vás nikdy nežádáme, abyste zavolali nebo poslali SMS na nějaké telefonní číslo nebo abyste sdělili své osobní údaje. Jakékoliv podezřelé chování nám prosím nahlaste pomocí odkazu „Nahlásit zneužití“.

Zjistit více

Toto vlákno bylo archivováno. Pokud potřebujete pomoci, založte prosím nový dotaz.

SSL request size greater than 8K is giving connection reset error on Firefox 11

  • 2 odpovědi
  • 20 má tento problém
  • 28 zobrazení
  • Poslední odpověď od cor-el

harihat
harihat
more options

we are currently facing an issue with Firefox 10 & 11. I am seeing the termination of SSL connection when the size of the post message is greater than 8K. This caused 'connection reset' errors on the browser side. I believe this is due to the beast attack fixes on FF10 and later version. The https works fine until the request size reaches 8600 bytes. The same issue didnt happen if i proxy the FF through fiddler.

we are currently facing an issue with Firefox 10 & 11. I am seeing the termination of SSL connection when the size of the post message is greater than 8K. This caused 'connection reset' errors on the browser side. I believe this is due to the beast attack fixes on FF10 and later version. The https works fine until the request size reaches 8600 bytes. The same issue didnt happen if i proxy the FF through fiddler.

Všechny odpovědi (2)

ffxsf
ffxsf
more options

You should either use the Feedback tool or Bugzilla to report this to the developers:

https://input.mozilla.org/en-US/feedback https://bugzilla.mozilla.org/

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

The "The connection was reset" error message can be caused by a bug fix for the BEAST (Browser Exploit Against SSL/TLS) attack that the server doesn't handle.

See comment 60 in this bug report for workaround, but be aware that this makes you vulnerable to that BEAST attack.

  • bug 702111 - Servers intolerant to 1/n-1 record splitting. "The connection was reset"

Be sure to remove that environment variable after testing to prevent you from being vulnerable to that exploit.