dotomaz

Digitalni bombončki

929 notes

Firefox 4.0b1 and SSL renegotiation

Last year a new security vulnerability was discovered that allowed an attacker to use a man in a middle attack over SSL secure connection. SSL renegotiation basically  allows an attacker to send some data over secure line, then request SSL renegotiation using victim’s credentials and forwards the rest of the victims request data. This fools the server to believe that entire request came from the victim.

This is not the fault in software implementation but rather the fault in SSL protocol specification. Basically this leaves a lot of applications that use SSL with renegotiation enabled vulnerable to man in the middle attacks. That’s why Mozilla decided to completely disable SSL renegotiation in the next reincarnation of Firefox browser. When you try to access a site  that has SSL renegotiation enabled, you get the following error:

Renegotiation is not allowed on this SSL socket.
(Error code: ssl_error_renegotiation_not_allowed)

Firefox error

To enable SSL renegotiation you need to point your browser to about:config. After confirming that you know what you are doing, you need to search for:

security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref

and set it to true. After this you should be able to access the site.

Filed under firefox ssl renegotiation fault

  1. bonus-malus reblogged this from dotomaz
  2. photograghy-passion reblogged this from dotomaz
  3. location-de-voiture-en-algerie reblogged this from dotomaz
  4. taichi-routine reblogged this from dotomaz
  5. arki-busson-eim reblogged this from dotomaz
  6. hedgefunds-eim reblogged this from dotomaz
  7. maison-du-monde reblogged this from dotomaz
  8. superviseur-hse reblogged this from dotomaz
  9. tv-algerie reblogged this from dotomaz
  10. algeri-immobilier reblogged this from dotomaz
  11. como-ganhar-dinheiro-internet reblogged this from dotomaz
  12. kurt-penberg reblogged this from dotomaz
  13. milindmk reblogged this from dotomaz
  14. heated-towel-rails reblogged this from dotomaz
  15. moses-baskets reblogged this from dotomaz
  16. the-dog-kennels reblogged this from dotomaz
  17. seattle-janitorial reblogged this from dotomaz
  18. easymoneymachine reblogged this from dotomaz
  19. dotomaz posted this