Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Secure connection failed for Waterfox user-agents #2073

Closed
SpiritQuaddicted opened this issue Mar 15, 2018 · 6 comments
Closed

Secure connection failed for Waterfox user-agents #2073

SpiritQuaddicted opened this issue Mar 15, 2018 · 6 comments

Comments

@SpiritQuaddicted
Copy link

SpiritQuaddicted commented Mar 15, 2018

There are reports about people using the Waterfox fork of Firefox not being able to access certain websites. They are getting "Secure connection failed" errors. They can change their user-agents to work around this. It seems not to happen for Linux users.

BrowserWorks/Waterfox#178 mentions

That's pretty much the only hint at what be going on, they are all served by Caddy.

I suspect the MITM detection to be the culprit as that is the only place where *fox mentioned in the code. Could someone take a look at this? Thanks! :)

@iimpulse9
Copy link

Just found https://quakewiki.org has the same issue and of course https://www.quaddicted.com.

@mholt
Copy link
Member

mholt commented Mar 15, 2018

What's in the server logs when the connection fails?

@mholt
Copy link
Member

mholt commented Mar 15, 2018

All those sites work fine for me in Waterfox. I'd love to see what the logs are. (Edit: I'm not using Linux either.)

@SpiritQuaddicted
Copy link
Author

For https://www.quaddicted.com/ :

I installed Waterfox 56.0.4.1 (64-bit) and the addon UAControl.
I set the user-agent for quaddicted.com to "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0.2 Waterfox/56.0.4"
I get

Secure Connection Failed

The connection to www.quaddicted.com was interrupted while the page was loading.

Clicking the cert info thing in the address bar shows the normal cert dialog and all is fine there.

I see absolutely nothing about that request in the server logs that are configured as

log / /var/log/caddy/access.log "{combined}"
errors /var/log/caddy/errors.log

With ngrep -q "*" all I see is one packet from my client and one packet back from the server. HTTPS so they are encrypted and I have no clue what they say...

If I set the user agent to "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0.2" (same but without the Waterfox suffix), it works fine.

If I set the user agent to "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0.2 " (trailing space), it breaks in the same way as before.

@mholt
Copy link
Member

mholt commented Mar 15, 2018

Which version of Caddy are you using? And what does the process log say? (You'll have to use -log to get that.)

@SpiritQuaddicted
Copy link
Author

Oh ouch, it was still on 0.10.4. It seems to work fine with 0.10.11 now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants