Newtype 0 Posted May 28 Share Posted May 28 (edited) I'm not sure if this is an ESET problem or a Firefox problem. This is the only Web site I've ever had problems with and it's been going on for months. The Web site in question is: https://www.rds.ca/ When ESET's HTTPS Traffic Scanning is enabled, the Web site's certificate is ESET. Clicking on any link will result in a "Secure Connection Failed" error in Firefox and also some images will sometimes fail to load. If I disable HTTPS Traffic Scanning, the Web site's certificate is Entrust, Inc. and everything will work correctly. This is a Web site that I need to visit every day so I don't know what to do. Edited May 28 by Newtype Fixed title Link to comment Share on other sites More sharing options...
Administrators Marcos 5,231 Posted May 28 Administrators Share Posted May 28 Works for me fine, also the links on the website open without errors. Please post a screenshot of the error you are getting and carry on as follows: Enable advanced logging under Help and support -> Technical support Reproduce the issue Stop logging Collect logs with ESET Log Collector and upload the generated archive here. Link to comment Share on other sites More sharing options...
Most Valued Members cyberhash 194 Posted May 28 Most Valued Members Share Posted May 28 (edited) Strangely the site worked for me ONCE. After i closed the tab and went back and tried to reload im getting the same "Secure Connection Failed" message as the OP. Then i closed the tab and retried and it worked again ....... Strange stuff Edited May 28 by cyberhash Newtype 1 Link to comment Share on other sites More sharing options...
Most Valued Members cyberhash 194 Posted May 28 Most Valued Members Share Posted May 28 @Newtype Have you tried clearing the cookies and site data , by clicking the padlock symbol beside the url bar and then trying again. Seems to work every time i go to the site now Link to comment Share on other sites More sharing options...
Newtype 0 Posted May 28 Author Share Posted May 28 45 minutes ago, cyberhash said: @Newtype Have you tried clearing the cookies and site data , by clicking the padlock symbol beside the url bar and then trying again. Seems to work every time i go to the site now Like you said, the site is unpredictable. Sometimes it works, rarely, but most often it doesn't. Clearing cookies and site data doesn't work for me, I tried it a bunch of times. Link to comment Share on other sites More sharing options...
Most Valued Members cyberhash 194 Posted May 28 Most Valued Members Share Posted May 28 Only one of the times that i tried to load the site i got the same error that you did and any subsequent visits has worked properly. I have clicked on links and video's and they all work correctly for me. Do you have Edge or another browser that you can try and see if its working with that ?. Link to comment Share on other sites More sharing options...
Newtype 0 Posted May 28 Author Share Posted May 28 3 minutes ago, cyberhash said: Only one of the times that i tried to load the site i got the same error that you did and any subsequent visits has worked properly. I have clicked on links and video's and they all work correctly for me. Do you have Edge or another browser that you can try and see if its working with that ?. It works with Edge. Have you tried clearing cookies and site data, then shutting down Firefox, opening it again and trying the site? For me that never works. Link to comment Share on other sites More sharing options...
itman 1,740 Posted May 28 Share Posted May 28 (edited) 13 hours ago, Newtype said: The Web site in question is: https://www.rds.ca/ I can access the home web page w/o issue in Firefox. However, selecting any content on that page results in the Secure Connection Failed message. I scanned the web site at QUALS SSL Server test web site which noted the site uses HSTS: https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security . HSTS is used to protect against man-in-the-middle attacks which is actually what Eset is doing when intercepting browser web traffic to scan it via its HTTPS scan processing. Appears HSTS processing is handled differently in Chrome/Edge than in Firefox when Eset HTTPS scanning is deployed. Edited May 28 by itman Newtype 1 Link to comment Share on other sites More sharing options...
itman 1,740 Posted May 28 Share Posted May 28 (edited) An update here. The Secure Connection Failed message only occurs for select web page links. For me, its the feature article link on home page and select sub-domain web pages. Appears to me to be an issue with this domain. Edited May 28 by itman Link to comment Share on other sites More sharing options...
Newtype 0 Posted May 28 Author Share Posted May 28 4 hours ago, itman said: I can access the home web page w/o issue in Firefox. However, selecting any content on that page results in the Secure Connection Failed message. I scanned the web site at QUALS SSL Server test web site which noted the site uses HSTS: https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security . HSTS is used to protect against man-in-the-middle attacks which is actually what Eset is doing when intercepting browser web traffic to scan it via its HTTPS scan processing. There's an alternate version of this Web site that's in English and doesn't have any of the issues that the French version has. https://www.tsn.ca/ Does that Web site use HSTS as well? Link to comment Share on other sites More sharing options...
itman 1,740 Posted May 28 Share Posted May 28 29 minutes ago, Newtype said: Does that Web site use HSTS as well? Yes it does. Must be some other problem with the French web site. Newtype 1 Link to comment Share on other sites More sharing options...
cofer123 14 Posted May 29 Share Posted May 29 (edited) Could it be related to this bug of Firefox? It currently has a size limit of 1024 HSTS entries, safely stored on a .txt file by the way, and once that fills up (happens within a few days for me) then it behaves in odd ways, sometimes no longer enforcing secure connections even with HSTS headers present. Why Mozilla in their wisdom adopted such a terrible implementation is beyond me, but I've been running into problems with sites randomly missing images/broken layouts for quite a while and it only happens on Firefox. They've apparently "fixed" that on recent updates by doubling the limit to 2048 entries, so instead of a few days it might take a couple of weeks before we run into that limitation again. Edit: here is an in-depth explanation about Firefox's behavior on this matter. Edited May 29 by cofer123 Link to comment Share on other sites More sharing options...
Newtype 0 Posted May 29 Author Share Posted May 29 1 hour ago, cofer123 said: Could it be related to this bug of Firefox? I don't think it's the same. It happens even on a fresh install of Firefox. To be sure, I just tried a portable version of Firefox Beta and the issue was still occurring. If this is a site-specific issue, is there a way to disable HTTPS scanning for that Web site only? Link to comment Share on other sites More sharing options...
Solution itman 1,740 Posted May 29 Solution Share Posted May 29 3 hours ago, Newtype said: If this is a site-specific issue, is there a way to disable HTTPS scanning for that Web site only? Refer to this forum posting: https://forum.eset.com/topic/9714-ssl-inspection-exclusion/?do=findComment&comment=50366 Just remember that with the web site excluded, Eset won't scan'detect malware delivered via HTTPS for the web site. Newtype 1 Link to comment Share on other sites More sharing options...
Newtype 0 Posted May 30 Author Share Posted May 30 19 hours ago, itman said: Refer to this forum posting: https://forum.eset.com/topic/9714-ssl-inspection-exclusion/?do=findComment&comment=50366 Just remember that with the web site excluded, Eset won't scan'detect malware delivered via HTTPS for the web site. Thank you, this worked! Link to comment Share on other sites More sharing options...
Recommended Posts