topic Firefox Error ssl_error_rx_unexpected_new_session_ticket in General Topics

Firefox Error ssl_error_rx_unexpected_new_session_ticket

diennea — Tue, 20 Nov 2012 14:11:16 GMT

Hi,

after PA-500 upgrade (from 4.1.7 to 4.1.9) I solved SSL problem with Chrome but now I have a problem with firefox opening SSL pages (when they was decrypted by the firewall).

For example opening https://www.google.com I receive this error:

"SSL ha ricevuto un messaggio inatteso di tipo New Session Ticket handshake.

(Codice di errore: ssl_error_rx_unexpected_new_session_ticket)"

Using IE or Chrome all works fine.

I'm using Firefox 10.0.10 ESR

As you can see firefox is correctly configured to trust my decryption certificate.

Decrypt

Re: Firefox Error ssl_error_rx_unexpected_new_session_ticket

mikand — Tue, 20 Nov 2012 16:53:53 GMT

I assume you have fully restarted firefox on this specific client (verify with task manager that you dont have any firefox.exe leftover)?

Because firefox (and IE) will cache various stuff as long as at least one window is still being opened.

If you in the middle of this have upgraded your PA (or rather rebooted it) the cached ssl session will no longer be valid.

Re: Firefox Error ssl_error_rx_unexpected_new_session_ticket

diennea — Wed, 21 Nov 2012 13:01:59 GMT

After few hours problem disappear.

I don't know why.

Thanks