topic Re: PR_END-OF_FILE_ERROR in firefox in General Topics

PR_END-OF_FILE_ERROR in firefox

raji_toor — Thu, 09 Jul 2020 15:46:33 GMT

I am having trouble with https://support.microsoft.com in firefox and getting this message. It works fine in chrome though, After i disable decryption for it, it works fine in firefox as well. Why it is breaking in one browser with decryption enabled. Maybe there are other sites as well that i yet don't know are breaking as well for same reason.

Re: PR_END-OF_FILE_ERROR in firefox

OtakarKlier — Thu, 09 Jul 2020 19:34:59 GMT

Hello,

Decrypting Microsoft is generally a bad idea as their site and applications use certificate pinning and will break if you try to decrypt it.

Here is a good article on resources:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClgHCAS

Regards,

Re: PR_END-OF_FILE_ERROR in firefox

Retired Member — Fri, 10 Jul 2020 07:42:17 GMT

@raji_toor

Could you possibly provide more details about your setup - Chrome version, Firefox version, PAN-OS version? Configuration of Decryption Profile used in the Decryption Rule this traffic is hitting (from CLI: show profiles decryption <decryption-profile-name>)?

Have you checked the ciphers negotiated by Chrome and Firefox through packet-sniffing the TLS/SSL handshake?

@OtakarKlier

Wouldn't you agree that properly implemented HPKP for a website would result in error reported by browser, not by PA?

Also it looks this website does not implement it (according to the https://gf.dev/hpkp-test).