topic Hi there! I have a few in Network Security

https site not opening on Mozilla firefox And site redirection

bashiru.bayonle — Tue, 12 Mar 2019 08:24:52 GMT

Hello Professionals,

Can you help me with these challenges:

1. my https site is not opening on Mozilla firefox but its opening on Google Chrome. has anyone experience this?

2. Is it possible to configure a URL to be redirecting to a secured URL upon typing it on the web browser for the first time. E.g www.abc.com.ng should be redirected to https://abc.com.ng.

Note: if you have entered https://abc.com.ng first on the browser and later put www.abc.com.ng, it will redirect it to https://abc.com.ng. But, if you put www.abc.com.ng for the first time it wont redirect it.

Hi there! I have a few

nspasov — Wed, 19 Oct 2016 00:46:55 GMT

Hi there! I have a few questions:

1. What is the exact error that you are getting in Firefox when you are trying to access an HTTPs site? Perhaps you can even post a screenshot here.

2. Are you trying to access this at home, work, coffee shop, etc?

3. Can you post a screenshot of the certificate for an HTTPs site after it loads in Chrome? You can obtain that by clicking on the icon next to the https in the address bar > then click details from the pop-out window > then click "View Certificate"

Thank you for rating helpful posts!

Secure Connection Failed

bashiru.bayonle — Wed, 19 Oct 2016 13:41:16 GMT

Secure Connection Failed

An error occurred during a connection to abc.com.ng. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. Error code: SSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEY

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the web site owners to inform them of this problem.

Learn more…

Report errors like this to help Mozilla identify and block malicious sites

I am accessing it at work.

OK, it sounds like your work

nspasov — Wed, 19 Oct 2016 16:00:47 GMT

OK, it sounds like your work is doing HTTPs decryption/inspection. Thus, your HTTPs based sessions are being decrypted and then inspected. There are several reasons why companies do this but some of the main ones are:

1. DLP (Data Loss Prevention)

2. Threat inspection (be able to perform Malware, URL Filtering , IPS, Next Gen Firewall inspection) inside encrypted sessions

In order for this to work, your browser needs to be configured properly and my guess is that your chrome and IE browsers are configured while Firefox is not. If your computer is on the domain then this is probably all done via GPO.

If you check the certificate information that I mentioned above I bet that you will that HTTPs certificates are being issued by a local Certificate Authority that belongs to your company rather than some well known public Certificate Authority (VeriSign, GoDaddy, etc).

I hope this helps!

Thank you for rating helpful posts!